GSNA Practice Test

GSNA Practice Test practice questions, page 6 of 7, with answer review and explanations.

Question 26

You work as a Web Deployer for UcTech Inc. You write the element for an application in which you write the sub-element as follows: * Who will have access to the application?

  1. Only the administrator
  2. No user
  3. All users
  4. It depends on the application.

Question 27

Patricia joins XYZ CORP., as a Web Developer. While reviewing the company's Web site, she finds that many words including keywords are misspelled. How will this affect the Web site traffic?

  1. Leave a bad impression on users.
  2. Search engine relevancy may be altered.
  3. Link exchange with other sites becomes difficult.
  4. The domain name cannot be registered.

Question 28

You work as a Network Administrator for BetaTech Inc. You have been assigned the task of designing the firewall policy for the company. Which of the following statements is unacceptable in the 'acceptable use statement' portion of the firewall policy?

  1. The computers and their applications should be used for organizational related activities only.
  2. Computers may not be left unattended with a user account still logged on.
  3. Applications other than those supplied or approved by the company can be installed on any computer.
  4. The installed e-mail application can only be used as the authorized e-mail service.

Question 29

In which of the following CAATs (Computer Assisted Auditing Techniques) does an auditor perform tests on computer files and databases?

  1. Parallel Simulation
  2. Generalized Audit Software (GAS)
  3. Test Data
  4. Custom Audit Software (CAS)

Question 30

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He successfully performs a brute force attack on the We-are-secure server. Now, he suggests some countermeasures to avoid such brute force attacks on the We-are-secure server. Which of the following are countermeasures against a brute force attack?

  1. The site should use CAPTCHA after a specific number of failed login attempts.
  2. The site should increase the encryption key length of the password.
  3. The site should restrict the number of login attempts to only three times.
  4. The site should force its users to change their passwords from time to time.