Free GIAC Security Leadership Exam GSLC Exam Practice Test

Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.

• Secret
• Synchronous
• Asymmetric
• Symmetric

Which of the following are the limitations for the cross site request forgery (CSRF) attack?Each correct answer represents a complete solution. Choose all that apply.

• The attacker must determine the right values for all the form inputs.
• The attacker must target a site that doesn't check the referrer header.
• The target site should have limited lifetime authentication cookies.
• The target site should authenticate in GET and POST parameters, not only cookies.

John works as a Website Administrator in ABC Inc. The company has to set a privacy policy on all the computers. The policy requires John to restrict only third party cookies that do not have a compact private policy or that use personally identifiable information without a user's implicit consent. He reports to the Technical Support Executive that he wants to set the policy. The Technical Support Executive asks him to configure the settings in the Privacy tab page. Which of the following privacy settings will John use to accomplish the task?

• High
• Low
• Block All Cookies
• The policy cannot be set.

Which of the following heights of fence deters only casual trespassers?

• 3 to 4 feet
• 8 feet
• 2 to 2.5 feet
• 6 to 7 feet

Which of the following tools hides information about IIS Webservers so that they can be prevented from various attacks performed by an attacker?

• WinSSLMiM
• httprint
• ServerMask
• Whisker

Which of the following malware spread through the Internet and caused a large DoS attack in 1988?

• LoveLetter worm
• Klez worm
• Morris worm
• SQL slammer worm

Which of the following is the process of comparing cryptographic hash functions of system executables and configuration files?

• File integrity auditing
• Reconnaissance
• Spoofing
• Shoulder surfing

You work as a technician for Secure Net Inc. You receive an e-mail from your software vendor.The e-mail contains information about a critical fix that needs to be installed on your computer. It further states that if this patch is not installed right away, your system will crash and you will lose all your data. Now they require your maintenance account password.Which of the following types of security attacks do you think it is?

• Social engineering
• Man-in-the-middle
• Hacking
• Spoofing

You work as a Network Administrator for Net World Inc. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. A Public Key Infrastructure (PKI) is installed on a server in the domain. You are planning to go on vacation for two weeks. Your team has three assistant administrators. You are required to accomplish the following tasks:Delegate the authority to the assistant administrators to issue, approve, and revoke certificates.The solution must involve least administrative burden.Which of the following steps will you take to accomplish the tasks?

• Assign the Certificate Managers role to the assistant administrator user accounts.
• Create a new global security group named CertAdmins.Make the assistant administrators the members of the new group. Assign the CA Administrator role to the CertAdmins group.
• Create a new global security group named CertAdmins.Make the assistant administrators the members of the new group. Assign the Enterprise Administrators role to the CertAdmins group.
• Create a new global security group named CertAdmins.
• Make the assistant administrators the members of the new group. Assign the Certificate Managers role to the CertAdmins group.

Which of the following can be performed to verify the effectiveness of a quality management system?

• Configuration auditing
• Benchmarking
• Project analysis
• Quality audits