GSEC GIAC Exam Questions and Free Practice Test

Which type of risk assessment results are typically categorized as low, medium, or high-risk events?

A. Technical

B. Qualitative

C. Management

D. Quantitative

Correct Answer:B

Which of the following is NOT a recommended best practice for securing Terminal Services and Remote Desktop?

A. Require TLS authentication and data encryption whenever possibl

B. Make sure to allow all TCP 3389 traffic through the external firewal

C. Group Policy should be used to lock down the virtual desktops of thin-client user

D. Consider using IPSec or a VPN in addition to the RDP encryption if you are concerned about future RDP vulnerabilitie

Correct Answer:B

How is a Distributed Denial of Service (DDOS) attack distinguished from a regular DOS attack?

A. DDOS attacks are perpetrated by many distributed host

B. DDOS affects many distributed target

C. Regular DOS focuses on a single route

D. DDOS affects the entire Interne

Correct Answer:A

Which of the following items are examples of preventive physical controls? Each correct answer represents a complete solution. Choose three.

A. Biometric access controls

B. Closed-circuit television monitors

C. Fire extinguishers

D. Locks and keys

Correct Answer:ACD

Which of the following is referred to as Electromagnetic Interference (EMI)?

A. Electrical line noise

B. Spike

C. Transient

D. Brownout

Correct Answer:A

Which of the following ports is the default port for Layer 2 Tunneling Protocol (L2TP)?

A. TCP port 443

B. UDP port 161

C. TCP port 110

D. UDP port 1701

Correct Answer:D

START GSEC EXAM