All About Accurate GSEC Exam Prep

NEW QUESTION 1
What type of malware is a self-contained program that has the ability to copy itself without parasitically infecting other host code?

• A. Trojans
• B. Boot infectors
• C. Viruses
• D. Worms

Answer: D

NEW QUESTION 2
Which of the following statements would describe the term "incident" when used in the branch of security known as Incident Handling?

• A. Any observable network event
• B. Harm to systems
• C. Significant threat of harm to systems
• D. A and C
• E. A, B, and C
• F. B and C
• G. A and B

Answer: D

NEW QUESTION 3
Which of the following works at the network layer and hides the local area network IP address and topology?

• A. Network address translation (NAT)
• B. Hub
• C. MAC address
• D. Network interface card (NIC)

Answer: A

NEW QUESTION 4
Which choice best describes the line below?
alert tcp any any -> 192.168.1.0/24 80 (content: /cgi-bin/test.cgi"; msg: "Attempted
CGI-BIN Access!!";)

• A. Tcpdump filter
• B. IP tables rule
• C. Wire shark filter
• D. Snort rule

Answer: D

NEW QUESTION 5
Which of the following is TRUE regarding the ability of attackers to eavesdrop on wireless communications?

• A. Eavesdropping attacks cannot be performed through concrete wall
• B. Eavesdropping attacks can take place from miles awa
• C. Eavesdropping attacks are easily detected on wireless network
• D. Eavesdropping attacks require expensive device

Answer: B

NEW QUESTION 6
What is the main problem with relying solely on firewalls to protect your company's sensitive data?

• A. Their value is limited unless a full-featured Intrusion Detection System is use
• B. Their value is limited because they cannot be changed once they are configure
• C. Their value is limited because operating systems are now automatically patche
• D. Their value is limited because they can be bypassed by technical and non-technical mean

Answer: D

NEW QUESTION 7
What is the discipline of establishing a known baseline and managing that condition known as?

• A. Condition deployment
• B. Observation discipline
• C. Security establishment
• D. Configuration management

Answer: C

NEW QUESTION 8
Which of the following statements about DMZ are true?
Each correct answer represents a complete solution. Choose two.

• A. It is the boundary between the Internet and a private networ
• B. It is an anti-virus software that scans the incoming traffic on an internal networ
• C. It contains company resources that are available on the Internet, such as Web servers and FTP server
• D. It contains an access control list (ACL).

Answer: AC

NEW QUESTION 9
Which Host-based IDS (HIDS) method of log monitoring utilizes a list of keywords or phrases that define the events of interest for the analyst, then takes a list of keywords to watch for and generates alerts when it sees matches in log file activity?

• A. Passive analysis
• B. Retroactive analysis
• C. Exclusive analysis
• D. Inclusive analysis

Answer: D

NEW QUESTION 10
Which of the following processes is known as sanitization?

• A. Assessing the risk involved in discarding particular informatio
• B. Verifying the identity of a person, network host, or system proces
• C. Physically destroying the media and the information stored on i
• D. Removing the content from the media so that it is difficult to restor

Answer: D

NEW QUESTION 11
You work as a Network Administrator for NetTech Inc. When you enter http://66.111.64.227 in the browser's address bar, you are able to access the site. But, you are unable to access the site when you enter http://www.uCertify.com. What is the most likely cause?

• A. DNS entry is not available for the host nam
• B. The site's Web server is offlin
• C. The site's Web server has heavy traffi
• D. WINS server has no NetBIOS name entry for the serve

Answer: A

NEW QUESTION 12
Regarding the UDP header below, what is the length in bytes of the UDP datagrarn?
04 1a 00 a1 00 55 db 51

• A. 161
• B. 81
• C. 219
• D. 85

Answer: D

NEW QUESTION 13
Which of the following would be a valid reason to use a Windows workgroup?

• A. Lower initial cost
• B. Simplicity of single sign-on
• C. Centralized control
• D. Consistent permissions and rights

Answer: D

NEW QUESTION 14
Which of the following is a name, symbol, or slogan with which a product is identified?

• A. Copyright
• B. Trademark
• C. Trade secret
• D. Patent

Answer: B

NEW QUESTION 15
While using Wire shark to investigate complaints of users being unable to login to a web application, you come across an HTTP POST submitted through your web application. The contents of the POST are listed below. Based on what you see below, which of the following would you recommend to prevent future damage to your database?

• A. Use ssh to prevent a denial of service attack
• B. Sanitize user inputs to prevent injection attacks
• C. Authenticate users to prevent hackers from using your database
• D. Use https to prevent hackers from inserting malware

Answer: D

NEW QUESTION 16
Who is responsible for deciding the appropriate classification level for data within an organization?

• A. Data custodian
• B. Security auditor
• C. End user
• D. Data owner

Answer: B

NEW QUESTION 17
When an IIS filename extension is mapped, what does this mean?

• A. Files with the mapped extensions cannot be interpreted by the web serve
• B. The file and all the data from the browser's request are handed off to the mapped interprete
• C. The files with the mapped extensions are interpreted by CMD.EX
• D. The files with the mapped extensions are interpreted by the web browse

Answer: B

NEW QUESTION 18
Which of the following commands is used to change file access permissions in Linux?

• A. chgrp
• B. chperm
• C. chmod
• D. chown

Answer: C

NEW QUESTION 19
Which of the following describes software technologies that improve portability, manageability, and compatibility of applications by encapsulating them from the underlying operating system on which they are executed?

• A. System registry
• B. Group Policy
• C. Application virtualization
• D. System control

Answer: C

NEW QUESTION 20
......