Free GIAC Security Leadership Exam GSLC Exam Practice Test

Which of the following methods will allow data to be sent on the Internet in a secure format?

• Virtual Private Networks
• Serial Line Interface Protocol
• Browsing
• Point-to-Point Protocol

The 3-way handshake method is used by the TCP protocol to establish a connection between a client and the server. It involves three steps:

• In the first step, a SYN message is sent from a client to the server.
• In the second step, a SYN/ACK message is sent from the server to the client.
• In the third step, an ACK (usually called SYN-ACK-ACK) message is sent from the client to the server. At this point, both the client and the server have received acknowledgements of the TCP connection. If the Initial Sequence Numbers of the client and server were 241713111 and 241824111 respectively at the time when the client was sending the SYN message in the first step of the TCP 3- way handshake method, what will be the value of the acknowledgement number field of the server's packet when the server was sending the SYN/ACK message to the client in the second step of the TCP 3-way handshake method?
• 241824111
• 241713112
• 241824112
• 241713111

Which of the following statements are true about MS-CHAPv2?Each correct answer represents a complete solution. Choose all that apply.

• It can be replaced with EAP-TLS as the authentication mechanism for PPTP.
• It provides an authenticator-controlled password change mechanism.
• It is subject to ofline dictionary attacks.
• It is a connectionless protocol.

Which of the following are symptoms of a virus attack on your computer? Each correct answer represents a complete solution. Choose two.

• Corrupted or missing files.
• Sudden reduction in system resources.
• Faster read/write access of the CD-ROM drive.
• Unclear monitor display.

Which of the following is a method of defeating a cryptographic scheme by trying a large number of possibilities?

• Brute force
• Zero-day
• FMS
• IP spoofing

You are working on your computer system with Linux Operating system. After working for a few hours, the hard disk goes to the inactive state (sleep). You try to restart the system and check the power circuits. You later discover that the hard disk has crashed. Which of the following precaution methods should you apply to keep your computer safe from such issues?

• Use Incident handling
• Use SMART model
• Use OODA loop
• Use Information assurance

Mark works as a Network Administrator for We-are-secure Inc. He finds that the We-are-secure server has been infected with a virus. He presents to the company a report that describes the symptoms of the virus. A summary of the report is given below:This virus has a dual payload, as the first payload of the virus changes the first megabyte of the hard drive to zero. Due to this, the contents of the partition tables are deleted and the computer hangs. The second payload replaces the code of the flash BIOS with garbage values. This virus spreads under the Portable Executable File Format under Windows 95, Windows 98, and Windows ME.Which of the following viruses has the symptoms as the one described above?

• Nimda
• Chernobyl
• I Love You
• Melissa

Which of the following RAID levels is supported by an operating system?

• RAID 4
• RAID 6
• RAID 0
• RAID 3

Olive is the program manager for her organization. She has created a request for proposal for a large portion of her program. In this work to be procured she has set several requirements for the vendors to participate. The chief among these requirements is a vendor must have at least four licensed electricians in his team. This requirement for four licensed electricians is an example of which one of the following terms?

• Vendor analysis requirements
• Scoring model
• Evaluation criteria
• Screening system

You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution?Each correct answer represents a part of the solution. Choose all that apply.

• Contamination
• Eradication
• Recovery
• Identification
• Preparation