2022 Realistic GSEC Dumps Exam Tips Test Pdf Exam Material [Q85-Q99]

NO.85 Which of the following areas of a network contains DNS servers and Web servers for Internet users?

VPN

MMZ

VLAN

DMZ

NO.86 Which of the following is the FIRST step in performing an Operational Security (OP5EC) Vulnerabilities Assessment?

Assess the threat

Assess vulnerabilities of critical information to the threat

Conduct risk versus benefit analysis

Implement appropriate countermeasures

Identification of critical information

NO.87 Which of the following is NOT a recommended best practice for securing Terminal Services and Remote Desktop?

Require TLS authentication and data encryption whenever possible.

Make sure to allow all TCP 3389 traffic through the external firewall.

Group Policy should be used to lock down the virtual desktops of thin-client users.

Consider using IPSec or a VPN in addition to the RDP encryption if you are concerned about future RDP vulnerabilities.

NO.88 Many IIS servers connect to Microsoft SQL databases. Which of the following statements about SQL server security is TRUE?

SQL Server patches are part of the operating system patches.

SQL Server should be installed on the same box as your IIS web server when they communicate as part of the web application.

It is good practice to never use integrated Windows authentication for SQL Server.

It is good practice to not allow users to send raw SQL commands to the SQL Server.

NO.89 When designing wireless networks, one strategy to consider is implementing security mechanisms at all layers of the OSI model. Which of the following protection mechanisms would protect layer 1?

Hardening applications

Limit RF coverage

Employing firewalls

Enabling strong encryption

NO.90 You have an automated system for patching the operating systems of all your computers. All patches are supposedly current. Yet your automated vulnerability scanner has just reported vulnerabilities that you believe have been patched. Which of the actions below should you take next?

Check some systems manually.

Rerun the system patching routines.

Contact the incident response team.

Ignore the findings as false positives.

NO.91 You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which of the following will you use to accomplish this?

PPTP

IPSec

PGP

NTFS

NO.92 Analyze the screenshot below. What is the purpose of this message?

To gather non-specific vulnerability information

To get the user to download malicious software

To test the browser plugins for compatibility

To alert the user to infected software on the computer.

NO.93 Which of the following protocols is responsible for the resolution of IP addresses to media access control (MAC) addresses?

ARP

ICMP

HTTP

PPP

NO.94 Which of the following Unix syslog message priorities is the MOST severe?

err

emerg

crit

alert

NO.95 Which of the following monitors program activities and modifies malicious activities on a system?

Back door

HIDS

NIDS

RADIUS

NO.96 Which of the following would be a valid reason to use a Windows workgroup?

Lower initial cost

Simplicity of single sign-on

Centralized control

Consistent permissions and rights

NO.97 Which of the following is generally practiced by the police or any other recognized governmental authority?

Spoofing

SMB signing

Wiretapping

Phishing

NO.98 Which of the following protocols implements VPN using IPSec?

SLIP

PPP

L2TP

PPTP

NO.99 Which Linux file lists every process that starts at boot time?

inetd

netsrv

initd

inittab

2022 Realistic GSEC Dumps Exam Tips Test Pdf Exam Material [Q85-Q99]

Leave a Reply Cancel reply

GSEC Practice Tests

Related Certifications

Recent Posts

Categories

Archives