[2022年03月14日] 365日更新、有効なGSEC知能問題集
ベスト品質のGSEC試験問題集でGIACテスト高得点を目指そう
質問 49
You work as a Linux Technician for Tech Perfect Inc. The company has a Linux-based network. You have configured a database server in the network. Users complain that the server has become remarkably slow. However, the previous day, the server was performing well. You know that some of the processes may be the cause of the issue. You run the PS command on the server. In the result set, which information will you look at that suggests the problematic process?
- A. A high process ID
- B. A low CPU time
- C. A low load average
- D. A high load average
- E. A high CPU time
正解: B
質問 50
John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com
. While examining a log report, he finds that an intrusion has been attempted by an attacker whose IP address is 0x40.0x3 A.0x2B.0xE6. Which of the following decimal IP addresses will respond to the ping on the above Hexadecimal IP address?
- A. 64.58.43.231
- B. 64.58.43.230
- C. 64.59.43.230
- D. 64.58.42.230
正解: B
質問 51
Which of the following best describes the level of risk associated with using proprietary crypto algorithms.?
- A. Proprietary algorithms are not known to generally be any more or less vulnerable than publicly scrutinized algorithms.
- B. Proprietary algorithms have not been subjected to public scrutiny, so they have been checked less throughly for vulnerabilities.
- C. Proprietary algorithms are less likely be vulnerable than algorithms that have been publicly disclosed because of enhanced secrecy of the algorithm.
- D. Proprietary cryptographic algorithms are required by law to use shorter key lengths in the United States, so the risk is high.
正解: B
質問 52
You ask your system administrator to verify user compliance with the corporate policies on password strength, namely that all passwords will have at least one numeral, at least one letter, at least one special character and be 15 characters long. He comes to you with a set of compliance tests for use with an offline password cracker. They are designed to examine the following parameters of the password:
*they contain only numerals
*they contain only letters
*they contain only special characters
*they contain only letters and numerals
" they contain only letters and special characters
*they contain only numerals and special characters
Of the following, what is the benefit to using this set of tests?
- A. They are focused on cracking passwords that meet minimum complexity requirements
- B. They are focused on cracking passwords that use characters prohibited by the password policy
- C. They find non-compliant passwords without cracking compliant passwords.
- D. They crack compliant and non-compliant passwords to determine whether the current policy is strong enough
正解: C
質問 53
Which of the following are the types of intrusion detection systems?
Each correct answer represents a complete solution. Choose all that apply.
- A. Server-based intrusion detection system (SIDS)
- B. Client-based intrusion detection system (CIDS)
- C. Host-based intrusion detection system (HIDS)
- D. Network intrusion detection system (NIDS)
正解: C,D
質問 54
What is the most secure way to address an unused Windows service so it cannot be exploited by malware?
- A. Set to manual startup
- B. Uninstall it
- C. Firewall it
- D. Disable it
正解: B
質問 55
Where could you go in Windows XP/2003 to configure Automatic Updates?
- A. Open the MMC and choose the Automatic Updates snap-in.
- B. Go to the System applet in Control Panel and click on the Automatic Updates icon.
- C. Right click on your desktop and choose the automatic updates.
- D. Right click on the Start Menu and choose select Properties in the pop-up Menu.
正解: B
質問 56
Which of the following fields CANNOT be hashed by Authentication Header (AH) in transport mode?
- A. Length
- B. Source IP
- C. TTL
- D. Destination IP
正解: C
質問 57
Which of the following is a benefit of using John the Ripper for auditing passwords?
- A. John's Blowfish cracking routine uses a complex central computing loop that increases the cost of each hash computation.
- B. John the Ripper is much slower for auditing passwords encrypted with MD5 and Blowfish.
- C. John cannot use the DES bit-slicing technique, so it is much slower than other tools, especially when used against DES-encrypted passwords.
- D. John's MD5 cracking routine uses a simplified central computing loop that decreases the cost of each hash computation.
正解: D
質問 58
SIMULATION
Fill in the blank with the correct answer to complete the statement below.
The permission is the minimum required permission that is necessary for a user to enter a directory and list its contents.
正解:
解説:
Read
質問 59
Which of the following statements about IEEE 802.1X standard are true? Each correct answer represents a complete solution. Choose two.
- A. It uses the Extensible Authentication Protocol (EAP) that works on Ethernet, Token Ring, or wireless LANs to exchange messages for the authentication process.
- B. It provides an authentication framework for wireless LANs.
- C. It uses the Point-to-Point Tunneling Protocol (PPTP) that works on Ethernet, Token Ring, or wireless LANs to exchange messages for the authentication process.
- D. It provides the highest level of VPN security.
正解: A,B
質問 60
Which of the following protocols is used to retrieve e-mails from a remote mail server?
- A. SNMP
- B. IGMP
- C. SMTP
- D. POP3
正解: D
質問 61
Which of the following defines the communication link between a Web server and Web applications?
- A. Firewall
- B. CGI
- C. IETF
- D. PGP
正解: B
質問 62
Which layer of the TCP/IP Protocol Stack Is responsible for port numbers?
- A. Transport
- B. Internet
- C. Application
- D. Network
正解: A
質問 63
Which of the following applications would be BEST implemented with UDP instead of TCP?
- A. A web browser.
- B. A file transfer application.
- C. A multicast streaming application.
- D. A DNS zone transfer.
正解: C
質問 64
You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. You are logged on as a regular user on a Linux server. You want to make a quick administrative change to the Linux server without logging out and logging back in as the root user. Which of the following commands will you use to accomplish this?
- A. UMASK
- B. MOUNT
- C. CNGUSR
- D. SU
正解: D
質問 65
Which of the following statements about Microsoft's VPN client software is FALSE?
- A. The VPN interface can be figured into the route table.
- B. The VPN tunnel appears as simply another adapter.
- C. The VPN interface has the same IP address as the interface to the network it's been specified to protect.
- D. The VPN client software is built into the Windows operating system.
正解: C
質問 66
Which of the following is an advantage of private circuits versus VPNs?
- A. Flexibility
- B. Cost
- C. Time required to implement
- D. Performance guarantees
正解: D
質問 67
You work as a Network Administrator for Tech World Inc. The company has a Linux-based network. You want to determine what process each user is running. Which of the following commands will you use?
- A. whodo
- B. pstat
- C. who
- D. fsck
正解: A
質問 68
You work as a Network Administrator for Net World Inc. The company has a Linux-based network. You want to mount an SMBFS share from a Linux workstation. Which of the following commands can you use to accomplish the task?
Each correct answer represents a complete solution. Choose two.
- A. smbfsmount
- B. smbmount
- C. mount smb
- D. mount -t smbfs
正解: B,D
質問 69
Which of the following terms is synonymous with the willful destruction of another person's property?
- A. Phishing
- B. Hacking
- C. Vandalism
- D. Spoofing
正解: C
質問 70
Validating which vulnerabilities in a network environment are able to be exploited by an attacker is called what?
- A. Anomaly detection
- B. Perimeter assessment
- C. Penetration testing
- D. Vulnerability scanning
正解: D
質問 71
If Linux server software is a requirement in your production environment which of the following should you NOT utilize?
- A. Debian
- B. Cygwin
- C. Red Hat
- D. Mandrake
正解: B
質問 72
......
注目すべき時短になるGSECオールインワン試験ガイド：https://www.goshiken.com/GIAC/GSEC-mondaishu.html
検証された材料は決まってこれ！GSEC：https://drive.google.com/open?id=1P8rKXY6zmQEC2k1EsyeHF7NtKgoXh3Zc