GSEC Practice Test

GSEC Practice Test practice questions, page 5 of 11, with answer review and explanations.

Question 21

What type of attack can be performed against a wireless network using the tool Kismet?

  1. IP spoofing
  2. Eavesdropping
  3. Masquerading
  4. Denial of Service

Question 22

Which of the following is an Implementation of PKI?

  1. SSL
  2. 3DES
  3. Kerberos
  4. SHA-1

Question 23

Which of the following statements about policy is FALSE?

  1. A well-written policy contains definitions relating to "what" to do.
  2. A well-written policy states the specifics of "how" to do something.
  3. Security policy establishes what must be done to protect information stored on computers.
  4. Policy protects people who are trying to do the right thing.

Question 24

You have reason to believe someone with a domain user account has been accessing and modifying sensitive spreadsheets on one of your application servers. You decide to enable auditing for the files to see who is accessing and changing them. You enable the Audit Object Access policy on the files via Group Policy. Two weeks later, when you check on the audit logs, you see they are empty. What is the most likely reason this has happened?

  1. You cannot enable auditing on files, just folders
  2. You did not enable auditing on the files
  3. The person modifying the files turned off auditing
  4. You did not save the change to the policy

Question 25

Which of the following BEST describes the two job functions of Microsoft Baseline Security Analyzer (MBSA)?

  1. Vulnerability scanner and auditing tool
  2. Auditing tool and alerting system
  3. Configuration management and alerting system
  4. Security patching and vulnerability scanner