GSEC Practice Test Give You First Time Success with 100% Money Back Guarantee!
All Obstacles During GSEC Exam Preparation with GSEC Real Test Questions
Official Revision Book: GSEC GIAC Security Essentials Certification All-in-one Exam Guide (1st Edition)
This book is written and published by Ric Messier, a GSEC, CISSP, and CEH certified IT professional with tons of years of experience in the field. The GSEC GIAC official study guide covers all the topic areas and concepts that you should understand to excel in your GSEC test. It highlights the learning objectives at the start of every chapter in addition to covering exam tips, explanations, and sample questions.
As this book is meant to help candidates pass the GSEC exam, it addresses all the domains of the official outline. These include encryption, risk management, virtual machines, vulnerability control, malware, VoIP, and physical security, among the rest. For your comfort, you can choose to buy this material in paperback or an electronic format.
NEW QUESTION 92
Which of the following standards is used in wireless local area networks (WLANs)?
- A. IEEE 802.4
- B. IEEE 802.3
- C. IEEE 802.5
- D. IEEE 802.11b
Answer: D
NEW QUESTION 93
You work as a Network Administrator for Tech2tech Inc. You have configured a network-based IDS for
your company.
You have physically installed sensors at all key positions throughout the network such that they all report
to the command console.
What will be the key functions of the sensors in such a physical layout?
Each correct answer represents a complete solution. Choose all that apply.
- A. To analyze for known signatures
- B. To notify the console with an alert if any intrusion is detected
- C. To collect data from operating system logs
- D. To collect data from Web servers
Answer: A,B
NEW QUESTION 94
Which of the following is an advantage of an Intrusion Detection System?
- A. It never needs patching.
- B. It is the best network security.
- C. It is a mature technology.
- D. It is a firewall replacement.
Answer: C
NEW QUESTION 95
Which of the following SIP methods is used to setup a new session and add a caller?
- A. ACK
- B. CANCEL
- C. REGISTER
- D. INVITE
- E. BYE
Answer: D
NEW QUESTION 96
SIMULATION
Fill in the blank with the correct answer to complete the statement below.
The permission is the minimum required permission that is necessary for a user to enter a directory and list its contents.
Answer:
Explanation:
Read
NEW QUESTION 97
Which of the following types of computers is used for attracting potential intruders?
- A. Data pot
- B. Honey pot
- C. Files pot
- D. Bastion host
Answer: B
NEW QUESTION 98
Which of the following would be a valid reason to use a Windows workgroup?
- A. Lower initial cost
- B. Centralized control
- C. Consistent permissions and rights
- D. Simplicity of single sign-on
Answer: C
NEW QUESTION 99
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network.
John is working as a root user on the Linux operating system. He wants to change the modified date and time of the file private.txt to 11 Nov 2009 02:59:58 am. Which of the following commands will John use to accomplish his task?
Each correct answer represents a complete solution. Choose all that apply.
- A. touch -d "11 Nov 2009 02:59:58 am" private.txt
- B. rm private.txt #11 Nov 2009 02:59:58 am
- C. touch -t 200911110259.58 private.txt
- D. touch private.txt #11 Nov 2009 02:59:58 am
Answer: A,C
NEW QUESTION 100
What is the main problem with relying solely on firewalls to protect your company's sensitive data?
- A. Their value is limited unless a full-featured Intrusion Detection System is used.
- B. Their value is limited because they can be bypassed by technical and non-technical means.
- C. Their value is limited because operating systems are now automatically patched.
- D. Their value is limited because they cannot be changed once they are configured.
Answer: B
NEW QUESTION 101
What type of attack can be performed against a wireless network using the tool Kismet?
- A. Masquerading
- B. IP spoofing
- C. Denial of Service
- D. Eavesdropping
Answer: D
NEW QUESTION 102
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He wants to stop the background processes. Which of the following commands will John use to accomplish his task?
- A. kill -s SIGCONT %1
- B. kill -kill 0
- C. kill -s SIGTSTP %1
- D. kill -9 -1
Answer: C
NEW QUESTION 103
What is the discipline of establishing a known baseline and managing that condition known as?
- A. Security establishment
- B. Observation discipline
- C. Condition deployment
- D. Configuration management
Answer: A
NEW QUESTION 104
Which of the following statements best describes where a border router is normally placed?
- A. Between your firewall and DNS server
- B. Between your ISP and your external firewall
- C. Between your ISP and DNS server
- D. Between your firewall and your internal network
Answer: B
NEW QUESTION 105
Many IIS servers connect to Microsoft SQL databases. Which of the following statements about SQL server security is TRUE?
- A. It is good practice to never use integrated Windows authentication for SQL Server.
- B. SQL Server patches are part of the operating system patches.
- C. SQL Server should be installed on the same box as your IIS web server when they communicate as part of the web application.
- D. It is good practice to not allow users to send raw SQL commands to the SQL Server.
Answer: D
NEW QUESTION 106
An employee attempting to use your wireless portal reports receiving the error shown below. Which scenario is occurring?
- A. Another access point is attempting to intercept the data.
- B. The encrypted data is being intercepted and decrypted.
- C. A denial-of-service attack is preventing a response from the portal.
- D. Another access point is deauthenticating legitimate clients.
Answer: A
NEW QUESTION 107
Which of the following tools is used to query the DNS servers to get detailed information about IP addresses, MX records, and NS servers?
- A. PING
- B. NBTSTAT
- C. NSLOOKUP
- D. NETSTAT
Answer: C
NEW QUESTION 108
Which of the following protocols is responsible for the resolution of IP addresses to media access control (MAC) addresses?
- A. ARP
- B. PPP
- C. ICMP
- D. HTTP
Answer: A
NEW QUESTION 109
Which of the following items are examples of preventive physical controls? Each correct answer represents a complete solution. Choose three.
- A. Closed-circuit television monitors
- B. Fire extinguishers
- C. Locks and keys
- D. Biometric access controls
Answer: B,C,D
NEW QUESTION 110
To be considered a strong algorithm, an encryption algorithm must be which of the following?
- A. Secret
- B. Confidential
- C. Proprietary
- D. Well-known
Answer: D
NEW QUESTION 111
Where is the source address located in an IPv4 header?
- A. At an offset of 12 bytes
- B. At an offset of 16 bytes
- C. At an offset of 8 bytes
- D. At an offset of 20 bytes
Answer: A
NEW QUESTION 112
Fill in the blank with the command to complete the statement below. The command displays bad login attempts.
- A. LASTB
Answer: A
NEW QUESTION 113
You ask your system administrator to verify user compliance with the corporate policies on password strength, namely that all passwords will have at least one numeral, at least one letter, at least one special character and be 15 characters long. He comes to you with a set of compliance tests for use with an offline password cracker. They are designed to examine the following parameters of the password:
*they contain only numerals
*they contain only letters
*they contain only special characters
*they contain only letters and numerals
" they contain only letters and special characters
*they contain only numerals and special characters
Of the following, what is the benefit to using this set of tests?
- A. They crack compliant and non-compliant passwords to determine whether the current policy is strong enough
- B. They find non-compliant passwords without cracking compliant passwords.
- C. They are focused on cracking passwords that meet minimum complexity requirements
- D. They are focused on cracking passwords that use characters prohibited by the password policy
Answer: B
NEW QUESTION 114
Which of the following statements about Network Address Translation (NAT) is true?
- A. It uses public IP addresses on an internal network.
- B. It translates IP addresses into user friendly names.
- C. It hides the public network from internal hosts.
- D. It hides internal hosts from the public network.
Answer: D
NEW QUESTION 115
Which of the following is a valid password for a system with the default "Password must meet complexity requirements" setting enabled as part of the GPO Password policy requirements?
- A. SaNS2006
- B. disk ACCESS failed
- C. The Cat Chased its Tail AII Night
- D. SETI@HOME
Answer: A
NEW QUESTION 116
Which of the following protocols describes the operation of security In H.323?
- A. H.245
- B. H.225
- C. H.235
- D. H.239
Answer: C
NEW QUESTION 117
......
Fully Updated Free Actual GIAC GSEC Exam Questions: https://www.testkingfree.com/GIAC/GSEC-practice-exam-dumps.html
Free GSEC Questions for GIAC GSEC Exam [Sep-2022]: https://drive.google.com/open?id=1hOwVGb4CTiSwnhE80fWU6jTzuOaDQBtC