GIAC GIAC Information Security GISF Questions & Answers

• Question 31:

  Peter, a malicious hacker, wants to perform an attack. He first compromises computers distributed across the internet and then installs specialized software on these computers. He then instructs the compromised hosts to execute the attack. Every host can then be used to launch its own attack on the target computers. Which of the following attacks is Peter performing?

  A. Teardrop attack

  B. SYN flood attack

  C. Ping of Death attack

  D. DDoS attack

  Correct Answer: D

• Question 32:

  Which of the following types of attack can guess a hashed password?

  A. Teardrop attack

  B. Evasion attack

  C. Denial of Service attack

  D. Brute force attack

  Correct Answer: D

• Question 33:

  Which of the following logs contains events pertaining to security as defined in the Audit policy?

  A. DNS server log

  B. Application log

  C. System log

  D. Directory Service log

  E. Security log

  F. File Replication Service log

  Correct Answer: E

• Question 34:

  You are the project manager for TTX project. You have to procure some electronics gadgets for the project. A relative of yours is in the retail business of those gadgets. He approaches you for your favor to get the order. This is the situation of ____.

  A. Bribery

  B. Irresponsible practice

  C. Illegal practice

  D. Conflict of interest

  Correct Answer: D

• Question 35:

  Which of the following types of firewalls forms a session flow table?

  A. Proxy server firewall

  B. Packet filtering firewall

  C. Stateless packet filtering firewall

  D. Stateful packet filtering firewall

  Correct Answer: D

• Question 36:

  You work as the project manager for Bluewell Inc. Your project has several risks that will affect several stakeholder requirements. Which project management plan will define who will be available to share information on the project risks?

  A. Risk Management Plan

  B. Communications Management Plan

  C. Stakeholder management strategy

  D. Resource Management Plan

  Correct Answer: B

• Question 37:

  Which of the following are the types of Intrusion detection system?

  A. Server-based intrusion detection system (SIDS)

  B. Client based intrusion detection system (CIDS)

  C. Host-based intrusion detection system (HIDS)

  D. Network intrusion detection system (NIDS)

  Correct Answer: CD

• Question 38:

  Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.

  A. It is a digital representation of information that identifies users.

  B. It uses asymmetric key pairs.

  C. It provides security using data encryption and digital signature.

  D. It uses symmetric key pairs.

  Correct Answer: BC

• Question 39:

  John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks? Each correct answer represents a complete solution. Choose all that apply.

  A. Dictionary attack

  B. Rule based attack

  C. Brute Force attack

  D. Hybrid attack

  Correct Answer: ACD

• Question 40:

  Which of the following statements are true about classless routing protocols? Each correct answer represents a complete solution. Choose two.

  A. They extend the IP addressing scheme.

  B. The same subnet mask is used everywhere on the network.

  C. They support VLSM and discontiguous networks.

  D. IGRP is a classless routing protocol.

  Correct Answer: AC