Verified & Latest GSEC Dump Q&As with Correct Answers
Latest GSEC dumps - Instant Download PDF
GIAC GSEC (GIAC Security Essentials Certification) is a valuable certification for individuals who are interested in pursuing a career in the field of cybersecurity. The GSEC certification focuses on providing an in-depth understanding of the fundamental concepts, principles, and practices of information security. It covers a wide range of topics, including network security, access control, cryptography, and risk management, among others.
NEW QUESTION # 122
What technical control provides the most critical layer of defense if an intruder is able to bypass all physical security controls and obtain tapes containing critical data?
- A. Security guards
- B. Encryption
- C. Shredding
- D. Camera Recordings
- E. Corrective Controls
Answer: B
NEW QUESTION # 123
Against policy, employees have installed Peer-to-Peer applications on their workstations and they are using them over TCP port 80 to download files via the company network from other Peer-to-Peer users on the Internet. Which of the following describes this threat?
- A. Backdoor installation
- B. Phishing attempt
- C. Malicious software infection
- D. Firewall subversion
Answer: D
NEW QUESTION # 124
You are examining a packet capture session in Wire shark and see the packet shown in the accompanying image. Based on what you see, what is the appropriate protection against this type of attempted attack?
- A. Disable IP-directed broadcast requests
- B. Block UDP packets at the firewall
- C. Block DNS traffic across the router
- D. Disable forwarding of unsolicited TCP requests
Answer: A
NEW QUESTION # 125
You are trying to select a particular wireless encryption algorithm. You are concerned that it implements as much of the wireless 802.11i standard as possible. Which encryption algorithm should you implement?
- A. WEP2
- B. WPA2
- C. WEP
- D. WPA
Answer: B
NEW QUESTION # 126
A system administrator sees the following URL in the webserver logs:
Which action will mitigate against this attack?
- A. Encode web traffic using Base64 before transmission
- B. Filter potentially harmful characters from user input
- C. Authenticate users before allowing database queries
- D. Force all web applications to use SSL/US
Answer: B
NEW QUESTION # 127
Which of the following Linux commands can change both the username and group name a file belongs to?
- A. chgrp
- B. chmod
- C. newgrp
- D. chown
Answer: A
NEW QUESTION # 128
Which of the following is a signature-based intrusion detection system (IDS) ?
- A. Snort
- B. Tripwire
- C. RealSecure
- D. StealthWatch
Answer: A
NEW QUESTION # 129
Which of the following statements about policy is FALSE?
- A. A well-written policy states the specifics of "how" to do something.
- B. Security policy establishes what must be done to protect information stored on computers.
- C. A well-written policy contains definitions relating to "what" to do.
- D. Policy protects people who are trying to do the right thing.
Answer: D
NEW QUESTION # 130
Which of the following protocols is responsible for the resolution of IP addresses to media access control (MAC) addresses?
- A. ARP
- B. HTTP
- C. PPP
- D. ICMP
Answer: A
NEW QUESTION # 131
Which of the following attacks can be mitigated by avoiding making system calls from within a web application?
- A. SQL Injection
- B. OS command injection
- C. Buffer Overflows
- D. Denial of Service
Answer: A,B
NEW QUESTION # 132
Which of the following should be implemented to protect an organization from spam?
- A. Auditing
- B. System hardening
- C. Packet filtering
- D. E-mail filtering
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 133
Which of the following can be done over telephone lines, e-mail, instant messaging, and any other method of communication considered private.
- A. Packaging
- B. Shielding
- C. Spoofing
- D. Eavesdropping
Answer: D
NEW QUESTION # 134
A Host-based Intrusion Prevention System (HIPS) software vendor records how the Firefox Web browser interacts with the operating system and other applications, and identifies all areas of Firefox functionality.
After collecting all the data about how Firefox should work, a database is created with this information, and it is fed into the HIPS software. The HIPS then monitors Firefox whenever it's in use. What feature of HIPS is being described in this scenario?
- A. Host Based Sniffing
- B. Application Behavior Monitoring
- C. Signature Matching
- D. Application Action Modeling
Answer: B
NEW QUESTION # 135
The previous system administrator at your company used to rely heavily on email lists, such as vendor lists and Bug Traq to get information about updates and patches. While a useful means of acquiring data, this requires time and effort to read through. In an effort to speed things up, you decide to switch to completely automated updates and patching. You set up your systems to automatically patch your production servers using a cron job and a scripted apt-get upgrade command. Of the following reasons, which explains why you may want to avoid this plan?
- A. The command apt-get upgrade is incorrect, you need to run the apt-get update command
- B. The apt-get upgrade command doesn't work with the cron command because of incompatibility
- C. Automated patching of production servers without prior testing may result in unexpected behavior or failures
- D. Relying on vendor and 3rd party email lists enables updates via email, for even faster patching
Answer: A
NEW QUESTION # 136
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He executes the following command in the terminal: echo $USER, $UID Which of the following will be displayed as the correct output of the above command?
- A. John, 502
- B. root, 500
- C. John, 0
- D. root, 0
Answer: D
NEW QUESTION # 137
Which of the following tools is also capable of static packet filtering?
- A. net.exe
- B. netstat.exe
- C. ipconfig.exe
- D. ipsecpol.exe
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 138
Which of the following terms refers to manual assignment of IP addresses to computers and devices?
- A. Static IP addressing
- B. Spoofing
- C. APIPA
- D. Dynamic IP addressing
Answer: A
NEW QUESTION # 139
Analyze the screenshot below. What is the purpose of this message?
- A. To test the browser plugins for compatibility
- B. To alert the user to infected software on the computer.
- C. To get the user to download malicious software
- D. To gather non-specific vulnerability information
Answer: B
NEW QUESTION # 140
Which of the following works at the network layer and hides the local area network IP address and topology?
- A. Network address translation (NAT)
- B. MAC address
- C. Network interface card (NIC)
- D. Hub
Answer: A
NEW QUESTION # 141
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we- are- secure.com. He installs a rootkit on the Linux server of the We-are-secure network. Which of the following statements are true about rootkits?
Each correct answer represents a complete solution. Choose all that apply.
- A. They allow an attacker to set a Trojan in the operating system and thus open a backdoor for anytime access.
- B. They allow an attacker to run packet sniffers secretly to capture passwords.
- C. They allow an attacker to replace utility programs that can be used to detect the attacker's activity.
- D. They allow an attacker to conduct a buffer overflow.
Answer: A,B,C
NEW QUESTION # 142
Which of the following statements about Microsoft's VPN client software is FALSE?
- A. The VPN interface can be figured into the route table.
- B. The VPN tunnel appears as simply another adapter.
- C. The VPN interface has the same IP address as the interface to the network it's been specified to protect.
- D. The VPN client software is built into the Windows operating system.
Answer: C
NEW QUESTION # 143
In the directory C:\lmages\steer there Is an Image file lmage_4240.png with a data string encoded inside the file. What word is hidden in the file?
- A. flying
- B. mushroom
- C. marshmallow
- D. petroleum
- E. pontine
- F. Chicago
- G. prolific
- H. abysmal
- I. shocking
Answer: G
NEW QUESTION # 144
Which of the following statements about IPSec are true?
Each correct answer represents a complete solution. Choose two.
- A. It uses Internet Protocol (IP) for data integrity.
- B. It uses Authentication Header (AH) for data integrity.
- C. It uses Encapsulating Security Payload (ESP) for data confidentiality.
- D. It uses Password Authentication Protocol (PAP) for user authentication.
Answer: B,C
NEW QUESTION # 145
Which of the following is a new Windows Server 2008 feature for the Remote Desktop Protocol (RDP)?
- A. The ability to allow clients to authenticate over TLS
- B. The ability to allow clients to execute individual applications rather than using a terminal desktop
- C. The ability to support connections from mobile devices like smart phones
- D. The ability to allow the administrator to choose a port other than the default RDP port (TCP 3389)
Answer: B
NEW QUESTION # 146
You work as a Network Administrator for McNeil Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest domain-based network. The company's management has decided to provide laptops to its sales team members. These laptops are equipped with smart card readers. The laptops will be configured as wireless network clients. You are required to accomplish the following tasks:
The wireless network communication should be secured.
The laptop users should be able to use smart cards for getting authenticated. In order to accomplish the tasks, you take the following steps:
Configure 802.1x and WEP for the wireless connections. Configure the PEAP-MS-CHAP v2 protocol for authentication. What will happen after you have taken these steps?
- A. Both tasks will be accomplished.
- B. The laptop users will be able to use smart cards for getting authenticated.
- C. The wireless network communication will be secured.
- D. None of the tasks will be accomplished.
Answer: C
NEW QUESTION # 147
......
To sit for the GSEC exam, candidates must have a minimum of two years of experience in the field of information security, and they must have completed at least one GIAC course. GSEC exam is taken online and consists of 180 multiple-choice questions that must be answered within a four-hour time period. The questions are designed to be scenario-based, so candidates must be able to apply their knowledge of security concepts to real-world situations. Passing the exam requires a score of at least 73%, and those who pass are awarded the GIAC GSEC certification, which is highly valued by employers and colleagues alike.
The Ultimate GIAC GSEC Dumps PDF Review: https://www.realvce.com/GSEC_free-dumps.html
Updated Verified GSEC Downloadable Printable Exam Dumps: https://drive.google.com/open?id=1MjUbmSpMH2veksIo-jby6yVvm7v5UUxp