GSEC GIAC Exam Questions and Free Practice Test

Question 13

When considering ingress filtering, why should all inbound packets be dropped if they contain a source address from within the protected network address space?

A. The packets are probably corrupte

B. The packets may have been accidentally routed onto the Interne

C. The packets may be deliberately spoofed by an attacke

D. The packets are a sign of excess fragmentatio

E. A and B

F. B and C

G. B and D

H. A and D

Correct Answer:B

Question 14

Which of the following TCP packet flags indicates that host should IMMEDIATELY terminate the connection containing the packet?

A. FIN

B. URG

C. SYN

D. RST

Correct Answer:D

Question 15

You work as a Network Administrator for McRobert Inc. You want to know the NetBIOS name of your computer. Which of the following commands will you use?

A. NETSTAT -s

B. NBTSTAT -s

C. NBTSTAT -n

D. NETSTAT -n

Correct Answer:C

Question 16

You have set up a local area network for your company. Your firewall separates your network into several sections: a DMZ with semi-public servers (web, dns, email) and an intranet with private servers. A penetration tester gains access to both sections and installs sniffers in each. He is able to capture network traffic for all the devices in the private section but only for one device (the device with the sniffer) in the DMZ. What can be inferred about the design of the system?

A. You installed a router in the private section and a switch in the DMZ

B. You installed a hub in the private section and a switch in the DMZ

C. You installed a switch in the private section and a hub in the DMZ

D. You installed a switch in the private section and a router in the DMZ

Correct Answer:B

Question 17

Which of the following commands is used to change file access permissions in Linux?

A. chgrp

B. chperm

C. chmod

D. chown

Correct Answer:C

Question 18

Your system has been infected by malware. Upon investigation, you discover that the malware propagated primarily via email. The malware attacked known vulnerabilities for which patches are available, but due to problems with your configuration management system you have no way to know which systems have been patched and which haven't, slowing your progress in patching your network. Of the following, which solution would you use to protect against this propagation vector?

A. Encrypt the emails on the server

B. Scan and block suspect email attachments at the email server

C. Install a firewall between the email server and the Internet

D. Separate the email server from the trusted portions of the network

Correct Answer:B

START GSEC EXAM