GIAC Information Security Professional - GISP Exam Practice Test

Question 1

Which of the following statements about Digest authentication are true?
Each correct answer represents a complete solution. Choose two.

A. Digest authentication is a more secure authentication method as compared to Basic authentication.

B. Digest authentication is used by wireless LANs, which follow the IEEE 802.11 standard.

C. In Digest authentication, passwords are sent across a network as a hash value, rather than as clear text.

D. In Digest authentication, passwords are sent across a network as clear text, rather than as a has value.

Correct Answer: A,C

Question 2

You work as a Network Administrator for NetTech Inc. The company's network has a Windows 2000 domain-based network. An employee of the company is dismissed for attempting to access secret data on the network. What measure will you take next to make the network secure?

A. Remove the password of the employee's user account.

B. Change the password of the employee's user account.

C. Disable the employee's user account.

D. Disconnect the employee's computer from the network.

Correct Answer: C

Question 3

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

A. Mutual

B. Anonymous

C. Multi-factor

D. Biometrics

Correct Answer: C

Question 4

Brutus is a password cracking tool that can be used to crack the following authentications:
*HTTP (Basic Authentication)
*HTTP (HTML Form/CGI)
*POP3 (Post Office Protocol v3)
*FTP (File Transfer Protocol)
*SMB (Server Message Block)
*Telnet
Which of the following attacks can be performed by Brutus for password cracking?
Each correct answer represents a complete solution. Choose all that apply.

A. Replay attack

B. Hybrid attack

C. Man-in-the-middle attack

D. Dictionary attack

E. Brute force attack

Correct Answer: B,D,E

Question 5

Which of the following authentication protocols provides support for a wide range of authentication methods, such as smart cards and certificates?

A. EAP

B. PAP

C. CHAP

D. MS-CHAP v2

Correct Answer: A

Question 6

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?

A. Discretionary access control entry (DACE)

B. Access control entry (ACE)

C. Access control list (ACL)

D. Security Identifier (SID)

Correct Answer: B

Question 7

What are packet sniffers?

A. Packet sniffers test the packages to verify data integrity.

B. Packet sniffers test package security.

C. Packet sniffers encrypt the packages as they cross the network.

D. Packet sniffers capture the packages as they cross the network.

Correct Answer: D

Question 8

Which of the following protocols implements VPN using IPSec?

A. PPTP

B. L2TP

C. PPP

D. SLIP

Correct Answer: B

Question 9

Which of the following tools or services is used to find the entire IP address range used by an organization?

A. TRACERT

B. PATHPING

C. Share Scanner

D. Ping Scanner

Correct Answer: D

Question 10

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disable to ensure that the password is encrypted during remote access?

A. MSCHAP

B. MSCHAP V2

C. PAP

D. SPAP

Correct Answer: C

Question 11

Which of the following key sizes is used by International Data Encryption Algorithm (IDEA)?

A. 64-bit

B. 16-bit

C. 32-bit

D. 128-bit

Correct Answer: D

Question 12

How long are cookies in effect if no expiration date is set?

A. Forever

B. One year

C. Fifteen days

D. Until the session ends.

Correct Answer: D

Question 13

Which of the following records is the first entry in a DNS database file?

A. CNAME

B. SRV

C. MX

D. SOA

Correct Answer: D

Question 14

Which of the following statements about Microsoft hotfix are true?
Each correct answer represents a complete solution. Choose two.

A. It is generally related to the problems of a Web server's performance.

B. It is the term used by Microsoft for major service pack releases.

C. It is generally related to security problems.

D. It is a collection of files used by Microsoft for software updates released between major service pack releases.

Correct Answer: C,D

Question 15

Which of the following types of attacks is mounted with the objective of causing a negative impact on the performance of a computer or network?

A. Denial-of-Service (DoS) attack

B. Man-in-the-middle attack

C. Impersonation attack

D. Vulnerability attack

Correct Answer: A

GIAC Information Security Professional - GISP Exam Practice Test

Latest Update

Useful Links

Contact Us