GIAC GSEC Practice Exam - 385 Unique Questions
Latest Questions GSEC Guide to Prepare Free Practice Tests
GIAC GSEC certification exam is a rigorous and challenging test that requires a significant amount of preparation. Candidates must have a deep understanding of the concepts and principles of information security. They must also be familiar with the latest security threats and attacks and know how to mitigate them. GSEC exam is a four-hour long test that consists of 180 multiple-choice questions.
GIAC GSEC certification is a valuable asset for individuals who want to establish themselves as experts in the field of cybersecurity. GIAC Security Essentials Certification certification is recognized globally and is suitable for individuals who want to start a career in the field of cybersecurity. GIAC Security Essentials Certification certification covers various topics and is updated regularly to ensure that it is relevant and up-to-date with the latest security practices and technologies.
NEW QUESTION # 169
Which of the following defines the communication link between a Web server and Web applications?
- A. IETF
- B. Firewall
- C. CGI
- D. PGP
Answer: C
NEW QUESTION # 170
What is the key difference between Electronic Codebook mode and other block cipher modes like Cipher Block Chaining, Cipher-Feedback and Output-Feedback?
- A. Plaintext patterns encrypted with the same key will always generate the same Cipher text pattern
- B. Plaintext patterns are concealed by XO Ring with previous cipher text block but input to the block cipher is not randomized.
- C. Plaintext patterns are concealed and input to the block cipher is randomized by XO Ring with previous cipher text block.
- D. Plaintext patterns are not concealed but input to the block cipher is randomized by XO Ring with previous cipher text block.
Answer: A
NEW QUESTION # 171
Regarding the UDP header below, what is the length in bytes of the UDP datagrarn?
04 1a 00 a1 00 55 db 51
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 172
Which of the following is generally practiced by the police or any other recognized governmental authority?
- A. Wiretapping
- B. Spoofing
- C. Phishing
- D. SMB signing
Answer: A
NEW QUESTION # 173
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He wants to change the startup shell of Maria from bash to tcsh. Which of the following commands will John use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.
- A. chage
- B. useradd -s
- C. usermod -u
- D. usermod -s
Answer: B,D
NEW QUESTION # 174
Which layer of the TCP/IP Protocol Stack Is responsible for port numbers?
- A. Internet
- B. Application
- C. Transport
- D. Network
Answer: C
NEW QUESTION # 175
Which of the following is the default subnet mask for the Class C IP address network?
- A. 255.0.0.0
- B. 127.0.0.1
- C. 255.255.255.0
- D. 255.255.0.0
Answer: C
NEW QUESTION # 176
Which of the following files contains the shadowed password entries in Linux?
- A. /etc/passwd
- B. /etc/shadow
- C. /etc/profile
- D. /etc/shdpwd
Answer: B
NEW QUESTION # 177
What is the term for a game in which for every win there must be an equivalent loss?
- A. Asymmetric
- B. Zero-sum
- C. Gain-oriented
- D. Untenable
Answer: B
NEW QUESTION # 178
Which of the following is TRUE regarding Ethernet?
- A. Ethernet is shared media.
- B. Several stations are allowed to be transmitting at any given time within a single collision domain.
- C. Stations are not required to monitor their transmission to check for collisions.
- D. Stations are not required to listen before they transmit.
Answer: A
NEW QUESTION # 179
When designing wireless networks, one strategy to consider is implementing security mechanisms at all layers of the OSI model. Which of the following protection mechanisms would protect layer 1?
- A. Enabling strong encryption
- B. Limit RF coverage
- C. Employing firewalls
- D. Hardening applications
Answer: B
NEW QUESTION # 180
What protocol is a WAN technology?
- A. 802.3
- B. Frame Relay
- C. Ethernet
- D. 802.11
Answer: B
NEW QUESTION # 181
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He is currently working on his C based new traceroute program. Since, many processes are running together on the system, he wants to give the highest priority to the cc command process so that he can test his program, remove bugs, and submit it to the office in time. Which of the following commands will John use to give the highest priority to the cc command process?
Answer:
NEW QUESTION # 182
You are responsible for the wireless network of your company. You have been asked to create SSID's for wireless routers. What are the limits on an SSID?
Each correct answer represents a complete solution. Choose two.
- A. It must be 32 or fewer characters long.
- B. It must be 64 or fewer characters long.
- C. It is case sensitive.
- D. It can only contain letters, not numbers.
- E. It is not case sensitive.
Answer: A,C
NEW QUESTION # 183
What is the main problem with relying solely on firewalls to protect your company's sensitive data?
- A. Their value is limited unless a full-featured Intrusion Detection System is used.
- B. Their value is limited because they cannot be changed once they are configured.
- C. Their value is limited because they can be bypassed by technical and non-technical means.
- D. Their value is limited because operating systems are now automatically patched.
Answer: C
NEW QUESTION # 184
Which of the following Microsoft services integrates SSO into Microsoft 365 by syncing with on-premises servers?
- A. Azure AD Connect
- B. Intune
- C. Azure Key Vault
- D. Teams
Answer: A
NEW QUESTION # 185
What is the fundamental problem with managing computers in stand-alone Windows workgroups?
- A. They do not accept the Security Access Tokens (SATs) from other computer.
- B. Once a computer joins a workgroup, the Security IDs (SIDs) of its users are transferred to the other computers in the workgroup in clear text.
- C. Computers in workgroups are not able to create Security Access Tokens (SATs) for their users.
- D. Computers that have Joined a workgroup cannot subsequently Join a domain.
Answer: C
NEW QUESTION # 186
With regard to defense-in-depth, which of the following statements about network design principles is correct?
- A. A secure network design will seek to provide an effective administrative structure by providing a single choke-point for the network from which all security controls and restrictions will be enforced.
- B. A secure network design requires that networks utilize VLAN (Virtual LAN) implementations to insure that private and semi-public systems are unable to reach each other without going through a firewall.
- C. A secure network design requires that systems that have access to the Internet should not be accessible from the Internet and that systems accessible from the Internet should not have access to the Internet.
- D. A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements.
Answer: D
NEW QUESTION # 187
You work as a Network Administrator for Perfect World Inc. You are configuring a network that will include 1000BaseT network interface cards in servers and client computers. What is the maximum segment length that a 1000BaseT network supports?
- A. 100 meters
- B. 10 meters
- C. 1000 meters
- D. 480 meters
Answer: A
NEW QUESTION # 188
Which of the following commands is used to view the last thirty-five lines of the /var/log/messages log file?
- A. VIEW /var/log/messages
- B. VIEW 35 /var/log/messages
- C. TAIL /var/log/messages
- D. TAIL 35 /var/log/messages
Answer: D
NEW QUESTION # 189
You have reason to believe someone with a domain user account has been accessing and modifying sensitive spreadsheets on one of your application servers. You decide to enable auditing for the files to see who is accessing and changing them. You enable the Audit Object Access policy on the files via Group Policy. Two weeks later, when you check on the audit logs, you see they are empty. What is the most likely reason this has happened?
- A. The person modifying the files turned off auditing
- B. You did not enable auditing on the files
- C. You did not save the change to the policy
- D. You cannot enable auditing on files, just folders
Answer: B
NEW QUESTION # 190
What type of attack can be performed against a wireless network using the tool Kismet?
- A. Masquerading
- B. IP spoofing
- C. Denial of Service
- D. Eavesdropping
Answer: D
NEW QUESTION # 191
In the AGULP model, who should be assigned permissions and privileges?
- A. Individual User Accounts
- B. Universal Groups
- C. Local Groups
- D. Global Groups
Answer: C
NEW QUESTION # 192
......
Correct and Up-to-date GIAC GSEC BrainDumps: https://lead2pass.real4prep.com/GSEC-exam.html