GIAC GIAC Information Security GSLC Questions & Answers

• Question 651:

  Which of the following tools is based on Linux and used to carry out the Penetration Testing?

  A. JPlag

  B. BackTrack

  C. Vedit

  D. Ettercap

  Correct Answer: B

• Question 652:

  John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare-secure.com. He wants to test the response of a DDoS attack on the we-are-secure server. To accomplish this, he takes the following

  steps:

  Instead of directly attacking the target computer, he first identifies a less secure network named Infosecure that contains a network of 100 computers. He breaks this less secure network and takes control of all its computers. After completing

  this step, he installs a DDoS attack tool on each computer of the Infosecure network. Finally, he uses all the computers of the less secure network to carry out the DDoS attack on the we-are-secure server.

  Which of the following tools can John use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

  A. Stacheldraht

  B. Trin00

  C. TFN

  D. BackOfficer Friendly

  Correct Answer: ABC

• Question 653:

  Which of the following applications would be considered a data warehousing application?

  A. Golf score tracking

  B. Badge reader

  C. Fraud detection

  D. eCommerce site

  Correct Answer: C

• Question 654:

  Which of the following options is an approach to restricting system access to authorized users?

  A. MIC

  B. MAC

  C. RBAC

  D. DAC

  Correct Answer: C

• Question 655:

  Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers. Mark is deploying an 802.11

  wireless LAN on the network. The wireless LAN will use Wired Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client computers must be able to automatically connect to the wireless LAN.

  However, the unauthorized computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants to configure all the wireless access points and client computers to act in accordance with the company's

  security policy. What will he do to accomplish this?

  Each correct answer represents a part of the solution. Choose three.

  A. Configure the authentication type for the wireless LAN to Open system.

  B. Install a firewall software on each wireless access point.

  C. Configure the authentication type for the wireless LAN to Shared Key.

  D. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.

  E. Broadcast SSID to connect to the access point (AP).

  F. On each client computer, add the SSID for the wireless LAN as the preferred network.

  Correct Answer: CDF

• Question 656:

  You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network. What method would be best for finding such flaws?

  A. Automated penetration testing

  B. Code review

  C. Manual penetration testing

  D. Vulnerability scanning

  Correct Answer: D

• Question 657:

  Which of the following protocols is used as a transport protocol for Internet dial-up connections?

  A. SMTP

  B. SNMP

  C. DHCP

  D. PPP

  Correct Answer: D

• Question 658:

  You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Server 2008 Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2008. The company's headquarters is located at Los Angeles. A branch office of the company is located at Denver. You are about to send a message to Rick who is a Network Administrator at Denver. You want to ensure that the message cannot be read by anyone but the recipient. Which of the following keys will you use to encrypt the message?

  A. Your public key

  B. The recipient's private key

  C. The recipient's public key

  D. Your private key

  Correct Answer: C

• Question 659:

  Which of the following programs can collect various types of personal information, such as Internet surfing habits, and Web sites that the user has visited?

  A. Spyware

  B. Honeypot

  C. Worm

  D. Malware

  Correct Answer: A

• Question 660:

  Which of the following encryption algorithms is applied in the PGP encryption system?

  A. TDE

  B. Triple DES

  C. Blowfish

  D. IDEA

  Correct Answer: D