GIAC Security Essentials Certification - GSEC Exam Practice Test

Question 1

Which of the following statements best describes where a border router is normally placed?

A. Between your firewall and DNS server

B. Between your firewall and your internal network

C. Between your ISP and your external firewall

D. Between your ISP and DNS server

Correct Answer: C

Question 2

A security analyst has entered the following rule to detect malicious web traffic:
alert tcp any -> 192.168.1.0/24 SO (msg: Attempted SQL Injection!"; sld:20000O01;) How can this rule be changed to reduce false positives?

A. Add more detail in the rule to make it more specific to the attack pattern

B. Change the rule to make it apply bi -directional to source and destination

C. Add an additional rule to apply to destination port 443 as well as 80

D. Make the IP range more general so that it applies to all webservers

Correct Answer: A

Question 3

Which of the following would be a valid reason to use a Windows workgroup?

A. Consistent permissions and rights

B. Centralized control

C. Simplicity of single sign-on

D. Lower initial cost

Correct Answer: A

Question 4

Which of the following access control principles helps prevent collusion and detect abuse of access?

A. Least privilege

B. Separation of duties

C. Need to know

D. Rotation of duties

Correct Answer: B

Question 5

Which of the following ports is the default port for Layer 2 Tunneling Protocol (L2TP)?

A. TCP port 443

B. TCP port 110

C. UDP port 161

D. UDP port 1701

Correct Answer: D

Question 6

A sensor that uses a light beam and a detecting plate to alarm if the light beam is obstructed is most commonly used to identify which of the following threats?

A. Smoke

B. Power

C. Water

D. Toxins

E. Natural Gas

Correct Answer: A

Question 7

Which of the following is a term that refers to unsolicited e-mails sent to a large number of e-mail users?

A. Spam

B. Biometrics

C. Buffer overflow

D. Hotfix

Correct Answer: A

Question 8

An IT security manager is trying to quickly assess the risks associated with not implementing a corporate firewall system. What sort of risk assessment is most appropriate?

A. Qualitative risk assessment

B. Quantitative risk assessment

C. Technical Risk Assessment

D. Annualized Risk Assessment

E. Iterative Risk Assessment

Correct Answer: A

GIAC Security Essentials Certification - GSEC Exam Practice Test

Latest Update

Useful Links

Contact Us