GIAC GIAC Information Security GSEC Questions & Answers

• Question 271:

  Which of the following is a benefit to utilizing Cygwin for Windows?

  A. The ability to install a complete Red Hat operating system Install on Windows.

  B. The ability to bring much more powerful scripting capabilities to Windows.

  C. The ability to run a production Apache server.

  D. The ability to install a complete Ubuntu operating system install on Windows.

  Correct Answer: A

• Question 272:

  What technical control provides the most critical layer of defense if an intruder is able to bypass all physical security controls and obtain tapes containing critical data?

  A. Camera Recordings

  B. Security guards

  C. Encryption

  D. Shredding

  E. Corrective Controls

  Correct Answer: C

• Question 273:

  Which of the following is a private, RFC 1918 compliant IP address that would be assigned to a DHCP scope on a private LAN?

  A. 127.0.0.100

  B. 169.254.1.50

  C. 10.254.1.50

  D. 172.35.1.100

  Correct Answer: C

• Question 274:

  When using Pretty Good Privacy (PGP) to digitally sign a message, the signature is created in a two-step process. First, the message to be signed is submitted to PGP's cryptographic hash algorithm. What is one of the hash algorithms used by PGP for this process?

  A. Blowfish

  B. DES

  C. SHA-l

  D. Cast

  Correct Answer: C

• Question 275:

  You are the security director for an off-shore banking site. From a business perspective, what is a major factor to consider before running your new vulnerability scanner against the company's business systems?

  A. It may harm otherwise healthy systems.

  B. It may produce false negative results.

  C. It may generate false positive results.

  D. It may not return enough benefit for the cost.

  Correct Answer: C

• Question 276:

  What is the motivation behind SYN/FIN scanning?

  A. The SYN/FIN combination is useful for signaling to certain Trojans.

  B. SYN/FIN packets are commonly used to launch denial of service attacks against BSD hosts.

  C. The crafted SYN/FIN packet sometimes gets past firewalls and filtering routers.

  D. A SYN/FIN packet is used in session hijacking to take over a session.

  Correct Answer: B

• Question 277:

  There is not universal agreement on the names of the layers in the TCP/IP networking model. Which of the following is one of the functions of the bottom layer which is sometimes called the Network Access or Link Layer?

  A. Provides end-to-end data delivery service for user applications

  B. Handles the routing of the data packets over the network

  C. Manages IP addressing and encryption for data packets

  D. Defines the procedures for interfacing with Ethernet devices

  Correct Answer: D

• Question 278:

  Which of the following are advantages of Network Intrusion Detection Systems (NIDS)?

  A. Analysis of encrypted traffic

  B. Provide insight into network traffic

  C. Detection of network operations problems

  D. Provide logs of network traffic that can be used as part of other security measures.

  E. Inexpensive to manage

  A. B, C, and D

  B. A, C, and E

  C. B, D, and E

  D. A, B, and C

  Correct Answer: C

• Question 279:

  Which of the following protocols is used by a host that knows its own MAC (Media Access Control) address to query a server for its own IP address?

  A. RARP

  B. ARP

  C. DNS

  D. RDNS

  Correct Answer: A