実践サンプルと問題集と指導には2023年最新のGSEC有効なテスト問題集 [Q87-Q106]

実践サンプルと問題集と指導には2023年最新のGSEC有効なテスト問題集

最新 [2023年11月16日] 100%合格率保証付きの素晴らしいGSEC試験問題PDF

GIAC GSEC（GIAC Security Essentials認定）認定試験は、サイバーセキュリティの分野の専門家にとって広く認識され、尊敬される認定です。この認定は、情報システムとネットワークの管理と保護を担当する個人の知識、スキル、能力を検証するように設計されています。認定試験では、ネットワークセキュリティ、暗号化、インシデント対応、アクセス制御など、サイバーセキュリティに関連する幅広いトピックをカバーしています。

GIAC Security Essentials認定（GSEC）は、情報セキュリティの知識とスキルを向上させたいITプロフェッショナルにとって貴重な認定です。これは、組織のITインフラストラクチャの構成、管理、および保護に関する専門知識を検証するグローバルに認められた認定です。この試験は挑戦的であり、広範な準備が必要ですが、それを渡すことで、サイバーセキュリティ業界で多くのキャリアの機会を開くことができます。

質問 # 87
Which of the following is a characteristic of hash operations?

A. Symmetric
B. Asymmetric
C. Non-reversible
D. Variable length output

正解：D

質問 # 88
Which of the following books deals with confidentiality?

A. Orange Book
B. Brown Book
C. Red Book
D. Purple Book

正解：A

質問 # 89
Which of the following is a potential WPA3 security issue?

A. Short key lengths
B. Traffic decryption with PSK
C. Disassociate frame DoS
D. Backward compatibility

正解：D

質問 # 90
You work as a Web Developer for WebCrunch Inc. You create a web site that contains information about the company's products and services. The web site is to be used by the company's suppliers only. Which of the following options will you use to specify the nature of access to the web site?

A. Internet and Intranet
B. Extranet
C. Internet
D. Intranet

正解：B

質問 # 91
You work as a Network Administrator for NetTech Inc. When you enter
http://66.111.64.227
in the browser's address bar, you are able to access the site. But, you are unable to access the site when you enter
http://www.uCertify.com. What is the most likely cause?

A. The site's Web server is offline.
B. The site's Web server has heavy traffic.
C. DNS entry is not available for the host name.
D. WINS server has no NetBIOS name entry for the server.

正解：C

質問 # 92
An employee attempting to use your wireless portal reports receiving the error shown below. Which scenario is occurring?

A. Another access point is attempting to intercept the data.
B. A denial-of-service attack is preventing a response from the portal.
C. The encrypted data is being intercepted and decrypted.
D. Another access point is deauthenticating legitimate clients.

正解：A

質問 # 93
The process of enumerating all hosts on a network defines which of the following activities?

A. Port scanning
B. GPS mapping
C. Network mapping
D. Vulnerability scanning

正解：C

質問 # 94
Which of the following is the default port for Simple Network Management Protocol (SNMP)?

A. TCP port 80
B. TCP port 25
C. TCP port 110
D. UDP port 161

正解：D

質問 # 95
A Host-based Intrusion Prevention System (HIPS) software vendor records how the Firefox Web browser interacts with the operating system and other applications, and identifies all areas of Firefox functionality. After collecting all the data about how Firefox should work, a database is created with this information, and it is fed into the HIPS software. The HIPS then monitors Firefox whenever it's in use. What feature of HIPS is being described in this scenario?

A. Application Behavior Monitoring
B. Signature Matching
C. Host Based Sniffing
D. Application Action Modeling

正解：A

質問 # 96
You work as a Network Administrator for NetTech Inc. When you enter http://66.111.64.227 in the browser's address bar, you are able to access the site. But, you are unable to access the site when you enter http:// www.uCertify.com. What is the most likely cause?

A. The site's Web server is offline.
B. The site's Web server has heavy traffic.
C. DNS entry is not available for the host name.
D. WINS server has no NetBIOS name entry for the server.

正解：C

解説：
Explanation/Reference:

質問 # 97
You work as a Network Administrator for McNeil Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest domain-based network. The company's management has decided to provide laptops to its sales team members. These laptops are equipped with smart card readers. The laptops will be configured as wireless network clients. You are required to accomplish the following tasks:
The wireless network communication should be secured.
The laptop users should be able to use smart cards for getting authenticated. In order to accomplish the tasks, you take the following steps:
Configure 802.1x and WEP for the wireless connections. Configure the PEAP-MS-CHAP v2 protocol for authentication. What will happen after you have taken these steps?

A. The wireless network communication will be secured.
B. The laptop users will be able to use smart cards for getting authenticated.
C. None of the tasks will be accomplished.
D. Both tasks will be accomplished.

正解：A

質問 # 98
Which of the following is TRUE regarding the ability of attackers to eavesdrop on wireless communications?

A. Eavesdropping attacks can take place from miles away.
B. Eavesdropping attacks cannot be performed through concrete walls.
C. Eavesdropping attacks are easily detected on wireless networks.
D. Eavesdropping attacks require expensive devices.

正解：A

質問 # 99
Which of the following statements about Microsoft's VPN client software is FALSE?

A. The VPN interface has the same IP address as the interface to the network it's been specified to protect.
B. The VPN tunnel appears as simply another adapter.
C. The VPN interface can be figured into the route table.
D. The VPN client software is built into the Windows operating system.

正解：A

質問 # 100
When you log into your Windows desktop what information does your Security Access Token (SAT) contain?

A. A list of your domain privileges
B. The Security ID numbers (SIDs) of all authenticated local users
C. The Security ID numbers (SIDs) of all the groups to which you belong
D. A list of cached authentications

正解：A

質問 # 101
The Linux command to make the /etc/shadow file, already owned by root, readable only by root is which of the following?

A. chown 400 /etc/shadow
B. chmod 444/etc/shadow
C. chmod 400/etc/shadow
D. chown root: root/etc/shadow

正解：C

質問 # 102
Which of the following is a benefit to utilizing Cygwin for Windows?

A. The ability to install a complete Ubuntu operating system install on Windows.
B. The ability to bring much more powerful scripting capabilities to Windows.
C. The ability to install a complete Red Hat operating system Install on Windows.
D. The ability to run a production Apache server.

正解：C

質問 # 103
While using Wire shark to investigate complaints of users being unable to login to a web application, you come across an HTTP POST submitted through your web application. The contents of the POST are listed below. Based on what you see below, which of the following would you recommend to prevent future damage to your database?

A. Use ssh to prevent a denial of service attack
B. Authenticate users to prevent hackers from using your database
C. Use https to prevent hackers from inserting malware
D. Sanitize user inputs to prevent injection attacks

正解：C

質問 # 104
Which of the following types of attacks occurs when attackers enter a system or capture network traffic and make changes to selected files or data packets?