GISF Practice Test

GISF Practice Test practice questions, page 7 of 13, with answer review and explanations.

Question 31

What does a firewall check to prevent certain ports and applications from getting the packets into an Enterprise?

  1. The application layer port numbers and the transport layer headers
  2. The presentation layer headers and the session layer port numbers
  3. The network layer headers and the session layer port numbers
  4. The transport layer port numbers and the application layer headers

Question 32

You are the Network Administrator for a large corporate network. You want to monitor all network traffic on your local network for suspicious activities and receive a notification when a possible attack is in process. Which of the following actions will you take for this?

  1. Install a DMZ firewall
  2. Enable verbose logging on the firewall
  3. Install a host-based IDS
  4. Install a network-based IDS

Question 33

The SALES folder has a file named XFILE.DOC that contains critical information about your company. This folder resides on an NTFS volume. The company's Senior Sales Manager asks you to provide security for that file. You make a backup of that file and keep it in a locked cupboard, and then you deny access on the file for the Sales group. John, a member of the Sales group, accidentally deletes that file. You have verified that John is not a member of any other group. Although you restore the file from backup, you are confused how John was able to delete the file despite having no access to that file. What is the most likely cause?

  1. The Sales group has the Full Control permission on the SALES folder.
  2. The Deny Access permission does not work on files.
  3. The Deny Access permission does not restrict the deletion of files.
  4. John is a member of another group having the Full Control permission on that file.

Question 34

NIST Special Publication 800-50 is a security awareness program. It is designed for those people who are currently working in the information technology field and want to the information security policies. Which of the following are its significant steps? Each correct answer represents a complete solution. Choose two.

  1. Awareness and Training Material Effectiveness
  2. Awareness and Training Material Development
  3. Awareness and Training Material Implementation
  4. Awareness and Training Program Design

Question 35

You are the project manager of the HHH Project. The stakeholders for this project are scattered across the world and you need a method to promote interaction. You determine that a Web conferencing software would be the most cost effective solution. The stakeholders can watch a slide show while you walk them through the project details. The stakeholders can hear you, ask questions via a chat software, and post concerns. What is the danger in this presentation?

  1. 55 percent of all communication is nonverbal and this approach does not provide non-verbal communications.
  2. The technology is not proven as reliable.
  3. The stakeholders won't really see you.
  4. The stakeholders are not required to attend the entire session.