Exam Dumps GSLC Practice Free Latest GIAC Practice Tests [Q186-Q208]

4/5 - (1 vote)

Exam Dumps GSLC Practice Free Latest GIAC Practice Tests

GSLC Exam Questions | Real GSLC Practice Dumps

Q186. All of the following are the password cracking attacks performed by the cain tool except for which one?

Brute force attack

Dictionary attack

DoS attack

Rainbow attack

Q187. Donna, a stakeholder in your project to create new software, has approached you about adding some features to the software package. You instruct that Donna must document the change request for it to be considered for the project. Why is it important for Donna to document the change request?

The documentation of the change request ensures that there’s an audit trail of the request change from the requestor to the implementation and verification of the request.

The documentation of the change request allows Donna to really understand all of the requirements for the change to be entered into the project scope.

It’s really not that important but it will delay the request for the change or prevent the change from entering the change control system at all.

The documentation of the change request ensures that Donna is the stakeholder that will pay for the request.

Q188. What course of action can be taken by a party if the current negotiations fail and an agreement cannot be reached?

BATNA

Bias

ZOPA

PON

Q189. Which of the following viruses is designed to prevent antivirus researchers from examining its code by using various methods that make tracing and disassembling difficult?

Armored virus

Stealth virus

Multipartite virus

Polymorphic virus

Q190. Which of the following protocols does IPsec use to perform various security functions in the network?
Each correct answer represents a complete solution. Choose all that apply.

Internet Key Exchange

Encapsulating Security Payload

Authentication Header

Skinny Client Control Protocol

Q191. You are a project manager of a construction project. You are documenting project purchasing decisions, specifying the approach, and identifying potential sellers. You are in which of the following processes?

Plan Procurements

Administer Procurements

Close Procurements

Conduct Procurements

Q192. You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate location. However, budget is an issue. Which of the following is most appropriate for this client?

Warm site

Hot site

Off site

Cold site

Q193. Which of the following refers to the process of verifying the identity of a person, network host, or system process?

Auditing

Packet filtering

Authentication

Hacking

Q194. Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to complete part of the project work for Eric’s organization. Due to a change request the ZAS Corporation is no longer needed on the project even though they have completed nearly all of the project work. Is Eric’s organization liable to pay the ZAS Corporation for the work they have completed so far on the project?

Yes, the ZAS Corporation did not choose to terminate the contract work.

It depends on what the termination clause of the contract stipulates.

It depends on what the outcome of a lawsuit will determine.

No, the ZAS Corporation did not complete all of the work.

Q195. Which of the following statements are true about TCP/IP model?
Each correct answer represents a complete solution. Choose all that apply.

It is consists of various protocols present in each layer.

It provides end-to-end connectivity specifying how data should be formatted, addressed, transmitted, routed and received at the destination.

It is generally described as having five abstraction layers.

It describes a set of general design guidelines and implementations of specific networking protocols to enable computers to communicate over a network.

Q196. Holly is the project manager of the GHQ Project for her organization. The project is using the AAA IT Integrators Corporation as a vendor to do a portion of the project work. Mitch Smith, the IT Directors for the AAA IT Integrators Corporation, reports that his team has completed the project work. Holly and her team review the deliverables and she confirms that Mitch’s team has indeed completed the work according to the statement of work. What document should Holly refer to now to determine the next course of action with the AAA IT Integrators Corporation?

Procurement management plan

Statement of Work

Contract

Project management plan

Q197. Victor wants to use Wireless Zero Configuration (WZC) to establish a wireless network connection using his computer running on Windows XP operating system. Which of the following are the most likely threats to his computer?
Each correct answer represents a complete solution. Choose two.

Attacker can use the Ping Flood DoS attack if WZC is used.

Information of probing for networks can be viewed using a wireless analyzer and may be used to gain access.

Attacker by creating a fake wireless network with high power antenna cause Victor’s computer to associate with his network to gain access.

It will not allow the configuration of encryption and MAC filtering. Sending information is not secure on wireless network.

Q198. Which of the following types of cryptography algorithms is a symmetric key cipher which operates on fixed-length groups of bits, termed blocks, with an unvarying transformation?

RC2

Stream cipher

Block cipher

Triple DES

Q199. In which technique are phases overlapped that would normally be done in sequence?

Critical path

Lead time

Fast tracking

Project tracking

Q200. You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise’s network. One of the two routers gets flooded with an unexpected number of data packets, while the other router starves with no packets reaching it. Which of the following attacks can be a potential cause of this?

Spoofing

Packet manipulation

Denial-of-Service

Eavesdropping

Q201. Which of the following is an authentication protocol used by clients to dial-in to computers running Windows 2000 Server?

IWA

Digest authentication

MPA

SPAP

Q202. Which of the following statements are true about an application-level gateway?
Each correct answer represents a complete solution. Choose all that apply.

It allows client applications to use dynamic ephemeral TCP/UDP ports to communicate with the known ports used by the server applications.

It does not allow customized NAT traversal filters to be plugged into the gateway to support address and port translation for certain application protocols.

It is a security component that is added to a firewall or NAT employed in a computer network.

It converts the network layer address information found inside an application payload. The hosts can be on either side of the firewall/NAT.

Q203. Which of the following programs can collect various types of personal information, such as Internet surfing habits, and Web sites that the user has visited?

Spyware

Honeypot

Worm

Malware

Q204. Your Web server crashes at exactly the point where it reaches 1 million total visits. You discover the cause of the server crash is malicious code. Which description best fits this code?

Worm

Logic Bomb

Polymorphic Virus

Virus

Q205. Ryan wants to create an ad hoc wireless network so that he can share some important files with another employee of his company. Which of the following wireless security protocols should he choose for setting up an ad hoc wireless network?
Each correct answer represents a part of the solution. Choose two.

WEP

WPA-PSK

WPA2 -EAP

WPA-EAP

Q206. Which of the following are vulnerable to social engineering attacks?
Each correct answer represents a complete solution. Choose two.

Minimal trained company employees

Encrypted data on the hard disk drive

A public building that has shared office space

An office with a biometrics authentication system

Q207. Which of the following types of attacks cannot be prevented by a firewall?
Each correct answer represents a complete solution. Choose all that apply.

Ping flood attack

Phishing attack

Shoulder surfing attack

URL obfuscation attack

Q208. A user in your department complains about a slow Internet connection. You monitor the external interface of your company’s border router and notice an excessive number of half-open TCP connections. What type of attack is your company currently a victim of?

TCP SYN flood attack

TCP Hijacking attack

Ping flood

Brute force attack