GISF Practice Test

GISF Practice Test practice questions, page 9 of 13, with answer review and explanations.

Question 41

Which of the following does an anti-virus program update regularly from its manufacturer's Web site?

  1. Hotfixes
  2. Definition
  3. Service packs
  4. Permissions

Question 42

You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 domainbased network. The network has three Windows Server 2008 member servers and 150 Windows Vista client computers. According to the company's security policy, you apply Windows firewall setting to the computers on the network. Now, you are troubleshooting a connectivity problem that might be caused by Windows firewall. What will you do to identify connections that Windows firewall allows or blocks?

  1. Configure Network address translation (NAT).
  2. Disable Windows firewall logging.
  3. Configure Internet Protocol Security (IPSec).
  4. Enable Windows firewall logging.

Question 43

Hardening a system is one of the practical methods of securing a computer system. Which of the following techniques is used for hardening a computer system?

  1. Disabling all user accounts
  2. Applying egress filtering
  3. Applying Access Control List (ACL)
  4. Applying a patch to the OS kernel

Question 44

You work as a security manager in Mariotiss Inc. Your enterprise has been facing network and software security threats since a few months. You want to renew your current security policies and management to enhance the safety of your information systems. Which of the following is the best practice to initiate the renewal process from the lowest level with the least managerial effort?

  1. Start the Incident handling process.
  2. Change the entire security policy.
  3. Perform an IT audit.
  4. Switch to a new network infrastructure.

Question 45

You and your project team have identified the project risks and now are analyzing the probability and impact of the risks. What type of analysis of the risks provides a quick and high-level review of each identified risk event?

  1. A risk probability-impact matrix
  2. Quantitative risk analysis
  3. Qualitative risk analysis
  4. Seven risk responses