Meilleur GIAC GISP GSNA GISF test formation guide

Nous croyons que pas mal de candidats voient les autres site web qui offrent les ressources de Q&A GIAC GISP. En fait, le Pass4Test est le seul site qui puisse offrir la Q&A recherchée par les experts réputés dans l'Industrie IT. Grâce à la Q&A de Pass4Test impressionée par la bonne qualité, vous pouvez réussir le test GIAC GISP sans aucune doute.

Pass4Test est un seul site de provider le guide d'étude GIAC GSNA de qualité. Peut-être que vous voyiez aussi les Q&A GIAC GSNA dans autres sites, mais vous allez découvrir laquelle est plus complète. En fait, Pass4Test est aussi une resource de Q&A pour les autres site web.

Pass4Test est un site à offrir les Q&As de tout les tests Certification IT. Chez Pass4Test, vous pouvez trouvez de meilleurs matériaux. Nos guides d'étude vous permettent de réussir le test Certification GIAC GISF sans aucune doute, sinon nous allons rendre votre argent d'acheter la Q&A et la mettre à jour tout de suite, en fait, c'est une situation très rare. Bien que il existe plusieurs façons à améliorer votre concurrence de carrière, Pass4Test est lequel plus efficace : Moins d'argent et moins de temps dépensés, plus sûr à passer le test Certification. De plus, un an de service après vendre est gratuit pour vous.

Pass4Test peut offrir la facilité aux candidats qui préparent le test GIAC GISP. Nombreux de candidats choisissent le Pass4Test à préparer le test et réussir finalement à la première fois. Les experts de Pass4Test sont expérimentés et spécialistes. Ils profitent leurs expériences riches et connaissances professionnelles à rechercher la Q&A GIAC GISP selon le résumé de test réel GIAC GISP. Vous pouvez réussir le test à la première fois sans aucune doute.

Code d'Examen: GISP
Nom d'Examen: GIAC (GIAC Information Security Professional)
Questions et réponses: 659 Q&As

Code d'Examen: GSNA
Nom d'Examen: GIAC (GIAC Systems and Network Auditor)
Questions et réponses: 368 Q&As

Code d'Examen: GISF
Nom d'Examen: GIAC (GIAC Information Security Fundamentals)
Questions et réponses: 438 Q&As

Bien qu'il ne soit pas facile à réussir le test GIAC GISP, c'est très improtant à choisir un bon outil de se former. Pass4Test a bien préparé les documentatinos et les exercices pour vous aider à réussir 100% le test. Pass4Test peut non seulement d'être une assurance du succès de votre test GIAC GISP, mais encore à vous aider d'économiser votre temps.

GISP Démo gratuit à télécharger: http://www.pass4test.fr/GISP.html

NO.1 Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources
that are required for them. Which of the following access control models will he use?
A. Role-Based Access Control
B. Discretionary Access Control
C. Mandatory Access Control
D. Policy Access Control
Answer: A

certification GIAC   certification GISP   GISP examen

NO.2 Which of the following statements about the bridge are true?
Each correct answer represents a complete solution. Choose two.
A. It filters traffic based on IP addresses.
B. It forwards broadcast packets.
C. It assigns a different network address per port.
D. It filters traffic based on MAC addresses.
Answer: B,D

certification GIAC   GISP examen   GISP examen   GISP examen   GISP

NO.3 Which of the following is a technique used to attack an Ethernet wired or wireless network?
A. DNS poisoning
B. Keystroke logging
C. Mail bombing
D. ARP poisoning
Answer: D

GIAC examen   certification GISP   GISP

NO.4 Which of the following attacks involves multiple compromised systems to attack a single target?
A. Brute force attack
B. DDoS attack
C. Dictionary attack
D. Replay attack
Answer: B

GIAC   certification GISP   certification GISP

NO.5 Which of the following statements about smurf is true?
A. It is an ICMP attack that involves spoofing and flooding.
B. It is a UDP attack that involves spoofing and flooding.
C. It is a denial of service (DoS) attack that leaves TCP ports open.
D. It is an attack with IP fragments that cannot be reassembled.
Answer: A

certification GIAC   certification GISP   certification GISP

NO.6 Which of the following statements about Switched Multimegabit Data Service (SMDS) are true?
Each correct answer represents a complete solution. Choose two.
A. It is a logical connection between two devices.
B. It uses fixed-length (53-byte) packets to transmit information.
C. It supports speeds of 1.544 Mbps over Digital Signal level 1 (DS-1) transmission facilities.
D. It is a high-speed WAN networking technology used for communication over public data networks
Answer: C,D

GIAC examen   GISP examen   certification GISP   GISP examen

NO.7 Which of the following is the best way of protecting important data against virus attack?
A. Updating the anti-virus software regularly.
B. Taking daily backup of data.
C. Using strong passwords to log on to the network.
D. Implementing a firewall.
Answer: A

GIAC examen   GISP   GISP

NO.8 Which of the following refers to encrypted text.?
A. Plaintext
B. Cookies
C. Hypertext
D. Ciphertext
Answer: D

certification GIAC   certification GISP   certification GISP   GISP   certification GISP

Les meilleures GIAC GCIH examen pratique questions et réponses

Passer le test GIAC GCIH, obtenir le Passport peut améliorer la perspective de votre carrière et vous apporter plus de chances à développer votre boulot. Pass4Test est un site très convenable pour les candidats de test Certification GIAC GCIH. Ce site peut offrir les informations plus nouvelles et aussi provider les bonnes chances à se former davantage. Ce sont les points essentiels pour votre succès de test Certification GIAC GCIH.

Pass4Test est un catalyseur de votre succès de test GIAC GCIH. En visant la Certification de GIAC, la Q7A de Pass4Test avec beaucoup de recherches est lancée. Si vous travillez dur encore juste pour passer le test GIAC GCIH, la Q&A GIAC GCIH est un bon choix pour vous.

Vous aurez une assurance 100% à réussir le test GIAC GCIH si vous choisissez le produit de Pass4Test. Si malheuresement, vous ne passerez pas le test, votre argent seront tout rendu.

Dépenser assez de temps et d'argent pour réussir le test GIAC GCIH ne peut pas vous assurer à passer le test GIAC GCIH sans aucune doute. Choisissez le Pass4Test, moins d'argent coûtés mais plus sûr pour le succès de test. Dans cette société, le temps est tellement précieux que vous devez choisir un bon site à vous aider. Choisir le Pass4Test symbole le succès dans le future.

Les produits de Pass4Test sont préparés pour le test Certification GIAC GCIH, y compris les formations et les informations ciblées au test GIAC GCIH. D'ailleurs, la Q&A de Pass4Test qui est impressionnée par la grande couverture des questions et la haute précision des réponses vous permet à réussir le test avec une haute note.

Code d'Examen: GCIH
Nom d'Examen: GIAC (GIAC Certified Incident Handler)
Questions et réponses: 335 Q&As

Pas besoin de beaucoup d'argent et de temps, vous pouvez passer le test GIAC GCIH juste avec la Q&A de GIAC GCIH offerte par Pass4Test qui vous offre le test simulation bien proche de test réel.

Nous sommes clairs que ce soit necessaire d'avoir quelques certificats IT dans cette industrie de plus en plus intense. Le Certificat IT est une bonne examination des connaissances démandées. Dans l'Industrie IT, le test GIAC GCIH est une bonne examination. Mais c'est difficile à passer le test GIAC GCIH. Pour améliorer le travail dans le future, c'est intélligent de prendre une bonne formation en coûtant un peu d'argent. Vous allez passer le test 100% en utilisant le Pass4Test. Votre argent sera tout rendu si votre test est raté.

GCIH Démo gratuit à télécharger: http://www.pass4test.fr/GCIH.html

NO.1 Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer
overflow occurs when a particular operation/function writes more data into a variable than the variable
was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.
A. Dynamic buffer overflows
B. Stack based buffer overflow
C. Heap based buffer overflow
D. Static buffer overflows
Answer: B, C

certification GIAC   GCIH   certification GCIH

NO.2 Which of the following types of attack can guess a hashed password?
A. Brute force attack
B. Evasion attack
C. Denial of Service attack
D. Teardrop attack
Answer: A

certification GIAC   GCIH   GCIH   GCIH

NO.3 Which of the following statements about buffer overflow is true?
A. It manages security credentials and public keys for message encryption.
B. It is a collection of files used by Microsoft for software updates released between major service pack
releases.
C. It is a condition in which an application receives more data than it is configured to accept.
D. It is a false warning about a virus.
Answer: C

certification GIAC   GCIH examen   GCIH examen

NO.4 Adam, a novice computer user, works primarily from home as a medical professional. He just bought a
brand new Dual Core Pentium computer with over 3 GB of RAM. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Adam uses antivirus software,
anti-spyware software, and keeps the computer up-to-date with Microsoft patches. After another month of
working on the computer, Adam finds that his computer is even more noticeably slow. He also notices a
window or two pop-up on his screen, but they quickly disappear. He has seen these windows show up,
even when he has not been on the Internet. Adam notices that his computer only has about 10 GB of free
space available. Since his hard drive is a 200 GB hard drive, Adam thinks this is very odd.
Which of the following is the mostly likely the cause of the problem.?
A. Computer is infected with the stealth kernel level rootkit.
B. Computer is infected with stealth virus.
C. Computer is infected with the Stealth Trojan Virus.
D. Computer is infected with the Self-Replication Worm.
Answer: A

certification GIAC   certification GCIH   certification GCIH   GCIH   GCIH examen

NO.5 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and
successfully logs in to the user page of the Web site. The We-are-secure login page is vulnerable to a
__________.
A. Dictionary attack
B. SQL injection attack
C. Replay attack
D. Land attack
Answer: B

GIAC examen   GCIH examen   GCIH   GCIH

NO.6 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The
output of the scanning test is as follows:
C:\whisker.pl -h target_IP_address
-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv
John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server.
Which of the following statements about 'Printenv' vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.
A. This vulnerability helps in a cross site scripting attack.
B. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the
attacker.
C. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
D. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other
malicious scripts.
Answer: A, C, D

GIAC   GCIH   GCIH examen   GCIH   GCIH

NO.7 Adam works as an Incident Handler for Umbrella Inc. He has been sent to the California unit to train the
members of the incident response team. As a demo project he asked members of the incident response
team to perform the following actions:
Remove the network cable wires.
Isolate the system on a separate VLAN.
Use a firewall or access lists to prevent communication into or out of the system.
Change DNS entries to direct traffic away from compromised system.
Which of the following steps of the incident handling process includes the above actions?
A. Identification
B. Containment
C. Eradication
D. Recovery
Answer: B

GIAC examen   GCIH   certification GCIH   certification GCIH   GCIH examen

NO.8 Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not
concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
A. UDP sacn
B. TCP Connect scan
C. ACK scan
D. Fin scan
Answer: B

GIAC   GCIH   GCIH examen

NO.9 Which of the following are the primary goals of the incident handling team?
Each correct answer represents a complete solution. Choose all that apply.
A. Freeze the scene.
B. Repair any damage caused by an incident.
C. Prevent any further damage.
D. Inform higher authorities.
Answer: A, B, C

GIAC   certification GCIH   GCIH   GCIH   certification GCIH   GCIH

NO.10 Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.
A. tcp wrapper provides access control, host address spoofing, client username lookups, etc.
B. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running
the server program directly.
C. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as
tokens to filter for access control purposes.
D. tcp wrapper protects a Linux server from IP address spoofing.
Answer: A, B, C

GIAC   GCIH   GCIH   certification GCIH   GCIH

NO.11 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of
Cross-Site Scripting attack Ryan intends to do?
A. Non persistent
B. Document Object Model (DOM)
C. SAX
D. Persistent
Answer: D

GIAC   GCIH   certification GCIH   certification GCIH

NO.12 Choose and reorder the steps of an incident handling process in their correct order.
A.
Answer: A

certification GIAC   certification GCIH   certification GCIH   certification GCIH   GCIH

NO.13 Which of the following statements about Denial-of-Service (DoS) attack are true?
Each correct answer represents a complete solution. Choose three.
A. It disrupts services to a specific computer.
B. It changes the configuration of the TCP/IP protocol.
C. It saturates network resources.
D. It disrupts connections between two computers, preventing communications between services.
Answer: A, C, D

certification GIAC   GCIH   GCIH examen

NO.14 Which of the following statements are true about a keylogger?
Each correct answer represents a complete solution. Choose all that apply.
A. It records all keystrokes on the victim's computer in a predefined log file.
B. It can be remotely installed on a computer system.
C. It is a software tool used to trace all or specific activities of a user on a computer.
D. It uses hidden code to destroy or scramble data on the hard disk.
Answer: A, B, C

GIAC   GCIH   GCIH examen   certification GCIH

NO.15 In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to
the target system?
A. Ping of death
B. Jolt
C. Fraggle
D. Teardrop
Answer: A

GIAC   GCIH examen   GCIH   GCIH

NO.16 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a
countermeasure, he suggests that the Network Administrator should remove the IPP printing capability
from the server. He is suggesting this as a countermeasure against __________.
A. IIS buffer overflow
B. NetBIOS NULL session
C. SNMP enumeration
D. DNS zone transfer
Answer: A

GIAC   GCIH   GCIH examen   GCIH

NO.17 Which of the following applications is an example of a data-sending Trojan?
A. SubSeven
B. Senna Spy Generator
C. Firekiller 2000
D. eBlaster
Answer: D

GIAC   GCIH   GCIH   GCIH

NO.18 Adam has installed and configured his wireless network. He has enabled numerous security features
such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless
router. Adam notices that when he uses his wireless connection, the speed is sometimes 16 Mbps and
sometimes it is only 8 Mbps or less. Adam connects to the management utility wireless router and finds
out that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the
router's logs and notices that the unfamiliar machine has the same MAC address as his laptop.
Which of the following attacks has been occurred on the wireless network of Adam?
A. NAT spoofing
B. DNS cache poisoning
C. MAC spoofing
D. ARP spoofing
Answer: C

certification GIAC   GCIH   GCIH

NO.19 Which of the following is a technique of using a modem to automatically scan a list of telephone
numbers, usually dialing every number in a local area code to search for computers, Bulletin board
systems, and fax machines?
A. Demon dialing
B. Warkitting
C. War driving
D. Wardialing
Answer: D

GIAC   certification GCIH   GCIH

NO.20 Which of the following types of attacks is only intended to make a computer resource unavailable to its
users?
A. Denial of Service attack
B. Replay attack
C. Teardrop attack
D. Land attack
Answer: A

GIAC examen   GCIH   GCIH   certification GCIH   GCIH

NO.21 John works as a Professional Penetration Tester. He has been assigned a project to test the Website
security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a
username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure
Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve
the security of the we-are-secure Website login page from the SQL injection attack?
A. Use the escapeshellarg() function
B. Use the session_regenerate_id() function
C. Use the mysql_real_escape_string() function for escaping input
D. Use the escapeshellcmd() function
Answer: C

GIAC   certification GCIH   GCIH

NO.22 Which of the following types of attacks is the result of vulnerabilities in a program due to poor
programming techniques?
A. Evasion attack
B. Denial-of-Service (DoS) attack
C. Ping of death attack
D. Buffer overflow attack
Answer: D

certification GIAC   GCIH   GCIH   GCIH examen   GCIH examen   GCIH

NO.23 Network mapping provides a security testing team with a blueprint of the organization. Which of the
following steps is NOT a part of manual network mapping?
A. Gathering private and public IP addresses
B. Collecting employees information
C. Banner grabbing
D. Performing Neotracerouting
Answer: D

GIAC   GCIH   GCIH examen

NO.24 You see the career section of a company's Web site and analyze the job profile requirements. You
conclude that the company wants professionals who have a sharp knowledge of Windows server 2003
and Windows active directory installation and placement. Which of the following steps are you using to
perform hacking?
A. Scanning
B. Covering tracks
C. Reconnaissance
D. Gaining access
Answer: C

GIAC examen   GCIH   GCIH   certification GCIH

NO.25 Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All
computers run on Windows XP. Manager of the Sales department complains Adam about the unusual
behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his
computer overnight. Adam suspects that some malicious software or Trojans have been installed on the
computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346,
and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one
application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?
A. Cheops-ng is installed on the computer.
B. Elsave is installed on the computer.
C. NetBus is installed on the computer.
D. NetStumbler is installed on the computer.
Answer: C

GIAC examen   GCIH   GCIH examen   GCIH

NO.26 You have configured a virtualized Internet browser on your Windows XP professional computer. Using
the virtualized Internet browser, you can protect your operating system from which of the following?
A. Brute force attack
B. Mail bombing
C. Distributed denial of service (DDOS) attack
D. Malware installation from unknown Web sites
Answer: D

certification GIAC   GCIH   GCIH

NO.27 Which of the following commands is used to access Windows resources from Linux workstation?
A. mutt
B. scp
C. rsync
D. smbclient
Answer: D

GIAC   GCIH examen   GCIH examen   certification GCIH

NO.28 Which of the following statements are true about worms?
Each correct answer represents a complete solution. Choose all that apply.
A. Worms cause harm to the network by consuming bandwidth, whereas viruses almost always corrupt or
modify files on a targeted computer.
B. Worms can exist inside files such as Word or Excel documents.
C. One feature of worms is keystroke logging.
D. Worms replicate themselves from one system to another without using a host file.
Answer: A, B, D

GIAC examen   GCIH examen   GCIH   GCIH   GCIH

NO.29 Fill in the blank with the appropriate word.
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use
______ defense against buffer overflow attacks.
A. canary
Answer: A

GIAC examen   GCIH   GCIH   certification GCIH

NO.30 Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary
attack?
A. Whishker
B. Nessus
C. SARA
D. Nmap
Answer: B

GIAC examen   GCIH   GCIH   GCIH   GCIH   certification GCIH

Pass4Test a une équipe se composant des experts qui font la recherche particulièrement des exercices et des Q&As pour le test certification GIAC GCIH, d'ailleurs ils peuvent vous proposer à propos de choisir l'outil de se former en ligne. Si vous avez envie d'acheter une Q&A de Pass4Test, Pass4Test vous offrira de matériaux plus détailés et plus nouveaux pour vous aider à approcher au maximum le test réel. Assurez-vous de choisir le Pass4Test, vous réussirez 100% le test GIAC GCIH.

Les meilleures GIAC GSLC examen pratique questions et réponses

Le test GIAC GSLC est le premier pas pour promouvoir dans l'Industrie IT, mais aussi la seule rue ramenée au pic de succès. Le test GIAC GSLC joue un rôle très important dans cette industrie. Et aussi, Pass4Test est un chaînon inevitable pour réussir le test sans aucune doute.

Dans cette société bien intense, c'est avantage si quelque'un a une technique particulère, donc c'est pourquoi beaucoup de gens ont envie de dépnenser les efforts et le temps à préparer le test GIAC GSLC, mais ils ne peuvaient pas réussir finalement. C'est juste parce que ils ont pas bien choisi une bonne formation. L'outil de formation lancé par les experts de Pass4Test vous permet à passer le test GIAC GSLC coûtant un peu d'argent.

Code d'Examen: GSLC
Nom d'Examen: GIAC (GIAC Security Leadership Certification (GSLC))
Questions et réponses: 567 Q&As

Si vous êtes intéressé par l'outil formation GIAC GSLC étudié par Pass4Test, vous pouvez télécharger tout d'abord le démo. Le service de la mise à jour gratuite pendant un an est aussi offert pour vous.

Pass4Test est un fournisseur de formation pour une courte terme, et Pass4Test peut vous assurer le succès de test GIAC GSLC. Si malheureusement, vous échouez le test, votre argent sera tout rendu. Vous pouvez télécharger le démo gratuit avant de choisir Pass4Test. Au moment là, vous serez confiant sur Pass4Test.

L'équipe de Pass4Test se composant des experts dans le domaine IT. Toutes les Q&As sont examinées par nos experts. Les Q&As offertes par Pass4Test sont réputées pour sa grande couverture ( presque 100%) et sa haute précision. Vous pouvez trouver pas mal de sites similaires que Pass4Test, ces sites peut-être peuvent vous offrir aussi les guides d'études ou les services en ligne, mais on doit admettre que Pass4Test peut être la tête de ces nombreux sites. La mise à jour, la grande couverture des questions, la haute précision des réponses nous permettent à augmenter le taux à réussir le test Certification GIAC GSLC. Tous les points mentionnés ci-dessus seront une assurance 100% pour votre réussite de test Certification GIAC GSLC.

Vous avez aussi la possibilité à réussir le test GIAC GSLC. Pass4Test offre la service de la mise à jour gratuite pendant un an. Si vous échouez le test, votre argent sera tout rendu. Maintenant, vous pouvez télécharger la partie gratuite prendre examinser la qualité des produits de Pass4Test.

Le test GIAC GSLC est bien populaire dans l'Industrie IT. Mais ça coûte beaucoup de temps pour bien préparer le test. Le temps est certainemetn la fortune dans cette société. L'outil de formation offert par Pass4Test ne vous demande que 20 heures pour renforcer les connaissances essentales pour le test GIAC GSLC. Vous aurez une meilleure préparation bien que ce soit la première fois à participer le test.

GSLC Démo gratuit à télécharger: http://www.pass4test.fr/GSLC.html

NO.1 You work as a Network Administrator for Net World International. The company has a Windows Server
2008 network environment. The network is configured as a Windows Active Directory-based single
domain single forest network. The functional level of the forest is Windows Server 2008. All client
computers on the network run Windows Vista Ultimate. You configure a public key infrastructure (PKI) on
the network. You configure a root CA and a subordinate CA on the network. For security reasons, you
want to take the root CA offline. You are required to configure the CA servers to support for certificate
revocation.
Choose the steps you will take to accomplish the task.
A.
Answer: A

GIAC   GSLC   GSLC examen   GSLC   certification GSLC

NO.2 Which of the following options is an approach to restricting system access to authorized users?
A. MIC
B. MAC
C. RBAC
D. DAC
Answer: C

certification GIAC   certification GSLC   certification GSLC   GSLC   GSLC

NO.3 Rick, the Network Administrator of the Fimbry Hardware Inc., wants to design the initial test model for
Internet Access. He wants to fulfill the following goals:
No external traffic should be allowed into the network.
Administrators should be able to restrict the websites which can be accessed by the internal
users.
Which of the following technologies should he use to accomplish the above goals? (Click the Exhibit
button on the toolbar to see the case study.)
A. Internet Connection Sharing (ICS)
B. Network Address Translator (NAT)
C. Firewall
D. Proxy Server
E. Routing and Remote Access Service (RRAS)
Answer: D

GIAC   GSLC examen   GSLC

NO.4 You work as a Network Administrator for Perfect Solutions Inc. The company has a Windows Active
Directory-based single domain single forest network. The company's network is connected to the Internet
through a T1 line. The firewall is configured on the network for securing the internal network from the
intruders on the Internet. The functional level of the forest is Windows Server 2003. You are designing a
public key infrastructure (PKI) for the network. The security policy of the company states that all users
should use smart cards for authentication. Select and place the type of certificate authority (CA) that is
required to be configured on the network to implement the security policy of the company.
A.
Answer: A

GIAC   GSLC   GSLC   certification GSLC

NO.5 You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008
domain-based network. The network has three Windows Server 2008 member servers and 150 Windows
Vista client computers. According to the company's security policy, you want to apply a firewall profile to
the network.Choose the firewall profiles supported by Windows Server 2008 and Windows Vista.
A.
Answer: A

certification GIAC   GSLC   GSLC examen   GSLC   GSLC   certification GSLC

NO.6 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Automated penetration testing
B. Code review
C. Manual penetration testing
D. Vulnerability scanning
Answer: D

GIAC examen   GSLC   GSLC   GSLC examen   GSLC examen   GSLC examen

NO.7 Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active
Directory domain-based network. The domain contains one hundred Windows XP Professional client
computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired
Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client
computers must be able to automatically connect to the wireless LAN. However, the unauthorized
computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants
to configure all the wireless access points and client computers to act in accordance with the company's
security policy. What will he do to accomplish this?
Each correct answer represents a part of the solution. Choose three.
A. Configure the authentication type for the wireless LAN to Open system.
B. Install a firewall software on each wireless access point.
C. Configure the authentication type for the wireless LAN to Shared Key.
D. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
E. Broadcast SSID to connect to the access point (AP).
F. On each client computer, add the SSID for the wireless LAN as the preferred network.
Answer: C, D. F

NO.8 Which of the following is used to describe the type of FTP access in which a user does not have
permissions to list the contents of directories, but can access the contents if he knows the path and file
name?
A. Secure FTP
B. Blind FTP
C. Passive FTP
D. Hidden FTP
Answer: B

certification GIAC   GSLC examen   GSLC   certification GSLC

NO.9 Which of the following protocols is used as a transport protocol for Internet dial-up connections?
A. SMTP
B. SNMP
C. DHCP
D. PPP
Answer: D

certification GIAC   GSLC examen   certification GSLC   GSLC

NO.10 Which of the following encryption algorithms is applied in the PGP encryption system?
A. TDE
B. Triple DES
C. Blowfish
D. IDEA
Answer: D

certification GIAC   GSLC   GSLC

NO.11 Which system is designed to analyze, detect, and report on security-related events.?
A. HIPS
B. NIPS
C. NIDS
D. HIDS
Answer: B

GIAC   GSLC   GSLC

NO.12 Drag and Drop the layers of TCP/IP model according to their level of data encapsulation.
A.
Answer: A

GIAC   GSLC examen   GSLC   GSLC examen   certification GSLC

NO.13 Which of the following tools is based on Linux and used to carry out the Penetration Testing?
A. JPlag
B. BackTrack
C. Vedit
D. Ettercap
Answer: B

GIAC   GSLC   certification GSLC   certification GSLC   GSLC

NO.14 Which of the following viruses is designed to prevent antivirus researchers from examining its code by
using various methods that make tracing and disassembling difficult?
A. Armored virus
B. Stealth virus
C. Multipartite virus
D. Polymorphic virus
Answer: A

GIAC   GSLC   certification GSLC

NO.15 Fill in the blank with the appropriate word.
A_______ is a computer system on the Internet that is expressly set up to attract and trap people who
attempt to penetrate other people's computer systems.
A. honeypot
Answer: A

GIAC   GSLC   GSLC examen   certification GSLC   certification GSLC

NO.16 You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single forest single
domain network. The domain functional level is set to Windows Server 2003. You have configured an
Active Directory-integrated DNS zone on the network. A new security policy dictates that each incoming
DNS query should be recorded. Which of the following steps will you take to implement the new security
policy?
A. Create a GPO.
Configure Audit Object Access.
Attach the GPO to the domain.
B. Do nothing, each incoming DNS queries is recorded by default in DNS.LOG file.
C. Enable debug logging on the DNS server.
D. Create a new OU.
Move the DNS server account to the OU.
Create a GPO.
Configure Audit Logon events.
Attach the GPO to the OU.
Answer: C

GIAC   GSLC examen   GSLC examen   certification GSLC

NO.17 Fill in the blank with the appropriate type of router.
A ______ router performs packet-filtering and is used as a firewall.
A. screening
Answer: A

GIAC   GSLC   GSLC examen   GSLC   GSLC

NO.18 Which of the following are the examples of administrative controls?
Each correct answer represents a complete solution. Choose all that apply.
A. Security policy
B. Auditing
C. Security awareness training
D. Data Backup
Answer: A, C

GIAC examen   certification GSLC   GSLC   GSLC examen

NO.19 A wireless network uses multiple modulation schemes to make the signal strong so that it can travel far.
These modulation schemes work with a certain IEEE standard. Choose and drop the correct standards in
the right pane according to the modulation scheme.
A.
Answer: A

certification GIAC   GSLC   GSLC examen   certification GSLC   GSLC

NO.20 Which of the following programs can collect various types of personal information, such as Internet
surfing habits, and Web sites that the user has visited?
A. Spyware
B. Honeypot
C. Worm
D. Malware
Answer: A

GIAC   certification GSLC   certification GSLC

NO.21 Which of the following provides security by implementing authentication and encryption on Wireless
LAN (WLAN)?
A. WEP
B. WAP
C. L2TP
D. IPSec
Answer: A

GIAC   GSLC   certification GSLC   GSLC   GSLC

NO.22 Janet is the project manager of the NHQ Project for her company. Janet is nearly done leading the
project and there have been no cost or schedule overruns in the development of the new software for her
company. The project team has been completing their work on time and there is still $75,000 left in the
project budget. Janet decides to have the project team implement some extra features to the project
scope to use all of the $75,000 in the budget even though the customer didn't specifically ask for the
added features. This scenario is an example of which one of the following?
A. Scope creep
B. Gold plating
C. Change management
D. Value added change
Answer: B

certification GIAC   GSLC   certification GSLC   GSLC

NO.23 John works as a Programmer for We-are-secure Inc. On one of his routine visits to the company, he
noted down the passwords of the employees while they were typing them on their computer screens.
Which of the following social engineering attacks did he just perform?
A. Shoulder surfing
B. Important user posing
C. Dumpster diving
D. Authorization by third party
Answer: A

GIAC   GSLC examen   GSLC   GSLC examen

NO.24 Which of the following applications would be considered a data warehousing application?
A. Golf score tracking
B. Badge reader
C. Fraud detection
D. eCommerce site
Answer: C

GIAC examen   GSLC examen   certification GSLC   GSLC

NO.25 Which of the following are the goals of risk management?
Each correct answer represents a complete solution. Choose three.
A. Identifying the risk
B. Finding an economic balance between the impact of the risk and the cost of the countermeasure
C. Identifying the accused
D. Assessing the impact of potential threats
Answer: A, B, D

GIAC   GSLC examen   certification GSLC   certification GSLC

NO.26 You are the project manager for your organization and are trying to determine which vendor your
organization will use. You have determined that any vendor that would like to bid on your project work will
need to have a Microsoft Certified System Engineer on staff, have eight years of Cisco experience, and
have at least two references from similar projects. What have you created in this scenario?
A. Screening system for the vendors
B. Weighting system for the vendors
C. Preferred vendors list
D. Bidders conference
Answer: A

GIAC   GSLC   GSLC examen   GSLC   GSLC   GSLC examen

NO.27 You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Server 2008
Active Directory-based single domain single forest network. The functional level of the forest is Windows
Server 2008. The company's headquarters is located at Los Angeles. A branch office of the company is
located at Denver. You are about to send a message to Rick who is a Network Administrator at Denver.
You want to ensure that the message cannot be read by anyone but the recipient. Which of the following
keys will you use to encrypt the message?
A. Your public key
B. The recipient's private key
C. The recipient's public key
D. Your private key
Answer: C

GIAC   GSLC   GSLC examen   GSLC   certification GSLC

NO.28 The promiscuous mode is a configuration of a network card that makes the card pass all traffic it
receives to the central processing unit rather than just packets addressed to it. Which of the following
tools works by placing the host system network card into the promiscuous mode?
A. Sniffer
B. THC-Scan
C. NetStumbler
D. Snort
Answer: A

GIAC examen   GSLC   GSLC   GSLC examen   GSLC examen

NO.29 You work as a Network Administrator for Net World International. The company has a Windows Server
2008 network environment. The network is configured as a Windows Active Directory-based single
domain single forest network. The functional level of the forest is Windows Server 2008. All client
computers on the network run Windows Vista Ultimate.
You are configuring a public key interface (PKI) to support domain users and computers. All users will use
smart cards for logon. You have configured a global group named SCIssuer that will issue smart cards for
all domain users. A file server named SecServer is configured on the network. The certificate-based
IPSec encryption is required for all communications to and from the SecServer server. A VPN server is
configured on the network to enable sales managers to connect to the network remotely using their
laptops which run Windows Vista Ultimate. The L2TP connection is required for the VPN server. Place the
users, computers, and groups to the certificate templates that are required for implementing the PKI
infrastructure.
A.
Answer: A

GIAC   GSLC examen   GSLC

NO.30 Drop the appropriate value to complete the formula.
A.
Answer: A

GIAC   GSLC examen   certification GSLC

Le Certificat de GIAC GSLC signifie aussi un nouveau jalon de la carrière, le travail aura une space plus grande à augmenter, et tout le monde dans l'industrie IT sont désireux de l'obtenir. En face d'une grande passion pour le test Certification GIAC GSLC, le contrariété est le taux très faible à réussir. Bien sûr que l'on ne passe pas le test GSLC sans aucun éffort, en même temps, le test de GIAC GSLC demande les connaissances bien professionnelles. Le guide d'étude dans le site Pass4Test peut vous fournir un raccourci à réussir le test GIAC GSLC et à obtenir le Certificat de ce test. Choisissez le guide d'étude de Pass4Test, vous verrez moins de temps dépensés, moins d'efforts contribués, mais plus de chances à réussir le test. Ça c'est une solution bien rentable pour vous.

GIAC meilleur examen GSSP-NET, questions et réponses

Pass4Test a une équipe se composant des experts qui font la recherche particulièrement des exercices et des Q&As pour le test certification GIAC GSSP-NET, d'ailleurs ils peuvent vous proposer à propos de choisir l'outil de se former en ligne. Si vous avez envie d'acheter une Q&A de Pass4Test, Pass4Test vous offrira de matériaux plus détailés et plus nouveaux pour vous aider à approcher au maximum le test réel. Assurez-vous de choisir le Pass4Test, vous réussirez 100% le test GIAC GSSP-NET.

Dans cette société de l'information technologies, c'est bien populaire que l'on prenne la formation en Internet, Pass4Test est l'un des sites d'offrir la formation particulère pour le test GIAC GSSP-NET. Pass4Test a une expérience riche pour répondre les demandes des candidats.

Code d'Examen: GSSP-NET
Nom d'Examen: GIAC (GIAC GIAC Secure Software Programmer - C#.NET )
Questions et réponses: 491 Q&As

C'est pas facile à passer le test Certification GIAC GSSP-NET, choisir une bonne formation est le premier bas de réussir, donc choisir une bonne resource des informations de test GIAC GSSP-NET est l'assurance du succès. Pass4Test est une assurance comme ça. Une fois que vous choisissez le test GIAC GSSP-NET, vous allez passer le test GIAC GSSP-NET avec succès, de plus, un an de service en ligne après vendre est gratuit pour vous.

Le test GIAC GSSP-NET est bien populaire dans l'Industrie IT. Mais ça coûte beaucoup de temps pour bien préparer le test. Le temps est certainemetn la fortune dans cette société. L'outil de formation offert par Pass4Test ne vous demande que 20 heures pour renforcer les connaissances essentales pour le test GIAC GSSP-NET. Vous aurez une meilleure préparation bien que ce soit la première fois à participer le test.

GSSP-NET Démo gratuit à télécharger: http://www.pass4test.fr/GSSP-NET.html

NO.1 In .NET Framework 3.5, you can create and access values that persist from one application session to
another. What are these values called?
A. Objects
B. Settings
C. Properties
D. Attributes
Answer: B

GIAC   GSSP-NET examen   GSSP-NET examen   GSSP-NET   certification GSSP-NET

NO.2 You work as a Software Developer for Mansoft Inc. You create an application and use it to create code
access security policies. Which of the following tools will you use to examine and modify code access
security policies from a batch file?
A. Tlbimp.exe
B. GacUtil.exe
C. Sn.exe
D. Caspol.exe
E. StoreAdm.exe
Answer: D

GIAC   GSSP-NET examen   GSSP-NET examen   certification GSSP-NET   certification GSSP-NET   GSSP-NET

NO.3 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You create an ASP.NET Web application using the .NET
Framework 3.5. You want to use a HTTP module called on each and every request made by the
application. It is called as part of the ASP.NET request pipeline. It has right to access life-cycle events
throughout the request. You also want to ensure that the HTTP module allows a user to inspect incoming
and outgoing requests and take appropriate action based on the request. What will be the correct order to
create the HTTP module?
A.
Answer: A

GIAC examen   certification GSSP-NET   GSSP-NET examen

NO.4 Allen works as a Software Developer for ABC Inc. The company uses Visual Studio.NET as its
application development platform. He creates an application using .NET Framework. He wants to encrypt
all his e-mails that he sends to anyone. Which of the following will he use to accomplish the task?
A. PPP
B. FTP
C. PPTP
D. PGP
Answer: D

GIAC examen   certification GSSP-NET   certification GSSP-NET   certification GSSP-NET

NO.5 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You create an ASP.NET Web application using the .NET Framework
3.5. The application contains two HTML pages named Error.htm and
PageNotFound.htm. You want to make sure that the following requirements are met:
l When any user requests a page that does not exist, the PageNotFound.htm page is
displayed.
l When any other error occurs, the Error.htm page is displayed. Which of the following code segments will
you add to the Web.config file to accomplish this task?
A. <customErrors mode="On" defaultRedirect="Error.htm">
<error statusCode="404" redirect="PageNotFound.htm"/>
</customErrors>
B. <customErrors mode="Off">
<error statusCode="400" redirect="Error.htm"/>
<error statusCode="404" redirect="PageNotFound.htm"/>
</customErrors>
C. <customErrors mode="On">
<error statusCode="400" redirect="Error.htm"/>
<error statusCode="404" redirect="PageNotFound.htm"/> </customErrors>
D. <customErrors mode="Off" defaultRedirect="Error.htm"> <error statusCode="404"
redirect="PageNotFound.htm"/> </customErrors>
Answer: A

GIAC examen   GSSP-NET   GSSP-NET examen

NO.6 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its
application development platform. You create an application for the company. You need to validate the
phone number passed to a class as a parameter in the application. Which of the following is the most
effective way to verify that the format of the data matches a phone number.?
A. Regular expressions
B. Nested If statements
C. Use the String.Length property
D. A try/catch block
Answer: A

GIAC   certification GSSP-NET   certification GSSP-NET   GSSP-NET examen   GSSP-NET examen

NO.7 You can use LINQ in an ASP.NET application through the LinqDataSource control, the __________
control, or by creating LINQ queries.
A. ADO.NET DataSet
B. ObjectDataSource
C. SqlDataSource
D. XmlDataSource
Answer: B

GIAC   certification GSSP-NET   GSSP-NET examen   GSSP-NET   GSSP-NET

NO.8 Which of the following session and instancing modes will you set if you require a sessionfull binding
and want to create a new instance object for each client request?
A. Set SessionMode to Allowed and IntsanceMode to PerSession.
B. Set SessionMode to Required and IntsanceMode to Single.
C. Set SessionMode to Required and IntsanceMode to PerCall.
D. Set SessionMode to Allowed and IntsanceMode to PerCall.
Answer: C

GIAC   certification GSSP-NET   GSSP-NET   certification GSSP-NET

NO.9 You work as an Application Developer for ABC Inc. You are assigned with developing a Web site that
will handle information related to monthly sales of the company. You wish to secure the Web site so that
only employees of the Accounts department can view the Web pages. You need to create roles for the
employees of this department. The user account information will be stored in a SQL Server database
named Database. You decide to do all this by using the Web Site Administration Tool. Which of the
following types of security will you use to accomplish the task?
A. Forms-based authentication
B. Integrated Microsoft Windows authentication
C. Basic authentication
D. Digest authentication
Answer: A

GIAC examen   GSSP-NET examen   GSSP-NET examen   GSSP-NET   GSSP-NET

NO.10 You work as a Software Developer for ABC Inc. The company has several branches worldwide. The
company uses Visual Studio.NET 2005 as its application development platform. You have recently
finished the development of an application using .NET Framework 2.0. The application can be used only
for cryptography. Therefore, you have implemented the application on a computer. What will you call the
computer that implemented cryptography?
A. Cryptographic toolkit
B. Cryptosystem
C. Cryptographer
D. Cryptanalyst
Answer: B

GIAC examen   certification GSSP-NET   certification GSSP-NET   certification GSSP-NET   GSSP-NET examen

NO.11 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its
application development platform. You have recently finished development of a Windows application
using .NET Framework. Users report that the application is not running properly. When the users try to
complete a particular action, the following error message comes out:
Unable to find assembly 'myservices, Version=1.0.0.0, Culture=neutral,
PublicKeyToken=29b5ad26c9de9b95'.
You notice that the error occurs as soon as the application tries to call functionality in a serviced
component that was registered by using the following command:
regsvcs.exe myservices.dll
You must make sure that the application can call the functionality in the serviced component with no
exceptions being thrown. What will you do to accomplish this task?
A. Run the command line tool: regasm.exe myservices.dll.
B. Copy the serviced component assembly into the C:\Program Files\ComPlus Applications fold er.
C. Run the command line tool: gacutil.exe /i myservices.dll.
D. Copy the serviced component assembly into the C:\WINDOWS\system32\Com folder.
Answer: C

certification GIAC   GSSP-NET   GSSP-NET

NO.12 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its
application development platform. You create an ASP.NET Web application using .NET Framework 3.5.
You create a Web form in the application that permits users to provide personal information. You add a
DropDownList control to the Web form to retrieve the residential status of users. The default item that the
DropDownList control displays is the "Select Country" option. You have to ensure that users select a
country other than the default option. Which of the following validation controls should you use to
accomplish this task?
A. RangeValidator
B. RequiredFieldValidator
C. CustomValidator
D. RegularExpressionValidator
Answer: B

GIAC examen   GSSP-NET   GSSP-NET   GSSP-NET

NO.13 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET as its application
development platform. You create a class library using the .NET Framework. The library will be used to
open the NSCs of computers. Later, you will set up the class library to the GAC and provide it Full Trust
permission. You write down the following code segments for the socket connections:
SocketPermission permission = new SocketPermission(PermissionState.Unrestricted);
permission.Assert();
A number of the applications that use the class library may not have the necessary permissions to open
the network socket connections. Therefore, you are required to withdraw the assertion. Which of the
following code segments will you use to accomplish the task?
A. permission.PermitOnly();
B. CodeAccessPermission.RevertDeny();
C. permission.Deny();
D. CodeAccessPermission.RevertAssert();
E. permission.Demand();
Answer: D

GIAC   GSSP-NET   GSSP-NET examen

NO.14 Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server
that hosts the company's Web site. Andrew wants to enhance the security of the Web site by
implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use?
Each correct answer represents a complete solution. Choose two.
A. Symmetric
B. Secret
C. IPSec
D. Asymmetric
Answer: A,D

GIAC examen   certification GSSP-NET   GSSP-NET

NO.15 Session variables can be any valid __________.
A. .NET Framework type
B. Integer type
C. SessionStateItemCollection object
D. Object type
Answer: A

GIAC   GSSP-NET examen   GSSP-NET examen   GSSP-NET   GSSP-NET

NO.16 You work as a Software Developer for ManSoft Inc. The company uses Visual Studio.NET 2005 as its
application development platform. You have recently created an application that includes the code shown
below.
string str1 = "ABC";
string str2 = "u";
str2 += "Certify";
Console.WriteLine(str1 == str2);
Console.WriteLine((Object) str1 == (Object) str2);
Console.WriteLine(str1.Equals(str2));
What will be the output of the above code?
A. False False False
B. False True False
C. True True True
D. True False True
Answer: D

GIAC examen   GSSP-NET   certification GSSP-NET

NO.17 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You have recently finished development of an ASP.NET Web
application using the .NET Framework 3.5. You host the application on a Web farm that consists of three
Web servers. You should configure the ASP.NET application for session state to meet the following
requirements:
l Session state data should not be lost if a server fails.
l Session state must be maintained across browser requests by the same user.
You are required to configure the Web.config file to meet these requirements. Which of the following
configurations will you use?
A. <sessionState mode="StateServer"/>
B. <sessionState mode="InProc"/>
C. <sessionState mode="Custom"/>
D. <sessionState mode="SQLServer"/>
Answer: D

GIAC   GSSP-NET   GSSP-NET examen   GSSP-NET

NO.18 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its
application development platform. You are creating an ASP.NET Web application using .NET Framework
3.5. The application will be used to share any type of photos on Internet. All the photos should be
accessible in various sizes and formats. You need to add a download feature that can be easily
maintained. You also need to make sure that only a single version of all photos is stored on a SQL server
database. What will you do?
A. Create an HttpModule class to determine the request for the photo download. Process the photo
according to the given format and size, and after that return the processed photo in the response.
B. Create a user control that converts the photo to the required format and size.
C. Create an HttpHandler class to determine the request for the photo download. Process the photo
according to the given format and size, and after that return the processed photo in the response.
D. Create an ActiveX control that converts the photo to the required format and size.
Answer: C

certification GIAC   GSSP-NET   GSSP-NET

NO.19 You work as a Software Developer for ABC Inc. The company has several branches worldwide. The
company uses Visual Studio .NET 2005 as its application development platform. You are creating an
application using .NET Framework 2.0. The application will be used by all the branches of the company.
You are using the CompareInfo class for culture-sensitive string comparisons. You write the following
code in the application:
String s1 = "C rtify";
String s2 = "c rtify";
String s3 = "c rtify";
You need to compare the s1 string with the s2 string and ensure that the string comparison must ignore
case. Which of the following code segments will you use to accomplish the task?
A. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.IgnoreCase));
B. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.None));
C. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.Ordinal));
D. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.OrdinalIgnoreCase));
Answer: A

GIAC   GSSP-NET   GSSP-NET   GSSP-NET   GSSP-NET examen

NO.20 Which of the following techniques is used to transmit passwords during authentication?
A. Asymmetric encryption
B. Hashing
C. Salted Hash
D. Symmetric encryption
Answer: C

GIAC   GSSP-NET examen   certification GSSP-NET   GSSP-NET examen   GSSP-NET

Choisissez le Pass4Test, choisissez le succès de test GIAC GSSP-NET. Bonne chance à vous.

GCFW dernières questions d'examen certification GIAC et réponses publiés

Le test GIAC GCFW peut bien examnier les connaissances et techniques professionnelles. Pass4Test est votre raccourci amené au succès de test GIAC GCFW. Chez Pass4Test, vous n'avez pas besoin de dépenser trop de temps et d'argent juste pour préparer le test GIAC GCFW. Travaillez avec l'outil formation de Pass4Test visé au test, il ne vous demande que 20 heures à préparer.

Au 21er siècle, il manque encore grand nombreux de gens qualifié de IT. Le test Certificat IT est une bonne façon à examiner les hommes de talent. Ce n'est pas un test facile à réussir. Un bon choix de formation est une assurance pour le succès de test. Le test simulation est bien proche que test réel. Vous pouvez réussir 100%, bien que ce soit la première à participer le test.

Est-que vous s'inquiétez encore à passer le test Certification GCFW qui demande beaucoup d'efforts? Est-que vous travaillez nuit et jour juste pour préparer le test de GIAC GCFW? Si vous voulez réussir le test GIAC GCFW plus facilement? N'hésitez plus à nous choisir. Pass4Test vous aidera à réaliser votre rêve.

Le suucès n'est pas loin de vous une fois que vous choisissez le produit de Q&A GIAC GCFW de Pass4Test.

Aujourd'hui, il y a pleine de professionnels IT dans cette société. Ces professionnels sont bien populaires mais ils ont à être en face d'une grande compétition. Donc beaucoup de professionnels IT se prouver par les tests de Certification très difficile à réussir. Pass4Test est voilà pour offrir un raccourci au succès de test Certification.

Le test GIAC GCFW est test certification très répandu dans l'industrie IT. Vous pourriez à améliorer votre niveau de vie, l'état dans l'industrie IT, etc. C'est aussi un test très rentable, mais très difficile à réussir.

Code d'Examen: GCFW
Nom d'Examen: GIAC (GIAC Certified Firewall Analyst)
Questions et réponses: 391 Q&As

Vous avez aussi la possibilité à réussir le test GIAC GCFW. Pass4Test offre la service de la mise à jour gratuite pendant un an. Si vous échouez le test, votre argent sera tout rendu. Maintenant, vous pouvez télécharger la partie gratuite prendre examinser la qualité des produits de Pass4Test.

GCFW Démo gratuit à télécharger: http://www.pass4test.fr/GCFW.html

NO.1 Which of the following ICMPv6 neighbor discovery messages is sent by hosts to request an immediate
router advertisement, instead of waiting for the next scheduled advertisement?
A. Router Advertisement
B. Neighbor Advertisement
C. Router Solicitation
D. Neighbor Solicitation
Answer: C

certification GIAC   GCFW examen   certification GCFW   certification GCFW

NO.2 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except the ports that must be used. He does need to have
port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still
worried about the programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block ICMP type 3 messages
C. Block all outgoing traffic on port 21
D. Block all outgoing traffic on port 53
Answer: A

certification GIAC   GCFW   GCFW   GCFW   GCFW examen   GCFW examen

NO.3 Which of the following is an attack with IP fragments that cannot be reassembled?
A. Dictionary attack
B. Smurf attack
C. Teardrop attack
D. Password guessing attack
Answer: C

GIAC   GCFW examen   GCFW

NO.4 Which of the following IDs is used to reassemble the fragments of a datagram at the destination point?
A. IP identification number
B. SSID
C. MAK ID
D. IP address
Answer: A

certification GIAC   certification GCFW   certification GCFW   certification GCFW   GCFW examen   certification GCFW

NO.5 Which of the following protocols does IPsec use to perform various security functions in the network?
Each correct answer represents a complete solution. Choose all that apply.
A. Skinny Client Control Protocol
B. Authentication Header
C. Encapsulating Security Payload
D. Internet Key Exchange
Answer: B,C,D

GIAC   certification GCFW   certification GCFW   GCFW

NO.6 A packet filtering firewall inspects each packet passing through the network and accepts or rejects it
based on user-defined rules. Based on which of the following information are these rules set to filter the
packets?
Each correct answer represents a complete solution. Choose all that apply.
A. Layer 4 protocol information
B. Actual data in the packet
C. Interface of sent or received traffic
D. Source and destination Layer 3 address
Answer: A,C,D

GIAC   GCFW examen   certification GCFW   GCFW

NO.7 John works as a professional Ethical Hacker. He has been assigned a project for testing the security of
www.we-are-secure.com. He wants to corrupt an IDS signature database so that performing attacks on
the server is made easy and he can observe the flaws in the We-are-secure server. To perform his task,
he first of all sends a virus that continuously changes its signature to avoid detection from IDS. Since the
new signature of the virus does not match the old signature, which is entered in the IDS signature
database, IDS becomes unable to point out the malicious virus. Which of the following IDS evasion
attacks is John performing?
A. Session splicing attack
B. Evasion attack
C. Polymorphic shell code attack
D. Insertion attack
Answer: C

GIAC   GCFW examen   GCFW   GCFW examen

NO.8 Which of the following commands configures a router to encrypt all passwords entered after the
command has been executed, as well as all passwords already on the running configuration?
A. no service password-encryption
B. enable password-encryption
C. no enable password-encryption
D. service password-encryption
Answer: D

GIAC examen   GCFW   certification GCFW   GCFW

NO.9 Which of the following statements are true about an IDP rule base notification?
A. It can be defined as reusable logical entities that the user can apply to the rules.
B. When an action is performed, a notification defines how to log information.
C. It is used to specify the type of network traffic that has to be monitored for attacks.
D. It directs an IDP to drop or close the connection.
Answer: B

GIAC   GCFW   GCFW   GCFW   GCFW

NO.10 Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing
(APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an
attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether.
The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
Answer: A,C,D,E

GIAC   GCFW   certification GCFW   GCFW examen   GCFW

NO.11 Which of the following can be monitored by using the host intrusion detection system (HIDS)?
Each correct answer represents a complete solution. Choose two.
A. Computer performance
B. File system integrity
C. Storage space on computers
D. System files
Answer: B,D

certification GIAC   GCFW examen   certification GCFW   GCFW examen   GCFW

NO.12 Which of the following are the reasons that network administrators use Access Control Lists?
Each correct answer represents a complete solution. Choose two.
A. Encrypting data to be routed
B. Removing weak user password
C. Controlling VTY access into a router
D. Filtering traffic as it passes through a router
Answer: C,D

GIAC   GCFW   certification GCFW   certification GCFW   GCFW

NO.13 Which of the following number ranges is used for the IP Standard ACL?
A. 100-199
B. 1000-1099
C. 600-699
D. 1-99
Answer: D

GIAC   GCFW   certification GCFW

NO.14 WinDump, tcpdump, and Wireshark specify which fields of information libpcap should record.
Which of the following filters do they use in order to accomplish the task?
A. Berkeley Packet Filter
B. IM filter
C. Web filter
D. FIR filter
Answer: A

certification GIAC   certification GCFW   GCFW   GCFW examen

NO.15 Which of the following proxy servers is placed anonymously between the client and remote server and
handles all of the traffic from the client?
A. Web proxy server
B. Open proxy server
C. Forced proxy server
D. Caching proxy server
Answer: C

GIAC examen   GCFW examen   certification GCFW   GCFW examen

NO.16 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP network. You have
been assigned a task to configure security mechanisms for the network of the company. You have
decided to configure a packet filtering firewall. Which of the following may be the reasons that made you
choose a packet filtering firewall as a security mechanism?
Each correct answer represents a complete solution. Choose all that apply.
A. It makes security transparent to end-users which provide easy use of the client application s.
B. It prevents application-layer attacks.
C. It is easy to install packet filtering firewalls in comparison to the other network security sol utions.
D. It easily matches most of the fields in Layer 3 packets and Layer 4 segment headers, and thus,
provides a lot of flexibility in implementing security policies.
Answer: A,C,D

GIAC examen   certification GCFW   GCFW

NO.17 Which of the following devices is used to identify out-of-date software versions, applicable patches,
system upgrades, etc?
A. Retinal scanner
B. Fingerprint reader
C. Smart card reader
D. Vulnerability scanner
Answer: D

certification GIAC   GCFW examen   GCFW

NO.18 Which of the following are the countermeasures against a man-in-the-middle attack?
Each correct answer represents a complete solution. Choose all that apply.
A. Using Secret keys for authentication.
B. Using public key infrastructure authentication.
C. Using Off-channel verification.
D. Using basic authentication.
Answer: A,B,C

certification GIAC   GCFW examen   GCFW   GCFW   GCFW   GCFW

NO.19 You work as a Security Manger for Tech Perfect Inc. The company has a Windows-based network.
You want to scroll real-time network traffic to a command console in a readable format. Which of the
following command line utilities will you use to accomplish the task?
A. WinPcap
B. WinDump
C. iptables
D. libpcap
Answer: B

GIAC   certification GCFW   GCFW   certification GCFW   GCFW

NO.20 Which of the following is the default port for POP3?
A. 25
B. 21
C. 80
D. 110
Answer: B

certification GIAC   GCFW   GCFW examen

NO.21 Which of the following limits the number of packets seen by tcpdump?
A. BPF-based filter
B. Recipient filtering
C. Sender filtering
D. IFilters
Answer: A

GIAC examen   certification GCFW   GCFW examen   GCFW examen   GCFW examen   GCFW

NO.22 Which of the following components are usually found in an Intrusion detection system (IDS).?
Each correct answer represents a complete solution. Choose two.
A. Firewall
B. Console
C. Gateway
D. Modem
E. Sensor
Answer: B,E

certification GIAC   GCFW examen   GCFW examen   GCFW

NO.23 Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6?
A. Electronic Codebook (ECB) Mode
B. Cipher Block Chaining (CBC) Mode
C. Propagating Cipher Block Chaining (PCBC) Mode
D. Cipher Feedback (CFB) Mode
Answer: B

GIAC examen   certification GCFW   GCFW

NO.24 Which of the following types of Intrusion Detection Systems consists of an agent on a host that identifies
intrusions by analyzing system calls, application logs, file-system modifications (binaries, password files,
capability/acl databases) and other host activities and state?
A. HIDS
B. NIDS
C. APIDS
D. PIDS
Answer: A

certification GIAC   GCFW   GCFW examen   GCFW   GCFW

NO.25 Which of the following intrusion detection systems (IDS) monitors network traffic and compares it
against an established baseline?
A. Network-based
B. File-based
C. Signature-based
D. Anomaly-based
Answer: D

certification GIAC   GCFW   certification GCFW   GCFW   GCFW

NO.26 You work as a Network Architect for Tech Perfect Inc. The company has a corporate LAN network. You
will have to perform the following tasks:
l Limit events that occur from security threats such as viruses, worms, and spyware.
l Restrict access to the network based on identity or security posture.
Which of the following services will you deploy in the network to accomplish the tasks?
A. NetFlow
B. Protocol-Independent Multicast
C. Network Admission Control
D. Firewall Service Module
Answer: C

certification GIAC   GCFW examen   GCFW examen   GCFW   GCFW

NO.27 A scenario involves a pool of users with private IP addresses who need to access the Internet;
however, the company has a limited number of IP addresses and needs to ensure users occupy only one
public IP address.
Which technology is used to allow a pool of users to share one global IP address for Internet access?
A. Port Address Translation
B. Per-user Address Translation
C. Pool Address Translation
D. Private Address Translation
Answer: A

GIAC   GCFW   GCFW examen   GCFW examen

NO.28 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
B. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
C. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: C

certification GIAC   GCFW   GCFW examen

NO.29 Choose the best explanation for the resulting error when entering the command below.
A. The command is attempting to create a standard access list with extended access list param eters.
B. The ACL commands should be entered from the (config-router) configuration mode.
C. The wildcard mask is not provided for the source and destination addresses.
D. The port number given does not correspond with the proper transport protocol.
Answer: A

certification GIAC   GCFW   GCFW

NO.30 Which of the following statements about the traceroute utility are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
B. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
C. It records the time taken for a round trip for each packet at each router.
D. It is an online tool that performs polymorphic shell code attacks.
Answer: B,C

GIAC   GCFW   certification GCFW

Vous n'avez besoin que de faire les exercices à propos du test GIAC GCFW offertes par Pass4Test, vous pouvez réussir le test sans aucune doute. Et ensuite, vous aurez plus de chances de promouvoir avec le Certificat. Si vous ajoutez le produit au panier, nous vous offrirons le service 24h en ligne.

GIAC GSLC, de formation et d'essai

C'est un bon choix si vous prendre l'outil de formation de Pass4Test. Vous pouvez télécharger tout d'abord le démo gratuit pour prendre un essai. Vous aurez plus confiances sur Pass4Test après l'essai de notre démo. Si malheureusement, vous ne passe pas le test, votre argent sera tout rendu.

Pass4Test provide non seulement le produit de qualité, mais aussi le bon service. Si malheureusement vous ne pouvez pas réussir le test, votre argent sera tout rendu. Le service de la mise à jour gratuite est aussi pour vous bien que vous passiez le test Certification.

Est-que vous s'inquiétez encore à passer le test Certification GSLC qui demande beaucoup d'efforts? Est-que vous travaillez nuit et jour juste pour préparer le test de GIAC GSLC? Si vous voulez réussir le test GIAC GSLC plus facilement? N'hésitez plus à nous choisir. Pass4Test vous aidera à réaliser votre rêve.

Le produit de Pass4Test peut assurer les candidats à réussir le test GIAC GSLC à la première fois, mais aussi offrir la mise à jour gratuite pendant un an, les clients peuvent recevoir les ressources plus nouvelles. Pass4Test n'est pas seulement un site, mais aussi un bon centre de service.

Pass4Test vous promet de vous aider à passer le test GIAC GSLC, vous pouvez télécharger maintenant les Q&As partielles de test GIAC GSLC en ligne. Il y a encore la mise à jour gratuite pendant un an pour vous. Si vous malheureusement rater le test, votre argent sera 100% rendu.

Code d'Examen: GSLC
Nom d'Examen: GIAC (GIAC Security Leadership Certification (GSLC))
Questions et réponses: 567 Q&As

GSLC Démo gratuit à télécharger: http://www.pass4test.fr/GSLC.html

NO.1 Fill in the blank with the appropriate type of router.
A ______ router performs packet-filtering and is used as a firewall.
A. screening
Answer: A

GIAC   GSLC   GSLC examen

NO.2 Which of the following are the goals of risk management?
Each correct answer represents a complete solution. Choose three.
A. Identifying the risk
B. Finding an economic balance between the impact of the risk and the cost of the countermeasure
C. Identifying the accused
D. Assessing the impact of potential threats
Answer: A, B, D

GIAC examen   certification GSLC   GSLC   GSLC   GSLC examen

NO.3 The promiscuous mode is a configuration of a network card that makes the card pass all traffic it
receives to the central processing unit rather than just packets addressed to it. Which of the following
tools works by placing the host system network card into the promiscuous mode?
A. Sniffer
B. THC-Scan
C. NetStumbler
D. Snort
Answer: A

GIAC examen   GSLC   certification GSLC   GSLC examen

NO.4 You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single forest single
domain network. The domain functional level is set to Windows Server 2003. You have configured an
Active Directory-integrated DNS zone on the network. A new security policy dictates that each incoming
DNS query should be recorded. Which of the following steps will you take to implement the new security
policy?
A. Create a GPO.
Configure Audit Object Access.
Attach the GPO to the domain.
B. Do nothing, each incoming DNS queries is recorded by default in DNS.LOG file.
C. Enable debug logging on the DNS server.
D. Create a new OU.
Move the DNS server account to the OU.
Create a GPO.
Configure Audit Logon events.
Attach the GPO to the OU.
Answer: C

GIAC   GSLC examen   certification GSLC   GSLC

NO.5 Which of the following encryption algorithms is applied in the PGP encryption system?
A. TDE
B. Triple DES
C. Blowfish
D. IDEA
Answer: D

GIAC   certification GSLC   certification GSLC   GSLC   GSLC examen

NO.6 Which of the following applications would be considered a data warehousing application?
A. Golf score tracking
B. Badge reader
C. Fraud detection
D. eCommerce site
Answer: C

GIAC   GSLC examen   GSLC   GSLC

NO.7 A wireless network uses multiple modulation schemes to make the signal strong so that it can travel far.
These modulation schemes work with a certain IEEE standard. Choose and drop the correct standards in
the right pane according to the modulation scheme.
A.
Answer: A

GIAC   GSLC   certification GSLC

NO.8 Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active
Directory domain-based network. The domain contains one hundred Windows XP Professional client
computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired
Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client
computers must be able to automatically connect to the wireless LAN. However, the unauthorized
computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants
to configure all the wireless access points and client computers to act in accordance with the company's
security policy. What will he do to accomplish this?
Each correct answer represents a part of the solution. Choose three.
A. Configure the authentication type for the wireless LAN to Open system.
B. Install a firewall software on each wireless access point.
C. Configure the authentication type for the wireless LAN to Shared Key.
D. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
E. Broadcast SSID to connect to the access point (AP).
F. On each client computer, add the SSID for the wireless LAN as the preferred network.
Answer: C, D. F

NO.9 Drag and Drop the layers of TCP/IP model according to their level of data encapsulation.
A.
Answer: A

GIAC   GSLC   GSLC   certification GSLC

NO.10 Which of the following are the examples of administrative controls?
Each correct answer represents a complete solution. Choose all that apply.
A. Security policy
B. Auditing
C. Security awareness training
D. Data Backup
Answer: A, C

GIAC examen   GSLC   GSLC   GSLC examen   GSLC

NO.11 You work as a Network Administrator for Net World International. The company has a Windows Server
2008 network environment. The network is configured as a Windows Active Directory-based single
domain single forest network. The functional level of the forest is Windows Server 2008. All client
computers on the network run Windows Vista Ultimate.
You are configuring a public key interface (PKI) to support domain users and computers. All users will use
smart cards for logon. You have configured a global group named SCIssuer that will issue smart cards for
all domain users. A file server named SecServer is configured on the network. The certificate-based
IPSec encryption is required for all communications to and from the SecServer server. A VPN server is
configured on the network to enable sales managers to connect to the network remotely using their
laptops which run Windows Vista Ultimate. The L2TP connection is required for the VPN server. Place the
users, computers, and groups to the certificate templates that are required for implementing the PKI
infrastructure.
A.
Answer: A

GIAC   GSLC   GSLC examen   GSLC

NO.12 Janet is the project manager of the NHQ Project for her company. Janet is nearly done leading the
project and there have been no cost or schedule overruns in the development of the new software for her
company. The project team has been completing their work on time and there is still $75,000 left in the
project budget. Janet decides to have the project team implement some extra features to the project
scope to use all of the $75,000 in the budget even though the customer didn't specifically ask for the
added features. This scenario is an example of which one of the following?
A. Scope creep
B. Gold plating
C. Change management
D. Value added change
Answer: B

GIAC   GSLC   GSLC   GSLC examen

NO.13 Which system is designed to analyze, detect, and report on security-related events.?
A. HIPS
B. NIPS
C. NIDS
D. HIDS
Answer: B

GIAC   GSLC examen   GSLC examen   GSLC

NO.14 You are the project manager for your organization and are trying to determine which vendor your
organization will use. You have determined that any vendor that would like to bid on your project work will
need to have a Microsoft Certified System Engineer on staff, have eight years of Cisco experience, and
have at least two references from similar projects. What have you created in this scenario?
A. Screening system for the vendors
B. Weighting system for the vendors
C. Preferred vendors list
D. Bidders conference
Answer: A

GIAC   GSLC examen   GSLC examen   GSLC   certification GSLC

NO.15 Rick, the Network Administrator of the Fimbry Hardware Inc., wants to design the initial test model for
Internet Access. He wants to fulfill the following goals:
No external traffic should be allowed into the network.
Administrators should be able to restrict the websites which can be accessed by the internal
users.
Which of the following technologies should he use to accomplish the above goals? (Click the Exhibit
button on the toolbar to see the case study.)
A. Internet Connection Sharing (ICS)
B. Network Address Translator (NAT)
C. Firewall
D. Proxy Server
E. Routing and Remote Access Service (RRAS)
Answer: D

GIAC   certification GSLC   GSLC   GSLC

NO.16 You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Server 2008
Active Directory-based single domain single forest network. The functional level of the forest is Windows
Server 2008. The company's headquarters is located at Los Angeles. A branch office of the company is
located at Denver. You are about to send a message to Rick who is a Network Administrator at Denver.
You want to ensure that the message cannot be read by anyone but the recipient. Which of the following
keys will you use to encrypt the message?
A. Your public key
B. The recipient's private key
C. The recipient's public key
D. Your private key
Answer: C

GIAC   GSLC   certification GSLC

NO.17 Which of the following protocols is used as a transport protocol for Internet dial-up connections?
A. SMTP
B. SNMP
C. DHCP
D. PPP
Answer: D

certification GIAC   certification GSLC   GSLC examen   GSLC

NO.18 Which of the following programs can collect various types of personal information, such as Internet
surfing habits, and Web sites that the user has visited?
A. Spyware
B. Honeypot
C. Worm
D. Malware
Answer: A

GIAC   certification GSLC   GSLC

NO.19 John works as a Programmer for We-are-secure Inc. On one of his routine visits to the company, he
noted down the passwords of the employees while they were typing them on their computer screens.
Which of the following social engineering attacks did he just perform?
A. Shoulder surfing
B. Important user posing
C. Dumpster diving
D. Authorization by third party
Answer: A

GIAC   certification GSLC   GSLC examen   GSLC   GSLC   GSLC

NO.20 Which of the following tools is based on Linux and used to carry out the Penetration Testing?
A. JPlag
B. BackTrack
C. Vedit
D. Ettercap
Answer: B

GIAC   GSLC   certification GSLC   certification GSLC   GSLC   GSLC

NO.21 Which of the following is used to describe the type of FTP access in which a user does not have
permissions to list the contents of directories, but can access the contents if he knows the path and file
name?
A. Secure FTP
B. Blind FTP
C. Passive FTP
D. Hidden FTP
Answer: B

GIAC   GSLC examen   GSLC examen

NO.22 You work as a Network Administrator for Perfect Solutions Inc. The company has a Windows Active
Directory-based single domain single forest network. The company's network is connected to the Internet
through a T1 line. The firewall is configured on the network for securing the internal network from the
intruders on the Internet. The functional level of the forest is Windows Server 2003. You are designing a
public key infrastructure (PKI) for the network. The security policy of the company states that all users
should use smart cards for authentication. Select and place the type of certificate authority (CA) that is
required to be configured on the network to implement the security policy of the company.
A.
Answer: A

GIAC   GSLC examen   GSLC   GSLC

NO.23 Drop the appropriate value to complete the formula.
A.
Answer: A

GIAC   GSLC examen   certification GSLC

NO.24 Which of the following provides security by implementing authentication and encryption on Wireless
LAN (WLAN)?
A. WEP
B. WAP
C. L2TP
D. IPSec
Answer: A

certification GIAC   certification GSLC   certification GSLC

NO.25 You work as a Network Administrator for Net World International. The company has a Windows Server
2008 network environment. The network is configured as a Windows Active Directory-based single
domain single forest network. The functional level of the forest is Windows Server 2008. All client
computers on the network run Windows Vista Ultimate. You configure a public key infrastructure (PKI) on
the network. You configure a root CA and a subordinate CA on the network. For security reasons, you
want to take the root CA offline. You are required to configure the CA servers to support for certificate
revocation.
Choose the steps you will take to accomplish the task.
A.
Answer: A

GIAC   GSLC   certification GSLC   certification GSLC   certification GSLC

NO.26 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Automated penetration testing
B. Code review
C. Manual penetration testing
D. Vulnerability scanning
Answer: D

certification GIAC   GSLC   certification GSLC   GSLC examen   certification GSLC

NO.27 You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008
domain-based network. The network has three Windows Server 2008 member servers and 150 Windows
Vista client computers. According to the company's security policy, you want to apply a firewall profile to
the network.Choose the firewall profiles supported by Windows Server 2008 and Windows Vista.
A.
Answer: A

GIAC   GSLC   certification GSLC   GSLC examen

NO.28 Which of the following viruses is designed to prevent antivirus researchers from examining its code by
using various methods that make tracing and disassembling difficult?
A. Armored virus
B. Stealth virus
C. Multipartite virus
D. Polymorphic virus
Answer: A

GIAC   GSLC   GSLC examen   GSLC

NO.29 Fill in the blank with the appropriate word.
A_______ is a computer system on the Internet that is expressly set up to attract and trap people who
attempt to penetrate other people's computer systems.
A. honeypot
Answer: A

certification GIAC   GSLC examen   GSLC   GSLC   certification GSLC

NO.30 Which of the following options is an approach to restricting system access to authorized users?
A. MIC
B. MAC
C. RBAC
D. DAC
Answer: C

GIAC   GSLC   GSLC   GSLC

Nous assurons seulement le succès de test certification, mais encore la mise à jour est gratuite pour vous. Si vous ne pouvez pas passer le test, votre argent sera 100% rendu. Toutefois, cette possibilité n'est presque pas de se produire. Vous pouvez tout d'abord télécharger le démo gratuit pour prendre un essai.