Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home GIAC GISF

GIAC GISF Exam Practice Questions (P. 4)

  • Full Access (316 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
What does a firewall check to prevent certain ports and applications from getting the packets into an Enterprise?
  1. A
    The application layer port numbers and the transport layer headers
  2. B
    The presentation layer headers and the session layer port numbers
  3. C
    The network layer headers and the session layer port numbers
  4. D
    The transport layer port numbers and the application layer headers

Correct Answer:
D

Question #32
You are the Network Administrator for a large corporate network. You want to monitor all network traffic on your local network for suspicious activities and receive a notification when a possible attack is in process. Which of the following actions will you take for this?
  1. A
    Install a DMZ firewall
  2. B
    Enable verbose logging on the firewall
  3. C
    Install a host-based IDS
  4. D
    Install a network-based IDS

Correct Answer:
D

Question #33
The SALES folder has a file named XFILE.DOC that contains critical information about your company. This folder resides on an NTFS volume. The company's Senior Sales Manager asks you to provide security for that file. You make a backup of that file and keep it in a locked cupboard, and then you deny access on the file for the Sales group. John, a member of the Sales group, accidentally deletes that file. You have verified that John is not a member of any other group.
Although you restore the file from backup, you are confused how John was able to delete the file despite having no access to that file.
What is the most likely cause?
  1. A
    The Sales group has the Full Control permission on the SALES folder.
  2. B
    The Deny Access permission does not work on files.
  3. C
    The Deny Access permission does not restrict the deletion of files.
  4. D
    John is a member of another group having the Full Control permission on that file.

Correct Answer:
A

Question #34
NIST Special Publication 800-50 is a security awareness program. It is designed for those people who are currently working in the information technology field and want to the information security policies.
Which of the following are its significant steps?
Each correct answer represents a complete solution. Choose two.
  1. A
    Awareness and Training Material Effectiveness
  2. B
    Awareness and Training Material Development
  3. C
    Awareness and Training Material Implementation
  4. D
    Awareness and Training Program Design

Correct Answer:
BD

Question #35
You are the project manager of the HHH Project. The stakeholders for this project are scattered across the world and you need a method to promote interaction. You determine that a Web conferencing software would be the most cost effective solution. The stakeholders can watch a slide show while you walk them through the project details. The stakeholders can hear you, ask questions via a chat software, and post concerns. What is the danger in this presentation?
  1. A
    55 percent of all communication is nonverbal and this approach does not provide non-verbal communications.
  2. B
    The technology is not proven as reliable.
  3. C
    The stakeholders won't really see you.
  4. D
    The stakeholders are not required to attend the entire session.

Correct Answer:
A

Question #36
A Cisco Unified Wireless Network has an AP that does not rely on the central control device of the network. Which type of AP has this characteristic?
  1. A
    Lightweight AP
  2. B
    Rogue AP
  3. C
    LWAPP
  4. D
    Autonomous AP

Correct Answer:
D

Question #37
Which of the following monitors program activities and modifies malicious activities on a system?
  1. A
    Back door
  2. B
    HIDS
  3. C
    RADIUS
  4. D
    NIDS

Correct Answer:
B

Question #38
Which of the following statements is not true about a digital certificate?
  1. A
    It is used with both public key encryption and private key encryption.
  2. B
    It is used with private key encryption.
  3. C
    It is neither used with public key encryption nor with private key encryption.
  4. D
    It is used with public key encryption.

Correct Answer:
D

Question #39
Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?
  1. A
    Cross-Site Request Forgery
  2. B
    Code injection attack
  3. C
    Cross-Site Scripting attack
  4. D
    Command injection attack

Correct Answer:
B

Question #40
Which of the following Acts enacted in United States allows the FBI to issue National Security Letters (NSLs) to Internet service providers (ISPs) ordering them to disclose records about their customers?
  1. A
    Electronic Communications Privacy Act of 1986
  2. B
    Economic Espionage Act of 1996
  3. C
    Computer Fraud and Abuse Act
  4. D
    Wiretap Act

Correct Answer:
A

Previous Questions Next Questions

All Pages