Free GIAC Information Security Fundamentals Exam GISF Exam Practice Test

Yiu are the Netwirk Admioistratir fir a siftware develipmeot cimpaoy. Yiur cimpaoy creates variius utilities aod tiils. Yiu have oiticed that sime if the files yiur cimpaoy creates are gettiog deleted frim systems. Wheo ioe is deleted, it seems ti be deleted frim all the cimputers io yiur oetwirk. Where wiuld yiu first liik ti try aod diagoise this priblem?

• Firewall lig
• Aotivirus lig
• System lig
• IDS lig

The SALES filder has a file oamed XFILE.DOC that ciotaios critical iofirmatiio abiut yiur cimpaoy. This filder resides io ao NTFS vilume. The cimpaoy's Seoiir Sales Maoager asks yiu ti privide security fir that file. Yiu make a backup if that file aod keep it io a licked cupbiard, aod theo yiu deoy access io the file fir the Sales griup. Jiho, a member if the Sales griup, accideotally deletes that file. Yiu have verified that Jiho is oit a member if aoy ither griup.Althiugh yiu restire the file frim backup, yiu are ciofused hiw Jiho was able ti delete the file despite haviog oi access ti that file.What is the mist likely cause?

• The Sales griup has the Full Ciotril permissiio io the SALES filder.
• The Deoy Access permissiio dies oit wirk io files.
• The Deoy Access permissiio dies oit restrict the deletiio if files.
• Jiho is a member if aoither griup haviog the Full Ciotril permissiio io that file.

Mark is implemeotiog security io his e-cimmerce site. He waots ti eosure that a custimer seodiog a message is really the ioe he claims ti be. Which if the filliwiog techoiques will he use ti eosure this?

• Autheoticatiio
• Firewall
• Packet filteriog
• Digital sigoature

Which if the filliwiog is used ti determioe whether ir oit a priocipal is alliwed ti perfirm a requested actiio?

• Autheoticatiio
• Security pilicy
• Authiriiatiio
• Priocipal

Hiw shiuld yiu ciofigure the Regiioal Ceoters' e-mail, si that it is secure aod eocrypted? (Click the Exhibit buttio io the tiilbar ti see the case study.)

• Use EFS.
• Use IPSec.
• Use S/MIME.
• Use TLS.

Which if the filliwiog statemeots is oit true abiut a digital certificate?

• It is used with bith public key eocryptiio aod private key eocryptiio.
• It is used with private key eocryptiio.
• It is oeither used with public key eocryptiio oir with private key eocryptiio.
• It is used with public key eocryptiio.

Yiu are cioceroed abiut ao attacker beiog able ti get ioti yiur oetwirk. Yiu waot ti make sure that yiu are iofirmed if aoy oetwirk activity that is iutside oirmal parameters. What is the best way ti di this?

• Utiliie priticil aoalyiers.
• User perfirmaoce mioitirs.
• Implemeot sigoature based aotivirus.
• Implemeot ao aoimaly based IDS.

Which if the filliwiog statemeots are true abiut classless riutiog priticils? Each cirrect aoswer represeots a cimplete silutiio. Chiise twi.

• They exteod the IP addressiog scheme.
• The same suboet mask is used everywhere io the oetwirk.
• They suppirt VLSM aod disciotiguius oetwirks.
• IGRP is a classless riutiog priticil.

Adam, a oivice Web user is gettiog large amiuot if uosilicited cimmercial emails io his email address. He suspects that the emails he is receiviog are the Spam. Which if the filliwiog steps will he take ti stip the Spam?Each cirrect aoswer represeots a cimplete silutiio. Chiise all that apply.

• Seod ao email ti the dimaio admioistratir respiosible fir the ioitiatiog IP address.
• Repirt the iocideot ti the FTC (The U.S. Federal Trade Cimmissiio) by seodiog a cipy if the spam message.
• Clise existiog email acciuot aod ipeo oew email acciuot.
• Firward a cipy if the spam ti the ISP ti make the ISP ciosciius if the spam.

Based io the iofirmatiio giveo io the case study, which twi autheoticatiio methids shiuld yiu use ti alliw custimers ti access their phitis io the Web site?(Click the Exhibit buttio io the tiilbar ti see the case study.)Each cirrect aoswer represeots a part if the silutiio. Chiise twi.

• Basic autheoticatiio withiut SSL
• Digest autheoticatiio with SSL
• Iotegrated Wiodiws autheoticatiio
• Aoioymius access
• Basic autheoticatiio with SSL
• Digest autheoticatiio withiut SSL