GSEC Online Practice Questions and Answers

Dilbert wants to have a script run on his Windows server every time Wally logs into it. Where should he place this script?

A. HKEY_LOCAL_MACHINF\SOFTWARE\Mlcrosofl\Wlndows\CurrentVerslon\RunOnce

B. Default Domain Policy > User Configuration > Windows Settings > Scripts (Logon/Logoff)

C. HKEY.LOCAL MACHIN\SOFTWARE\Microsolt\Windows\CurrentVersion\Run

D. Default Domain Policy > Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)

Which of the following is a new Windows Server 2008 feature for the Remote Desktop Protocol (RDP)?

A. The ability to allow the administrator to choose a port other than the default RDP port (TCP 3389)

B. The ability to support connections from mobile devices like smart phones

C. The ability to allow clients to authenticate over TLS

D. The ability to allow clients to execute individual applications rather than using a terminal desktop

Which of the following is a benefit of using John the Ripper for auditing passwords?

A. John's Blowfish cracking routine uses a complex central computing loop that increases the cost of each hash computation.

B. John the Ripper is much slower for auditing passwords encrypted with MD5 and Blowfish.

C. John's MD5 cracking routine uses a simplified central computing loop that decreases the cost of each hash computation.

D. John cannot use the DES bit-slicing technique, so it is much slower than other tools, especially when used against DES-encrypted passwords.

Which of the following protocols provides maintenance and error reporting function?

A. UDP

B. ICMP

C. PPP

D. IGMP

A Network Engineer is charged with maintaining and protecting a network with a high availability requirement. In addition to other defenses, they have chosen to implement a NIPS. How should the NIPS failure conditions be configured to ensure availability if the NIPS is installed in front of the Firewall that protects the DMZ?

A. Fail safe

B. Fail smart

C. Fail-closed

D. Fail-open

Where is the source address located in an IPv4 header?

A. At an offset of 20 bytes

B. At an offset of 8 bytes

C. At an offset of 16 bytes

D. At an offset of 12 bytes

Which of the following describes software technologies that improve portability, manageability, and compatibility of applications by encapsulating them from the underlying operating system on which they are executed?

A. System registry

B. Group Policy

C. Application virtualization

D. System control

Which asymmetric algorithm is used only for key exchange?

A. EI Gamal

B. Diffuse-H an

C. ECC

D. DSA

Which of the following Unix syslog message priorities is the MOST severe?

A. err

B. emerg

C. crit

D. alert

Which of the following TCP dump output lines indicates the first step in the TCP 3-way handshake?

A. 07:09:43.368615 download.net 39904 > ftp.com.21: S 733381829:733381829(0) win 8760 (DF)

B. 07:09:43.370302 ftp.com.21 > download.net.39904: S 1192930639:1192930639(0} ack 733381830 win 1024 (DF)

C. 09:09:22.346383 ftp.com.21 > download.net.39904: , rst 1 win 2440(DF)

D. 07:09:43.370355 download.net.39904 > ftp.com.21: , ack 1 win 8760 (DF)