GISF GIAC Exam Questions and Free Practice Test

Question 85

- (Topic 2)
A company would like your consulting firm to review its current network and suggest changes that will increase its efficiency and optimize the business processes.
To design such a network, you prepare a case study.
Which of the following policies should be implemented through a group policy that is associated with the netperfect.com domain?
(Click the Exhibit button on the toolbar to see the case study.)
Each correct answer represents a complete solution. Choose all that apply.

A. Account lockout policy.

B. Password policy.

C. Limit computers that can access production schedule software.

D. Assign MS Office suite to appropriate users.

Correct Answer:ABD

Question 86

- (Topic 2)
Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?

A. The Service Level Manager

B. The Configuration Manager

C. The IT Security Manager

D. The Change Manager

Correct Answer:C

Question 87

- (Topic 1)
Adam, a novice Web user is getting large amount of unsolicited commercial emails on his email address. He suspects that the emails he is receiving are the Spam. Which of the following steps will he take to stop the Spam?
Each correct answer represents a complete solution. Choose all that apply.

A. Forward a copy of the spam to the ISP to make the ISP conscious of the spam.

B. Send an email to the domain administrator responsible for the initiating IP address.

C. Report the incident to the FTC (The U.

D. Federal Trade Commission) by sending a copy of the spam message.

E. Close existing email account and open new email account.

Correct Answer:AC

Question 88

- (Topic 2)
You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

A. Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.

B. Look at the Web servers logs and normal traffic logging.

C. Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.

D. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.

Correct Answer:ABD

Question 89

- (Topic 1)
Victor wants to use Wireless Zero Configuration (WZC) to establish a wireless network connection using his computer running on Windows XP operating system. Which of the following are the most likely threats to his computer?
Each correct answer represents a complete solution. Choose two.

A. Attacker can use the Ping Flood DoS attack if WZC is used.

B. Attacker by creating a fake wireless network with high power antenna cause Victor's computer to associate with his network to gain access.

C. Information of probing for networks can be viewed using a wireless analyzer and may be used to gain access.

D. It will not allow the configuration of encryption and MAC filterin

E. Sending information is not secure on wireless network.

Correct Answer:BC

Question 90

- (Topic 3)
The IT Director of the company is very concerned about the security of the network. Which audit policy should he implement to detect possible intrusions into the network? (Click the Exhibit button on the toolbar to see the case study.)

A. The success and failure auditing for policy change.

B. The success and failure auditing for process tracking.

C. The success and failure auditing for logon events.

D. The success and failure auditing for privilege use.

Correct Answer:C

START GISF EXAM