GSECブレーン問題集PDF、GIAC GSEC試験問題豪華お試しセット
2024年最新されたGSECサンプル問題は信頼され続けるGSECテストエンジン
GIAC GSEC（GIACセキュリティエッセンシャルズ認定）試験は、情報セキュリティ分野で非常に尊敬されている認定資格です。この認定は、主要なセキュリティ原則、リスク管理、およびインシデント対応を含む情報セキュリティの基本的な概念の知識と理解を評価するために設計されています。この認定は、ITマネージャー、セキュリティアナリスト、およびネットワークエンジニアを含む、自組織の情報資産を保護する責任を持つ専門家を対象としています。
質問 # 148
Which of the following types of computers is used for attracting potential intruders?
- A. Honey pot
- B. Data pot
- C. Bastion host
- D. Files pot
正解：A
質問 # 149
A US case involving malicious code is brought to trial. An employee had opened a helpdesk ticket to report specific instances of strange behavior on her system. The IT helpdesk representative collected information by interviewing the user and escalated the ticket to the system administrators. As the user had regulated and sensitive data on her computer, the system administrators had the hard drive sent to the company's forensic consultant for analysis and configured a new hard drive for the user. Based on the recommendations from the forensic consultant and the company's legal department, the CEO decided to prosecute the author of the malicious code. During the court case, which of the following would be able to provide direct evidence?
- A. The company CEO
- B. The system administrator who removed the hard drive
- C. The user of the infected system
- D. The IT helpdesk representative
正解：C
質問 # 150
Which of the following Ethernet specifications can transmit data up to a distance of 500 meters?
- A. 100BaseT
- B. 10BaseT
- C. 10Base2
- D. 10Base5
正解：D
質問 # 151
Which of the following tools is used to query the DNS servers to get detailed information about IP addresses, MX records, and NS servers?
- A. PING
- B. NETSTAT
- C. NBTSTAT
- D. NSLOOKUP
正解：D
質問 # 152
Which of the following connectivity devices is used to extend a network on a purely mechanical basis?
- A. Router
- B. Switch
- C. Gateway
- D. Active hub
正解：D
質問 # 153
Which of the following heights of fence deters only casual trespassers?
- A. 2 to 2.5 feet
- B. 3 to 4 feet
- C. 8 feet
- D. 6 to 7 feet
正解：B
質問 # 154
When a host on a remote network performs a DNS lookup of www.google.com, which of the following is likely to provide an Authoritative reply?
- A. The root DNS server
- B. The local DNS server
- C. The top-level DNS server for .com
- D. The DNS server for google.com
正解：B
質問 # 155
SSL session keys are available in which of the following lengths?
- A. 40-bit and 64-bit.
- B. 64-bit and 128-bit.
- C. 128-bit and 1,024-bit.
- D. 40-bit and 128-bit.
正解：D
質問 # 156
Which of the following are used to suppress gasoline and oil fires? Each correct answer represents a complete solution. Choose three.
- A. Soda acid
- B. Water
- C. Halon
- D. CO2
正解：A、C、D
質問 # 157
Which of the following statements about the availability concept of Information security management is true?
- A. It ensures that modifications are not made to data by unauthorized personnel or processes.
- B. It ensures that unauthorized modifications are not made to data by authorized personnel or processes.
- C. It determines actions and behaviors of a single individual within a system.
- D. It ensures reliable and timely access to resources.
正解：D
質問 # 158
Which of the following is a potential WPA3 security issue?
- A. Traffic decryption with PSK
- B. Disassociate frame DoS
- C. Short key lengths
- D. Backward compatibility
正解：D
質問 # 159
You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. You are required to search for the error messages in the /var/log/messages log file. Which of the following commands will you use to accomplish this?
- A. cat /var/log/messages | look error
- B. ps /var/log/messages
- C. cat /var/log/messages
- D. cat /var/log/messages | grep error
正解：D
質問 # 160
Which of the following is a benefit of using John the Ripper for auditing passwords?
- A. John cannot use the DES bit-slicing technique, so it is much slower than other tools, especially when used against DES-encrypted passwords.
- B. John's Blowfish cracking routine uses a complex central computing loop that increases the cost of each hash computation.
- C. John the Ripper is much slower for auditing passwords encrypted with MD5 and Blowfish.
- D. John's MD5 cracking routine uses a simplified central computing loop that decreases the cost of each hash computation.
正解：D
質問 # 161
A simple cryptosystem that keeps the same letters and shuffles the order is an example of what?
- A. Rotation
- B. Monolithic
- C. Substitution
- D. Permutation
正解：D
質問 # 162
What type of formal document would include the following statement?
Employees are responsible for exercising good judgment regarding the reasonableness of personal use.
Individual departments are responsible for creating guidelines concerning personal application of Internet/ Intranet/Extranet systems. In the absence of such policies, employees should be guided by departmental policies, and if there is any uncertainty, employees should consult their supervisor or manager.
- A. Remote access policy
- B. Acceptable use policy
- C. Non-disclosure agreement
- D. Company privacy statement
正解：B
質問 # 163
Which of the following is an advantage of private circuits versus VPNs?
- A. Time required to implement
- B. Flexibility
- C. Performance guarantees
- D. Cost
正解：C
質問 # 164
A US case involving malicious code is brought to trial. An employee had opened a helpdesk ticket to report specific instances of strange behavior on her system. The IT helpdesk representative collected information by interviewing the user and escalated the ticket to the system administrators. As the user had regulated and sensitive data on her computer, the system administrators had the hard drive sent to the company's forensic consultant for analysis and configured a new hard drive for the user. Based on the recommendations from the forensic consultant and the company's legal department, the CEO decided to prosecute the author of the malicious code. During the court case, which of the following would be able to provide direct evidence?
- A. The company CEO
- B. The system administrator who removed the hard drive
- C. The user of the infected system
- D. The IT helpdesk representative
正解：C
質問 # 165
The Windows 'tracert' begins by sending what type of packet to the destination host?
- A. An ICMP Echo Reply
- B. An ICMP Echo Request
- C. A UDP packet with a TTL of 1
- D. An ICMP Router Discovery
正解：C
質問 # 166
An organization keeps its intellectual property in a database. Protection of the data is assigned to one system administrator who marks the data, and monitors for this intellectual property leaving the network. Which defense-In-depth principle does this describe?
- A. Uniform Protection
- B. Threat-Vector Analysis
- C. Information Centric
- D. Protected Enclave
正解：C
質問 # 167
Which of the following is NOT typically used to mitigate the war dialing threat?
- A. Proactively scanning your own phone numbers
- B. Setting modems to auto-answer mode
- C. Monitoring call logs at the switch
- D. Setting up monitored modems on special phone numbers
正解：B
質問 # 168
A VPC is created with a CIDR block of 10.22.0.0/16, which of the following private subnets could be Included?
- A. 10.22.12.0/24
- B. 10.23.0.0/16
- C. 10.10.10.0/24
- D. 10.23.12.0/26
正解：A
質問 # 169
......
無料お試しGIAC GSEC問題集PDFは必ずベストの問題集オプションを使おう：https://jp.fast2test.com/GSEC-premium-file.html
GSEC試験資料GIAC学習ガイド：https://drive.google.com/open?id=1xbEStp-xy7w6qHgHKhWmz7ZzTDAR6wrQ