GISP questions and answers

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress, Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail.

Which of the following techniques is he performing to accomplish his task?

Which of the following are man-made threats that an organization faces? Each correct answer represents a complete solution. Choose three.

Which of the following is a reason to implement security logging on a DNS server?

On which of the following does a CGI program execute?

Which of the following formulas is used to determine the Single Loss Expectancy (SLE)?

FILL BLANK

Mark the list that mentions the correct levels of classification of the military data-classification system.

Which of the following is executed when a predetermined event occurs?

Which of the following is the method of hiding data within another media type such as graphic or document?

Which of the following cables provides maximum security against electronic eavesdropping on a network?

Which of the following are the causes of power noise?
Each correct answer represents a complete solution. Choose two.

Which of the following statements about Discretionary Access Control List (DACL) is true?

Which of the following provides the best protection against a man-in-the-middle attack?

Which of the following types of fiber optic cable is generally used in WANs and powered by laser light?

Which of the following protocols work at the Application layer of an OSI model? Each correct answer represents a complete solution. Choose three.

Which of the following statements about Encapsulating Security Payload (ESP) are true? Each correct answer represents a complete solution. Choose two.

Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose two.

Which of the following is the default port for DNS zone transfer?

You work as a Network Administrator for McRoberts Inc. The company has a TCP-based network, which is connected to the Internet. Users use their Web browsers to connect to Web servers and to view different
Web pages.

Which of the following protocols ensures a secure connection between a Web browser and a Web server?

At which of the following layers of the Open System Interconnection (OSI) model the Internet Control Message Protocol (ICMP) and the Internet Group Management Protocol (IGMP) work?

Which of the following is a process of monitoring data packets that travel across a network?

Which of the following is the default port for Simple Network Management Protocol (SNMP)?

On which of the following OSI model layers does the Point-to-Point Protocol (PPP) work?

Which of the following standards is used in wireless local area networks (WLANs)?

Which of the following types of virus is capable of changing its signature to avoid detection?

Which of the following are data link layer components?
Each correct answer represents a complete solution. Choose three.

Which of the following hardware devices prevents broadcasts from crossing over subnets?

Which of the following is a reason to implement security logging on a DNS server?

Which of the following provides high availability of data?

Which of the following rated systems of the Orange book has mandatory protection of the TCB?

You work as a Network Administrator for Net Soft Inc. You are designing a data backup plan for your company's network. The backup policy of the company requires high security and easy recovery of data.

Which of the following options will you choose to accomplish this?

Which of the following are the common roles with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose all that apply.

You work as a Network Administrator for NetTech Inc. Your computer has the Windows 2000 Server operating system. You want to harden the security of the server. Which of the following changes are required to accomplish this?
Each correct answer represents a complete solution. Choose two.

Which of the following books is used to examine integrity and availability?

Which of the following protocols allows an e-mail client to access and manipulate a remote e-mail file without downloading it to the local computer?

John works as a Network Administrator for We-are-secure Inc. The We-are-secure server is based on Windows Server 2003. One day, while analyzing the network security, he receives an error message that Kernel32.exe is encountering a problem. Which of the following steps should John take as a countermeasure to this situation?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following are ensured by the concept of integrity in information system security? Each correct answer represents a complete solution. Choose two.

Which of the following protocols is used to query and modify information stored within the directory services?

What does the Internet encryption and authentication system named RSA stand for?

Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

Which of the following processes removes data from the media so that it is difficult to restore?

Which of the following components come under the physical layer of the OSI model? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is the most secure place to host a server that will be accessed publicly through the Internet?

A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to perform war dialing?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following involves changing data prior to or during input to a computer in an effort to commit fraud?

Which of the following terms refers to the act of obtaining plain text from cipher text without a cryptographic key?

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He writes the following snort rule:

This rule can help him protect the We-are-secure server from the __________.

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.

Which of the following tools is used for breaking digital watermark?

In which of the following attacks does the attacker confuse the switch itself into thinking two ports have the same MAC address?

Which of the following are the examples of technical controls? Each correct answer represents a complete solution. Choose three.

Which of the following ports is used by a BOOTP server?

Which of the following statements about role-based access control (RBAC) model is true?

Which of the following protocols allows Cisco devices to acquire and utilize digital certificates from Certification Authorities (CAs)?

John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.
Original cookie values:
ItemID1=2
ItemPrice1=900
ItemID2=1
ItemPrice2=200
Modified cookie values:
ItemID1=2
ItemPrice1=1
ItemID2=1
ItemPrice2=1
Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.

Which of the following hacking techniques is John performing?

Which of the following statements regarding the Secure Sockets Layer (SSL) security model are true?
Each correct answer represents a complete solution. Choose two.

Maria works as a professional Ethical Hacker. She recently has been assigned a project to test the security of www.we-are-secure.com. The company has provided the following information about the infrastructure of its network:

Network diagrams of the we-are-secure infrastructure Source code of the security tools IP addressing information of the we-are-secure network

Which of the following testing methodologies is we-are-secure.com using to test the security of its network?

Which of the following are the levels of public or commercial data classification system? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is the process of overwriting all addressable locations on a disk?

In which of the following security tests does the security testing team simulate as an employee or other person with an authorized connection to the organization's network?

Which of the following is the best way of protecting important data against virus attack?

Which of the following are methods used for authentication? Each correct answer represents a complete solution. Choose all that apply.

Which of the following refers to a computer that must be secure because it is accessible from the Internet and is vulnerable to attacks?

Which of the following encryption algorithms are based on stream ciphers? Each correct answer represents a complete solution. Choose two.

Which of the following encryption algorithms are based on stream ciphers? Each correct answer represents a complete solution. Choose two.

How long are cookies in effect if no expiration date is set?

Which of the following two components does Kerberos Key Distribution Center (KDC) consist of? Each correct answer represents a complete solution. Choose two.

You work as a Network Administrator for NetTech Inc. The company's network has a Windows 2000 domain-based network. An employee of the company is dismissed for attempting to access secret data on the network.

What measure will you take next to make the network secure?

Which of the following VPN protocols offer encryption?
Each correct answer represents a complete solution. Choose two.

Which of the following terms refers to the protection of data against unauthorized access?

Which of the following is used by the Diffie-Hellman encryption algorithm?

Which of the following can be used to protect a computer system from malware, viruses, spyware, and various types of keyloggers?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following tabs will you click in the Internet Options dialog box to include a websites as a trusted site?

Which of the following law does not protect intellectual property?

Which of the following reads and writes data across network connections by using the TCP/IP protocol?

Which of the following statements about digital signature are true? Each correct answer represents a
complete solution. Choose two.

You are a salesperson. You are authorized to access only the information that is essential for your work.

Which of the following access control models is used in your organization?

A ________ attack occurs when an attacker successfully inserts an intermediary software or program
between two communicating hosts.

Which of the following rate systems of Orange book has mandatory protection of the Trusted Computing Base (TCB)?

Which of the following is an authentication protocol?

Which of the following formulas is used to determine the Single Loss Expectancy (SLE)?

Which of the following protocols work at the session layer of the OSI model? Each correct answer represents a complete solution. Choose two.

Which of the following is a type of intruder detection that involves logging network events to a file for an administrator to review later?

Which of the following are the responsibilities of a custodian with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose three.

Brutus is a password cracking tool that can be used to crack the following authentications:

HTTP (Basic Authentication)
HTTP (HTML Form/CGI)
POP3 (Post Office Protocol v3)
FTP (File Transfer Protocol)
SMB (Server Message Block)
Telnet

Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.

Which of the following processes is known as Declassification?

Which of the following works at the network layer and hides the local area network IP address and topology?

Which of the following is the main reason for implementing CCTV as part of the physical arrangement?

Which of the following statements regarding Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose all that apply.

Which of the following protocols multicasts messages and information among all member devices in an IP multicast group?

Which of the following statements about biometric authentication is true?

Which of the following refers to a program that allows access to a system by skipping the security checks?

Which of the following are the responsibilities of the custodian of data? Each correct answer represents a
complete solution. Choose two.

You work as a Network Administrator for Web World Inc. You want to host an e-commerce Web site on your network. You want to ensure that storage of credit card information is secure. Which of the following conditions should be met to accomplish this?
Each correct answer represents a complete solution. Choose all that apply.

What is the hash value length of the Secure Hash Algorithm (SHA-1)?

Copper cabling comes under the _______ layer of the OSI model.

Which of the following protocols is used to retrieve e-mails from a remote mail server?

Which of the following encryption algorithms are based on symmetric key cryptographic algorithms? Each correct answer represents a complete solution. Choose all that apply.

Which of the following entities is used by Routers and firewalls to determine which packets should be forwarded or dropped?

Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?