Skip to main content

GISP Online Exam

GIAC Information Security Professional (GISP)

659 questions available ยท Page 1 of 66

View study plans
Question 1 Single choice

Which of the following is a technique used to attack an Ethernet wired or wireless network?

  1. A

    DNS poisoning

  2. B

    Keystroke logging

  3. C

    Mail bombing

  4. D

    ARP poisoning

Show answer and explanation

Correct answer: D

Question 2 Single choice

Which of the following refers to encrypted text?

  1. A

    Plaintext

  2. B

    Cookies

  3. C

    Hypertext

  4. D

    Ciphertext

Show answer and explanation

Correct answer: D

Question 3 Multiple choice

Which of the following are the benefits of information classification for an organization?

  1. A

    It helps identify which information is the most sensitive or vital to an organization.

  2. B

    It ensures that modifications are not made to data by unauthorized personnel or processes.

  3. C

    It helps identify which protections apply to which information.

  4. D

    It helps reduce the Total Cost of Ownership (TCO).

Show answer and explanation

Correct answers: A, C

Question 4 Single choice

Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them.

Which of the following access control models will he use?

  1. A

    Role-Based Access Control

  2. B

    Discretionary Access Control

  3. C

    Mandatory Access Control

  4. D

    Policy Access Control

Show answer and explanation

Correct answer: A

Question 5 Multiple choice

Which of the following are methods used for authentication? Each correct answer represents a complete solution. Choose all that apply.

  1. A

    Smart card

  2. B

    Biometrics

  3. C

    Username and password

  4. D

    Magnetic stripe card

Show answer and explanation

Correct answers: A, B, C, D

Question 6 Single choice

Which of the following protocols is used to verify the status of a certificate?

  1. A

    CEP

  2. B

    HTTP

  3. C

    OSPF

  4. D

    OCSP

Show answer and explanation

Correct answer: D

Question 7 Multiple choice

You work as a Network Administrator for NetTech Inc. The company has a network that consists of 200 client computers and ten database servers. One morning, you find that a hacker is accessing unauthorized data on a database server on the network. Which of the following actions will you take to preserve the evidences?
Each correct answer represents a complete solution. Choose three.

  1. A

    Prevent a forensics experts team from entering the server room.

  2. B

    Preserve the log files for a forensics expert.

  3. C

    Prevent the company employees from entering the server room.

  4. D

    Detach the network cable from the database server.

Show answer and explanation

Correct answers: B, C, D

Question 8 Single choice

Which of the following heights of fence deters only casual trespassers?

  1. A

    3 to 4 feet

  2. B

    2 to 2.5 feet

  3. C

    8 feet

  4. D

    6 to 7 feet

Show answer and explanation

Correct answer: A

Question 9 Single choice

Which of the following statements about role-based access control (RBAC) model is true?

  1. A

    In this model, a user can access resources according to his role in the organization.

  2. B

    In this model, the permissions are uniquely assigned to each user account.

  3. C

    In this model, the same permission is assigned to each user account.

  4. D

    In this model, the users can access resources according to their seniority.

Show answer and explanation

Correct answer: A

Question 10 Multiple choice

Which of the following statements about a fiber-optic cable are true? Each correct answer represents a
complete solution. Choose three.

  1. A

    It is immune to electromagnetic interference (EMI).

  2. B

    It can transmit undistorted signals over great distances.

  3. C

    It has eight wires twisted into four pairs.

  4. D

    It uses light pulses for signal transmission.

Show answer and explanation

Correct answers: A, B, D

Question 11 Multiple choice

Which of the following statements about the bridge are true? Each correct answer represents a complete solution. Choose two.

  1. A

    It filters traffic based on IP addresses.

  2. B

    It forwards broadcast packets.

  3. C

    It assigns a different network address per port.

  4. D

    It filters traffic based on MAC addresses.

Show answer and explanation

Correct answers: B, D

Question 12 Single choice

Sam works as a Web Developer for McRobert Inc. He wants to control the way in which a Web browser receives information and downloads content from Web sites.

Which of the following browser settings will Sam use to accomplish this?

  1. A

    Proxy server

  2. B

    Security

  3. C

    Cookies

  4. D

    Certificate

Show answer and explanation

Correct answer: B

Question 13 Multiple choice

Which of the following are used to suppress paper or wood fires? Each correct answer represents a
complete solution. Choose two.

  1. A

    Water

  2. B

    Kerosene

  3. C

    CO2

  4. D

    Soda acid

Show answer and explanation

Correct answers: A, D

Question 14 Multiple choice

Which of the following steps can be taken to protect laptops and data they hold? Each correct answer represents a complete solution. Choose all that apply.

  1. A

    Use slot locks with cable to connect the laptop to a stationary object.

  2. B

    Keep inventory of all laptops including serial numbers.

  3. C

    Harden the operating system.

  4. D

    Encrypt all sensitive data.

Show answer and explanation

Correct answers: A, B, C, D

Question 15 Single choice

Which of the following attacks involves multiple compromised systems to attack a single target?

  1. A

    Brute force attack

  2. B

    DDoS attack

  3. C

    Dictionary attack

  4. D

    Replay attack

Show answer and explanation

Correct answer: B

Question 16 Multiple choice

Which of the following statements about DMZ are true?
Each correct answer represents a complete solution. Choose two.

  1. A

    It is an anti-virus software that scans the incoming traffic on an internal network.

  2. B

    It is the boundary between the Internet and a private network.

  3. C

    It contains company resources that are available on the Internet, such as Web servers and FTP servers.

  4. D

    It contains an access control list (ACL).

Show answer and explanation

Correct answers: B, C

Question 17 Single choice

Which of the following protocols is used to establish a secure TELNET session over TCP/IP?

  1. A

    SSL

  2. B

    PGP

  3. C

    IPSEC

  4. D

    SSH

Show answer and explanation

Correct answer: D

Question 18 Multiple choice

Which methods help you to recover your data in the event of a system or hard disk failure? Each correct answer represents a complete solution. Choose two.

  1. A

    Install a RAID system

  2. B

    Use data encryption

  3. C

    Install and use a tape backup unit

  4. D

    Install UPS systems on all important devices

Show answer and explanation

Correct answers: A, C

Question 19 Single choice

When no anomaly is present in an Intrusion Detection, but an alarm is generated, the response is known as __________.

  1. A

    False positive

  2. B

    False negative

  3. C

    True negative

  4. D

    True positive

Show answer and explanation

Correct answer: A

Question 20 Single choice

Which of the following statements about smurf is true?

  1. A

    It is an ICMP attack that involves spoofing and flooding.

  2. B

    It is a UDP attack that involves spoofing and flooding.

  3. C

    It is a denial of service (DoS) attack that leaves TCP ports open.

  4. D

    It is an attack with IP fragments that cannot be reassembled.

Show answer and explanation

Correct answer: A