GISF questions and answers

You work as a security manager in Mariotiss Inc. Your enterprise has been facing network and software security threats since a few months. You want to renew your current security policies and management to enhance the safety of your information systems.

Which of the following is the best practice to initiate the renewal process from the lowest level with the least managerial effort?

Which of the following is the phase of Incident handling process in which the distinction between an event and an incident is made?

Which of the following two cryptography methods are used by NTFS Encrypting File System (EFS) to encrypt the data stored on a disk on a file-by-file basis?

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and successfully logs in to the user page of the Web site. The We-are-secure login page is vulnerable to a
__________.

Which of the following statements about digital signature is true?

Which of the following methods of encryption uses a single key to encrypt and decrypt data?

Rick is the project manager of a construction project. He is in a process to procure some construction equipments. There are four vendors available for supplying the equipments. Rick does not want one of them to participate in the bidding as he has some personal grudges against the owner of the vendor.
This is the violation of which of the following categories of the Project Management Institute Code of Ethics and Professional Conduct?

You work as a project manager for TYU project. You are planning for risk mitigation. You need to identify the risks that will need a more in-depth analysis.

Which of the following activities will help you in this?

Which of the following statements about Public Key Infrastructure (PKI) is true?

Which of the following terms is used for a router that filters traffic before it is passed to the firewall?

Adam works as a Professional Penetration Tester for Umbrella Inc. A project has been assigned to him to carry out a Black Box penetration testing as a regular evaluation of the system security and integrity of the company's network. Which of the following statements are true about the Black Box penetration testing?
Each correct answer represents a complete solution. Choose all that apply.

Computer networks and the Internet are the prime mode of Information transfer today.

Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

Which of the following are the differences between routed protocols and routing protocols?

Each correct answer represents a complete solution. Choose two.

Which of the following books is used to examine integrity and availability?

Victor works as a network administrator for DataSecu Inc. He uses a dual firewall Demilitarized Zone (DMZ) to insulate the rest of the network from the portions, which is available to the Internet.
Which of the following security threats may occur if DMZ protocol attacks are performed?
Each correct answer represents a complete solution. Choose all that apply.

You have created a Web site, which will be used for e-commerce. You want to ensure that the transactions are highly secured. For this purpose, you have to create a system to verify the identity of a potential customer.

Which of the following security techniques will you use?

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network.

Which of the following phases of the Incident handling process should you follow next to handle this incident?

Mark is implementing security on his e-commerce site. He wants to ensure that a customer sending a message is really the one he claims to be.

Which of the following techniques will he use to ensure this?

The IT Director of the company is very concerned about the security of the network.
Which audit policy should he implement to detect possible intrusions into the network?
(Click the Exhibit button on the toolbar to see the case study.)

Adam, a novice Web user is getting large amount of unsolicited commercial emails on his email address.
He suspects that the emails he is receiving are the Spam. Which of the following steps will he take to stop the Spam?
Each correct answer represents a complete solution. Choose all that apply.

You send and receive messages on Internet. A man-in-the-middle attack can be performed to capture and read your message.

Which of the following Information assurance pillars ensures the security of your message or data against this type of attack?

You work as a Network Administrator for Tech Perfect Inc. The company has recruited a large number of fresh employees. You have been asked to give them a presentation on data protection and confidentiality to ensure a secure wireless communication between the employees.
What types of information require confidentiality?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following devices or hardware parts employs SMART model system as a monitoring system?

John works as a Network Administrator for Bordeaux Inc. He is planning to design a strategy, so that the employees can connect to a scheduling application. Which of the following strategies is best suited for the

company?
(Click the Exhibit button on the toolbar to see the case study.)

The IT administrator wants to implement a stronger security policy. What are the four most important security priorities for uCertify Software Systems Pvt. Ltd.
?
(Click the Exhibit button on the toolbar to see the case study.)

You have successfully installed an IRM server into your environment. This IRM server will be utilized to protect the company's videos, which are available to all employees but contain sensitive data. You log on to the WSS 3.0 server with administrator permissions and navigate to the Operations section.

What option should you now choose so that you can input the RMS server name for the WSS 3.0 server to use?

You are an Incident manager in Orangesect.Inc. You have been tasked to set up a new extension of your enterprise. The networking, to be done in the new extension, requires different types of cables and an appropriate policy that will be decided by you.

Which of the following stages in the Incident handling process involves your decision making?

Which of the following is an examination of the controls within an Information technology (IT) infrastructure?

Which of the following objects in an Active Directory serve as security principles? Each correct answer represents a part of the solution. Choose all that apply.

You work as a security manager for Qualxiss Inc. Your Company involves OODA loop for resolving and deciding over company issues. You have detected a security breach issue in your company.

Which of the following procedures regarding the breach is involved in the observe phase of the OODA loop?

Which of the following options cannot be accessed from Windows Update?

You are the security manager of Microliss Inc. Your enterprise uses a wireless network infrastructure with access points ranging 150-350 feet. The employees using the network complain that their passwords and important official information have been traced. You discover the following clues:

The information has proved beneficial to another company. The other company is located about 340 feet away from your office.
The other company is also using wireless network.
The bandwidth of your network has degraded to a great extent.

Which of the following methods of attack has been used?

Joseph works as a Software Developer for WebTech Inc. He wants to protect the algorithms and the techniques of programming that he uses in developing an application.

Which of the following laws are used to protect a part of software?

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes.
You tell her that all of the following are valid configuration management activities except for which one?

You work as an Application Developer for uCertify Inc. The company uses Visual Studio .NET Framework 3.5 as its application development platform. You are working on a WCF service. You have decided to implement transport level security.

Which of the following security protocols will you use?

Tom and Gary are in a debate over which software should be purchased as part of their project. Gary tells Tom that because he's the senior software developer and has been with the company for 12 years, he'll be making the decision on the software.

What type of conflict resolution has happened in this instance?

Availability Management allows organizations to sustain the IT service availability to support the business at a justifiable cost. Which of the following elements of Availability Management is used to perform at an agreed level over a period of time?
Each correct answer represents a part of the solution. Choose all that apply.

The workstations on your network utilize Windows XP (service pack 2 or later). Many users take their laptops on the road. You are very concerned about the security and want to have a robust firewall solution for mobile users. You have decided that all your firewalls to use the Stateful Packet Inspection (SPI) method.

What must you do to provide SPI to your mobile users?

Which of the following types of attacks cannot be prevented by technical measures only?

Which of the following statements about Secure Shell (SSH) are true? Each correct answer represents a
complete solution. Choose three.

Which two security components should you implement on the sales personnel portable computers to increase security?

(Click the Exhibit button on the toolbar to see the case study.) Each correct answer represents a complete solution. Choose two.

You have been tasked with finding an encryption methodology for your company's network. The solution must use public key encryption which is keyed to the users email address.

Which of the following should you select?

Your network utilizes a coax cable for connections between various network segments. Your predecessor made sure none of the coax cables were in an exposed area that could easily be accessed. This caused the use of significant extra cabling.

Why do you think this was done?

You are configuring the Terminal service. What Protocols are required with Terminal services? (Click the Exhibit button on the toolbar to see the case study.) Each correct answer represents a part of the solution. Choose two.

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

You work as a Network administrator for Infonet Inc. The company has 135 Windows XP Professional computers and twenty Windows 2003 Server computers. You want to specify the number of invalid logon attempts allowed before a user account is locked out.

What will you do to accomplish the task?

Your corporate network uses a Proxy Server for Internet access. The Manufacturing group has access permission for WWW protocol in the Web Proxy service, and access permission for POP3 protocol, in the WinSock Proxy service. The Supervisors group has access permission for WWW and FTP Read protocols in the Web Proxy service, and access permission for the SMTP protocol in the WinSock Proxy service.
The Quality Control group has access permission only for WWW protocol in the Web Proxy service. The Interns group has no permissions granted in any of the Proxy Server services. Kate is a member of all four groups.
In the Proxy Server services, which protocols does Kate have permission to use?

Which of the following provide data confidentiality services by encrypting the data sent between wireless systems?
Each correct answer represents a complete solution. Choose two.

Which of the following is the best approach to conflict resolution?

Tom works as the project manager for BlueWell Inc. He is working with his project to ensure timely and appropriate generation, retrieval, distribution, collection, storage, and ultimate disposition of project information.

What is the process in which Tom is working?