GIAC GISF Exam Questions Instant Access - No Installation Required

Question 1

John works as a professional Ethical Hacker. He is assigned a project to test the security ofwww.we-are-secure.com. He enters a single quote in the input field of the login page of the Weare-secure Web site and receives the following error message:

Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'

This error message shows that the We-are-secure Website is vulnerable to __________.

AA buffer overflow

BAn XSS attack

CA Denial-of-Service attack

DA SQL injection attack

Answer : D

Question 2

Which of the following statements are true about routers?

Each correct answer represents a complete solution. Choose all that apply.

ARouters do not limit physical broadcast traffic.

BRouters act as protocol translators and bind dissimilar networks.

CRouters organize addresses into classes, which are used to determine how to move packets fromone network to another.

DRouters are responsible for making decisions about which of several paths network (or Internet)traffic will follow.

Answer : B, C, D

Question 3

John works as an Exchange Administrator for Apple Inc. The company has a Windows 2003 ActiveDirectory domain-based network. The network contains several Windows Server 2003 servers. Threeof them have been configured as domain controllers. John complains to the Network Administrator thathe is unable to manage group memberships. Which of the following operations master roles isresponsible for managing group memberships?

APDC emulator

BInfrastructure master

CSchema master

DRID master

Answer : B

Question 4

Which of the following refers to a condition in which a hacker sends a bunch of packets that leaveTCP ports half open?

APING attack

BSpoofing

CHacking

DSYN attack

Answer : D

Question 5

Which of the following can be used to protect a computer system from malware, viruses, spyware, and various types of keyloggers? Each correct answer represents a complete solution. Choose all that apply.

AKFSensor

BSheep dip

CEnum

DSocketShield

Answer : B, D

Question 6

You work as a Software Developer for uCertify Inc. The company has several branches worldwide. The company uses Visual Studio.NET 2005 as its application development platform. You have recently finished the development of an application using .NET Framework 2.0. The application can be used only for cryptography. Therefore, you have implemented the application on a computer. What will you call the computer that implemented cryptography?

ACryptographer

BCryptographic toolkit

CCryptosystem

DCryptanalyst

Answer : C

Question 7

The SALES folder has a file named XFILE.DOC that contains critical information about yourcompany. This folder resides on an NTFS volume. The company's Senior Sales Manager asks youto provide security for that file. You make a backup of that file and keep it in a locked cupboard,and then you deny access on the file for the Sales group. John, a member of the Sales group,accidentally deletes that file. You have verified that John is not a member of any other group.

Although you restore the file from backup, you are confused how John was able to delete the filedespite having no access to that file.

What is the most likely cause?

AThe Sales group has the Full Control permission on the SALES folder.

BThe Deny Access permission does not work on files.

CThe Deny Access permission does not restrict the deletion of files.

DJohn is a member of another group having the Full Control permission on that file.

Answer : A

GIAC Information Security Fundamentals GISF Exam Questions