100% Updated GIAC GSEC Enterprise PDF Dumps
Use Valid Exam GSEC by PrepPDF Books For Free Website
Target Audience
The GIAC Security Essentials certification exam targets all IT professionals with a recognized background in networking and information systems. On that note, security managers, auditors, penetration testers, and security administrators will benefit most from it. Still, the test is also a good choice for IT engineers, supervisors, and operations personnel.
NEW QUESTION 29
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He executes the following command in the terminal: echo $USER, $UID Which of the following will be displayed as the correct output of the above command?
- A. John, 0
- B. root, 0
- C. root, 500
- D. John, 502
Answer: B
NEW QUESTION 30
An attacker gained physical access to an internal computer to access company proprietary data. The facility is protected by a fingerprint biometric system that records both failed and successful entry attempts. No failures were logged during the time periods of the recent breach. The account used when the attacker entered the facility shortly before each incident belongs to an employee who was out of the area. With respect to the biometric entry system, which of the following actions will help mitigate unauthorized physical access to the facility?
- A. Try setting the Equal Error Rate (EER) to zero
- B. Try raising the Crossover Error Rate (CER)
- C. Try to lower the False Accept Rate (FAR)
- D. Try to set a lower False Reject Rate (FRR)
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 31
Which of the following networking topologies uses a hub to connect computers?
- A. Bus
- B. Star
- C. Cycle
- D. Ring
Answer: B
NEW QUESTION 32
What file instructs programs like Web spiders NOT to search certain areas of a site?
- A. Restricted.txt
- B. Spider.txt
- C. Robots.txt
- D. Search.txt
Answer: C
NEW QUESTION 33
You work as a Network Administrator for NetTech Inc. To ensure the security of files, you encrypt data files using Encrypting File System (EFS). You want to make a backup copy of the files and maintain security settings. You can backup the files either to a network share or a floppy disk. What will you do to accomplish this?
- A. Copy the files to a network share on a FAT32 volume.
- B. Place the files in an encrypted folder. Then, copy the folder to a floppy disk.
- C. Copy the files to a network share on an NTFS volume.
- D. Copy the files to a floppy disk that has been formatted using Windows 2000 Professional.
Answer: C
NEW QUESTION 34
Which of the following protocols work at the Session layer of the OSI model? Each correct answer represents a complete solution. Choose all that apply.
- A. Trivial File Transfer Protocol (TFTP)
- B. Border Gateway Multicast Protocol (BGMP)
- C. Internet Security Association and Key Management Protocol (ISAKMP)
- D. User Datagram Protocol (UDP)
Answer: B,C
NEW QUESTION 35
An employee is currently logged into the corporate web server, without permission. You log into the web server as 'admin" and look for the employee's username: "dmaul" using the "who" command. This is what you get back:
- A. The contents of the bash history file has been altered
- B. The contents of the utmp file has been altered
- C. The contents of the /var/log/messages file has been altered
- D. The contents of the http logs have been altered
Answer: A
NEW QUESTION 36
Which of the following is an UDP based protocol?
- A. SNMP
- B. telnet
- C. IMAP
- D. LDAP
Answer: A
NEW QUESTION 37
Which of the following areas of a network contains DNS servers and Web servers for Internet users?
- A. VPN
- B. MMZ
- C. DMZ
- D. VLAN
Answer: C
NEW QUESTION 38
Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.
- A. Secret
- B. Asymmetric
- C. Symmetric
- D. Synchronous
Answer: B,C
NEW QUESTION 39
What is the function of the TTL (Time to Live) field in IPv4 and the Hop Limit field in IPv6 In an IP Packet header?
- A. These fields are recalculated based on the required time for a packet to arrive at its destination.
- B. These fields are incremented each time a packet is transmitted to indicate the number of routers that an IP packet has traversed.
- C. These fields are initialized to an initial value to prevent packet fragmentation and fragmentation attacks.
- D. These fields are decremented each time a packet is retransmitted to minimize the possibility of routing loops.
Answer: D
NEW QUESTION 40
You are doing some analysis of malware on a Unix computer in a closed test network. The IP address of the computer is 192.168.1.120. From a packet capture, you see the malware is attempting to do a DNS query for a server called iamabadserver.com so that it can connect to it. There is no DNS server on the test network to do name resolution. You have another computer, whose IP is 192.168.1.115, available on the test network that you would like for the malware connect to it instead. How do you get the malware to connect to that computer on the test network?
- A. You modify the HOSTS file on the computer you want the malware to connect to and add an entry that reads: 192.168.1.115 iamabadserver iamabadserver.com
- B. You modify the HOSTS file on the Unix computer your malware is running on and add an entry that reads: 192.168.1.120 iamabadserver iamabadserver.com
- C. You modify the HOSTS file on the computer you want the malware to connect to and add an entry that reads: 192.168.1.120 iamabadserver iamabadserver.com
- D. You modify the HOSTS file on the Unix computer your malware is running on and add an entry that reads: 192.168.1.115 iamabadserveriamabadserver.com
Answer: D
NEW QUESTION 41
Which of the following refers to going through someone's trash to find out useful or confidential information?
- A. Phishing
- B. Hacking
- C. Spoofing
- D. Dumpster diving
Answer: D
NEW QUESTION 42
When should you create the initial database for a Linux file integrity checker?
- A. Before a system is patched
- B. During an attack
- C. After a system has been compromised
- D. Before a system has been compromised
Answer: D
NEW QUESTION 43
In trace route results, what is the significance of an * result?
- A. A reply was returned in less than a second.
- B. A listening port was identified.
- C. The target host was successfully reached.
- D. No reply was received for a particular hop.
Answer: D
NEW QUESTION 44
You work as a Network Administrator for Net World Inc. The company has a Linux-based network. You are optimizing performance and security on your Web server. You want to know the ports that are listening to FTP. Which of the following commands will you use?
- A. FTP netstat -a
- B. FTP netstat -r
- C. netstat -r | grep FTP
- D. netstat -a | grep FTP
Answer: D
NEW QUESTION 45
In a /24 subnet, which of the following is a valid broadcast address?
- A. 221.10.10.10
- B. 192.10.10.255
- C. 200.11.11.1
- D. 245.20.30.254
Answer: B
NEW QUESTION 46
Validating which vulnerabilities in a network environment are able to be exploited by an attacker is called what?
- A. Anomaly detection
- B. Penetration testing
- C. Perimeter assessment
- D. Vulnerability scanning
Answer: D
NEW QUESTION 47
When trace route fails to get a timely response for a packet after three tries, which action will it take?
- A. It will print '* * *' for the attempts and increase the maximum hop count by one.
- B. It will increase the timeout for the hop and resend the packets.
- C. It will exit gracefully, and indicate to the user that the destination is unreachable.
- D. It will print '* * *' for the attempts, increment the TTL and try again until the maximum hop count.
Answer: D
NEW QUESTION 48
Which of the following are advantages of Network Intrusion Detection Systems (NIDS)?
- A. A, C, and E
- B. B, C, and D
- C. Provide insight into network traffic
- D. Detection of network operations problems
- E. Provide logs of network traffic that can be used as part of other security measures.
- F. Inexpensive to manage
- G. B, D, and E
- H. A, B, and C
- I. Analysis of encrypted traffic
Answer: D
NEW QUESTION 49
What does an attacker need to consider when attempting an IP spoofing attack that relies on guessing Initial Sequence Numbers (ISNs)?
- A. These attacks work against relatively idle servers.
- B. These attacks rely on a modified TCP/IP stack to function.
- C. These attacks can be easily traced back to the source.
- D. These attacks only work against Linux/Unix hosts.
Answer: A
NEW QUESTION 50
......
GIAC GSEC Official Cert Guide PDF: https://certkingdom.preppdf.com/GIAC/GSEC-prepaway-exam-dumps.html