GSEC Practice Test

GSEC Practice Test practice questions, page 7 of 11, with answer review and explanations.

Question 31

With regard to defense-in-depth, which of the following statements about network design principles is correct?

  1. A secure network design requires that systems that have access to the Internet should not be accessible from the Internet and that systems accessible from the Internet should not have access to the Internet.
  2. A secure network design requires that networks utilize VLAN (Virtual LAN) implementations to insure that private and semi-public systems are unable to reach each other without going through a firewall.
  3. A secure network design will seek to provide an effective administrative structure by providing a single choke-point for the network from which all security controls and restrictions will be enforced.
  4. A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements.

Question 32

Which of the following quantifies the effects of a potential disaster over a period of time?

  1. Risk Assessment
  2. Business Impact Analysis
  3. Disaster Recovery Planning
  4. Lessons Learned

Question 33

Which of the following statements about Microsoft's VPN client software is FALSE?

  1. The VPN interface can be figured into the route table.
  2. The VPN interface has the same IP address as the interface to the network it's been specified to protect.
  3. The VPN client software is built into the Windows operating system.
  4. The VPN tunnel appears as simply another adapter.

Question 34

Which common firewall feature can be utilized to generate a forensic trail of evidence and to identify attack trends against your network?

  1. NAT
  2. State Table
  3. Logging
  4. Content filtering

Question 35

Your organization has broken its network into several sections/segments, which are separated by firewalls, ACLs and VLANs. The purpose is to defend segments of the network from potential attacks that originate in a different segment or that attempt to spread across segments. This style of defense-in-depth protection is best described as which of the following?

  1. Uniform protection
  2. Protected enclaves
  3. Vector-oriented
  4. Information-centric