GISF Practice Test

GISF Practice Test practice questions, page 3 of 13, with answer review and explanations.

Question 11

Which of the following protocols provides secured transaction of data between two computers?

  1. SSH
  2. FTP
  3. Telnet
  4. RSH

Question 12

A firewall is a combination of hardware and software, used to provide security to a network. It is used to protect an internal network or intranet against unauthorized access from the Internet or other outside networks. It restricts inbound and outbound access and can analyze all traffic between an internal network and the Internet. Users can configure a firewall to pass or block packets from specific IP addresses and ports. Which of the following tools works as a firewall for the Linux 2.4 kernel?

  1. IPChains
  2. OpenSSH
  3. Stunnel
  4. IPTables

Question 13

Which of the following concepts represent the three fundamental principles of information security? Each correct answer represents a complete solution. Choose three.

  1. Privacy
  2. Availability
  3. Integrity
  4. Confidentiality

Question 14

You work as a Software Developer for Mansoft Inc. You create an application. You want to use the application to encrypt data. You use the HashAlgorithmType enumeration to specify the algorithm used for generating Message Authentication Code (MAC) in Secure Sockets Layer (SSL) communications. Which of the following are valid values for HashAlgorithmType enumeration? Each correct answer represents a part of the solution. Choose all that apply.

  1. MD5
  2. None
  3. DES
  4. RSA
  5. SHA1
  6. 3DES

Question 15

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He wants to test the effect of a virus on the We-are-secure server. He injects the virus on the server and, as a result, the server becomes infected with the virus even though an established antivirus program is installed on the server. Which of the following do you think are the reasons why the antivirus installed on the server did not detect the virus injected by John? Each correct answer represents a complete solution. Choose all that apply.

  1. The virus, used by John, is not in the database of the antivirus program installed on the ser ver.
  2. The mutation engine of the virus is generating a new encrypted code.
  3. John has created a new virus.
  4. John has changed the signature of the virus.