GSNA Practice Test

GSNA Practice Test practice questions, page 4 of 7, with answer review and explanations.

Question 16

Adam works on a Linux system. He is using Sendmail as the primary application to transmit e-mails. Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files contains e-mail information such as source and destination IP addresses, date and time stamps etc?

  1. /var/log/mailog
  2. /var/log/logmail
  3. /log/var/mailog
  4. /log/var/logd

Question 17

Which of the following statements about session tracking is true?

  1. When using cookies for session tracking, there is no restriction on the name of the session tracking cookie.
  2. When using cookies for session tracking, the name of the session tracking cookie must be jsessionid.
  3. A server cannot use cookie as the basis for session tracking.
  4. A server cannot use URL rewriting as the basis for session tracking.

Question 18

A Web developer with your company wants to have wireless access for contractors that come in to work on various projects. The process of getting this approved takes time. So rather than wait, he has put his own wireless router attached to one of the network ports in his department. What security risk does this present?

  1. None, adding a wireless access point is a common task and not a security risk.
  2. It is likely to increase network traffic and slow down network performance.
  3. This circumvents network intrusion detection.
  4. An unauthorized WAP is one way for hackers to get into a network.

Question 19

An auditor assesses the database environment before beginning the audit. This includes various key tasks that should be performed by an auditor to identify and prioritize the users, data, activities, and applications to be monitored. Which of the following tasks need to be performed by the auditor manually?

  1. Classifying data risk within the database systems
  2. Monitoring data changes and modifications to the database structure, permission and user changes, and data viewing activities
  3. Analyzing access authority
  4. Archiving, analyzing, reviewing, and reporting of audit information

Question 20

Which of the following is Microsoft's implementation of the file and application server for the Internet and private intranets?

  1. Internet Server Service (ISS)
  2. Internet Server (IS)
  3. WWW Server (WWWS)
  4. Internet Information Server (IIS)