A Review Of Printable GSEC Testing Material

NEW QUESTION 1
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He wants to change the modified date and time of the file private.txt to 11 Nov 2009 02:59:58 am. Which of the following commands will John use to accomplish his task?
Each correct answer represents a complete solution. Choose all that apply.

• A. rm private.txt #11 Nov 2009 02:59:58 am
• B. touch -d "11 Nov 2009 02:59:58 am" private.txt
• C. touch private.txt #11 Nov 2009 02:59:58 am
• D. touch -t 200911110259.58 private.txt

Answer: BD

NEW QUESTION 2
Which of the following is an advantage of a Host Intrusion Detection System (HIDS) versus a Network Intrusion Detection System (NIDS)?

• A. Ability to detect malicious traffic after it has been decrypted by the host
• B. Ability to decrypt network traffic
• C. Ability to listen to network traffic at the perimeter
• D. Ability to detect malicious traffic before it has been decrypted

Answer: A

NEW QUESTION 3
Which of the following protocols is used by a host that knows its own MAC (Media Access Control) address to query a server for its own IP address?

• A. RARP
• B. ARP
• C. DNS
• D. RDNS

Answer: A

NEW QUESTION 4
Which of the following is a type of countermeasure that can be deployed to ensure that a threat vector does not meet a vulnerability?

• A. Prevention controls
• B. Detection controls
• C. Monitoring controls
• D. Subversive controls

Answer: A

NEW QUESTION 5
You work as a Network Administrator for McNeil Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest domain-based network. The company's management has decided to provide laptops to its sales team members. These laptops are equipped with smart card readers. The laptops will be configured as wireless network clients. You are required to accomplish the following tasks:
The wireless network communication should be secured.
The laptop users should be able to use smart cards for getting authenticated. In order to accomplish the tasks, you take the following steps:
Configure 802.1x and WEP for the wireless connections. Configure the PEAP-MS-CHAP v2 protocol for authentication. What will happen after you have taken these steps?

• A. The laptop users will be able to use smart cards for getting authenticate
• B. Both tasks will be accomplishe
• C. None of the tasks will be accomplishe
• D. The wireless network communication will be secure

Answer: D

NEW QUESTION 6
Which Defense-in-Depth principle starts with an awareness of the value of each section of information within an organization?

• A. Information centric defense
• B. Uniform information protection
• C. General information protection
• D. Perimeter layering

Answer: A

NEW QUESTION 7
Which of the following statements about Microsoft's VPN client software is FALSE?

• A. The VPN interface can be figured into the route tabl
• B. The VPN interface has the same IP address as the interface to the network it's been specified to protec
• C. The VPN client software is built into the Windows operating syste
• D. The VPN tunnel appears as simply another adapte

Answer: B

NEW QUESTION 8
In order to capture traffic for analysis, Network Intrusion Detection Systems (NIDS) operate with network cards in what mode?

• A. Discrete
• B. Reporting
• C. Promiscuous
• D. Alert

Answer: C

NEW QUESTION 9
Which choice best describes the line below?
alert tcp any any -> 192.168.1.0/24 80 (content: /cgi-bin/test.cgi"; msg: "Attempted
CGI-BIN Access!!";)

• A. Tcpdump filter
• B. IP tables rule
• C. Wire shark filter
• D. Snort rule

Answer: D

NEW QUESTION 10
You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which of the following will you use to accomplish this?

• A. PPTP
• B. IPSec
• C. PGP
• D. NTFS

Answer: C

NEW QUESTION 11
Which of the following SIP INVITE lines indicates to the remote registrar the VoIP phone that initiated the call?

• A. Via
• B. To
• C. From-Agent
• D. User-Agent

Answer: D

NEW QUESTION 12
What is the first thing that should be done during the containment step of incident handling?

• A. Change all the passwords
• B. Secure the area
• C. Prepare the Jump bag
• D. Notify management
• E. Prepare a report

Answer: B

NEW QUESTION 13
What type of formal document would include the following statement?
Employees are responsible for exercising good judgment regarding the reasonableness of personal use. Individual departments are responsible for creating guidelines concerning personal application of Internet/Intranet/Extranet systems. In the absence of such policies, employees should be guided by departmental policies, and if there is any uncertainty, employees should consult their supervisor or manager.

• A. Company privacy statement
• B. Remote access policy
• C. Acceptable use policy
• D. Non-disclosure agreement

Answer: C

NEW QUESTION 14
IPS devices that are classified as "In-line NIDS" devices use a combination of anomaly analysis, signature-based rules, and what else to identify malicious events on the network?

• A. Firewall compatibility rules
• B. Application analysis
• C. ICMP and UDP active scanning
• D. MAC address filtering

Answer: B

NEW QUESTION 15
Which of the following is an advantage of private circuits versus VPNs?

• A. Flexibility
• B. Performance guarantees
• C. Cost
• D. Time required to implement

Answer: B

NEW QUESTION 16
Which of the following is referred to as Electromagnetic Interference (EMI)?

• A. Electrical line noise
• B. Spike
• C. Transient
• D. Brownout

Answer: A

NEW QUESTION 17
Users at the Marketing department are receiving their new Windows XP Professional workstations. They will need to maintain local work files in the first logical volume, and will use a second volume for the information shared between the area group. Which is the best file system design for these workstations?

• A. Both volumes should be converted to NTFS at install tim
• B. First volume should be FAT32 and second volume should be NTF
• C. First volume should be EFS and second volume should be FAT32.
• D. Both volumes should be converted to FAT32 with NTFS DACL

Answer: A

NEW QUESTION 18
......