GSLC Online Practice Questions and Answers

How should Learning Objectives be developed in regard to an organization's managed risks?

A. A single learning objective document should be developed to address company goals for all managed risks

B. A learning objective document should be developed for each department listing their managed risks

C. An individual learning objective document should be developed for each managed risk

D. A learning objective document should be developed for each threat agent that poses a risk

Jacob is worried about sniffing attacks and wants to protect his SMTP transmissions from this attack. What can he do to accomplish this?

A. Use an SSL certificate.

B. Use a proxy server.

C. Use EFS.

D. Use a firewall.

Which of the following is a valid space efficiency of RAID 3?

A. 1 - 1/n

B. 1/n

C. 1 - 2/n

D. 1

What do spikes in a power line indicate?

A. Interference superimposed onto the power line

B. Momentary high voltage

C. Prolonged loss of power

D. Momentary low voltage

Which of the following uses public key cryptography to encrypt the contents of files?

A. NTFS

B. DFS

C. RFS

D. EFS

A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to perform war dialing? Each correct answer represents a complete solution. Choose all that apply.

A. Wingate

B. ToneLoc

C. THC-Scan

D. NetStumbler

John works as a Network Security Professional. He is assigned a project to test the security of www.we-are-secure.com. He is working on the Linux operating system and wants to install an Intrusion Detection System on the We-are-secure server so that he can receive alerts about any hacking attempts. Which of the following tools can John use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

A. SARA

B. Snort

C. Tripwire

D. Samhain

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using the Linux operating system. He wants to use a wireless sniffer to sniff the We-are-secure network. Which of the following tools will he use to accomplish his task?

A. Snadboy's Revelation

B. Kismet

C. NetStumbler

D. WEPCrack

Which of the following can provide security against man-in-the-middle attack?

A. Strong data encryption during travel

B. Firewall

C. Anti-virus programs

D. Strong authentication method

Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

A. File-based

B. Anomaly-based

C. Signature-based

D. Network-based