GSEC Online Practice Questions and Answers

Included below is the output from a resource kit utility run against local host.

Which command could have produced this output?

A. Schtasks

B. Task kill

C. SC

D. Task list

What is achieved with the development of a communication flow baseline?

A. Validation of data access

B. Classification of critical data

C. Categorization of internal risks

D. Identification of existing IT assets

How many clients Is a single WSUS server designed to support when the minimum system requirements are met?

A. 10000

B. 5000

C. 1000

You work as a Network Administrator for NetTech Inc. To ensure the security of files, you encrypt data files using Encrypting File System (EFS).

You want to make a backup copy of the files and maintain security settings. You can backup the files either to a network share or a floppy disk. What will you do to accomplish this?

A. Copy the files to a network share on an NTFS volume.

B. Copy the files to a network share on a FAT32 volume.

C. Place the files in an encrypted folder. Then, copy the folder to a floppy disk.

D. Copy the files to a floppy disk that has been formatted using Windows 2000 Professional.

What would the following IP tables command do?

IP tables -I INPUT -s 99.23.45.1/32 -j DROP

A. Drop all packets from the source address

B. Input all packers to the source address

C. Log all packets to or from the specified address

D. Drop all packets to the specified address

To be considered a strong algorithm, an encryption algorithm must be which of the following?

A. Secret

B. Well-known

C. Confidential

D. Proprietary

Which Host-based IDS (HIDS) method of log monitoring utilizes a list of keywords or phrases that define the events of interest for the analyst, then takes a list of keywords to watch for and generates alerts when it sees matches in log file activity?

A. Passive analysis

B. Retroactive analysis

C. Exclusive analysis

D. Inclusive analysis

In PKI, when someone wants to verify that the certificate is valid, what do they use to decrypt the signature?

A. Receiver's digital signature

B. X.509 certificate CA's private key

C. Secret passphrase

D. CA's public key

What does Authentication Header (AH) add to the packet in order to prevent an attacker from lying about the source?

A. Integrity Check Value

B. AES-128 encryption

C. Triple DES encryption

D. 32-bit sequence number

Critical information is encrypted within an application accessible only to a small group of administrators, with a separate group of administrators holding the decryption keys. What Defense in Depth approach is being used?

A. Information-Centric

B. Uniform Protection

C. Protected Enclaves

D. Threat Vector Analysis