[Q105-Q126] Dumps for Free GIAC GSEC Practice Exam Questions [Jul 18, 2022]

NO.105 During which of the following steps is the public/private key-pair generated for Public Key Infrastructure (PKI)?

NO.106 You work as a Network Administrator in a company. The NIDS is implemented on the network. You want to monitor network traffic. Which of the following modes will you configure on the network interface card to accomplish the task?

NO.107 Which of the following monitors program activities and modifies malicious activities on a system?

NO.108 If you do NOT have an original file to compare to, what is a good way to identify steganography in potential carrier files?

NO.109 What does the “x” character in the second field of the user account record of the /etc/passwd file indicate?

NO.110 Which Host-based IDS (HIDS) method of log monitoring utilizes a list of keywords or phrases that define the events of interest for the analyst, then takes a list of keywords to watch for and generates alerts when it sees matches in log file activity?

NO.111 Which of the following are used to suppress paper or wood fires? Each correct answer represents a complete solution. Choose two.

NO.112 Your organization has broken its network into several sections/segments, which are separated by firewalls, ACLs and VLANs. The purpose is to defend segments of the network from potential attacks that originate in a different segment or that attempt to spread across segments.
This style of defense-in-depth protection is best described as which of the following?

NO.113 Many IIS servers connect to Microsoft SQL databases. Which of the following statements about SQL server security is TRUE?

NO.114 You are examining a packet capture session in Wire shark and see the packet shown in the accompanying image. Based on what you see, what is the appropriate protection against this type of attempted attack?

NO.115 The following three steps belong to the chain of custody for federal rules of evidence. What additional step is recommended between steps 2 and 3?
STEP 1 – Take notes: who, what, where, when and record serial numbers of machine(s) in question.
STEP 2 – Do a binary backup if data is being collected.
STEP 3 – Deliver collected evidence to law enforcement officials.

NO.116 Which of the following quantifies the effects of a potential disaster over a period of time?

NO.117 Which of the following books is used to examine integrity and availability?

NO.118 You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which of the following will you use to accomplish this?

NO.119 You work as a Linux Technician for Tech Perfect Inc. The company has a Linux-based network. You have configured a database server in the network. Users complain that the server has become remarkably slow. However, the previous day, the server was performing well. You know that some of the processes may be the cause of the issue. You run the PS command on the server. In the result set, which information will you look at that suggests the problematic process?

NO.120 Which Defense-in-Depth principle starts with an awareness of the value of each section of information within an organization?

NO.121 Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered only when the algorithm compares the changed cover with the original cover. Which of the following Steganography methods is Victor using to accomplish the task?

NO.122 You work as a Network Administrator for Tech Perfect Inc. The company has a Linux-based network. You want to kill a process running on a Linux server. Which of the following commands will you use to know the process identification number (PID) of the process?

NO.123 You work as a Network Administrator for McNeil Inc. You are installing an application. You want to view the log file whenever a new entry is added to the /var/log/messages log file. Which of the following commands will you use to accomplish this?

NO.124 Which of the following ports is the default port for IMAP4 protocol?

NO.125 Which of the following features of Windows 7 allows an administrator to both passively review installed software and configure policies to prevent out-of-date or insecure software from running?

NO.126 What is the main problem with relying solely on firewalls to protect your company’s sensitive data?