GSNA Online Practice Questions and Answers

Correct Answer:

In order to ensure that the laptop users use smart cards for authentication, you will have to configure IEEE 802.1X authentication using the EAP-TLS protocol on the network.

Correct Answer:

There are four major CLI access modes: User: When a user accesses the command-line interface (CLI) of a Cisco switch IOS, the IOS puts the user in user mode. The user mode allows the user to look around; it does not permit the user to change or break any configuration. When the user enters a command, the switch executes the command and displays the command result. A Limited set of commands is available for use in the user mode. User mode is also called user EXEC mode. The prompt in this mode is displayed as hostname > Enable: Privileged EXEC mode is an area from where more powerful commands can be run while accessing CLI of a switch IOS. In this mode, more commands are added to the set of commands available in user mode. Privileged EXEC mode is also known as privileged mode or enable mode. For reaching privileged EXEC mode, the enable command is required to be run from user mode. By default, a user cannot get into privileged EXEC mode through SSH and Telnet sessions. The prompt changes from hostname > to hostname # when a user moves to privileged EXEC mode from user mode. Global configuration: Global configuration mode is an access mode of Cisco command-line interface (CLI). The configuration commands can be run in this mode only. Commands run in this mode update the active configuration file as soon as the Enter key is pressed at the end of a command. The config command is required to be run from the enable mode to switch to the global configuration mode. The prompt changes to hostname (config)# from hostname# when access mode is changed to global configuration mode from enable mode. Interface configuration: Interface configuration mode is a subcommand mode of the global configuration access mode of Cisco command-line interface (CLI). The interface command is used to move from global configuration mode to the interface configuration mode. The prompt changes to hostname (config-if)# from hostname (config)# when a user moves from global configuration mode to interface configuration mode. After entering the interface configuration mode, the commands executed affects only the interface that the user has selected. For example, the interface FastEthernet 0/1 command will put a user in the interface configuration mode. Commands executed afterwards will affect only the FastEthernet 0/1.

Correct Answer: A

Magic Lantern works both as an encryption-cracking tool and as a keylogger. Answer: C is incorrect. Alchemy Remote Executor is a system management tool that allows Network Administrators to execute programs on remote network

computers without leaving their workplace. From the hacker's point of view, it can be useful for installing keyloggers, spyware, Trojans, Windows rootkits and such. One necessary condition for using the Alchemy Remote Executor is that the

user/attacker must have the administrative passwords of the remote computers on which the malware is to be installed. Answer: B is incorrect. The KeyGhost keylogger is a hardware keylogger that is used to log all keystrokes on a computer.

It is a tiny device that clips onto the keyboard cable. Once the KeyGhost keylogger is attached to the computer, it quietly logs every key pressed on the keyboard into its own internal Flash memory (just as with smart cards). When the log

becomes full, it overwrites the oldest keystrokes with the newest ones.

Answer: D is incorrect. SocketShield provides a protection shield to a computer system against malware, viruses, spyware, and various types of keyloggers. SocketShield provides protection at the following two levels:

1. Blocking: In this level, SocketShield uses a list of IP addresses that are known as purveyor of exploits. All http requests for any page in these domains are simply blocked. 2.Shielding: In this level, SocketShield blocks all the current and past IP addresses that are the cause of unauthorized access.

Correct Answer: ACD

A perimeter network, also known as a demilitarized zone or DMZ, is a small network that lies in between the Internet and a private network. It has a connection to the Internet through an external firewall and a connection to the internal network through an interior firewall. It allows outside users access to the specific servers located in the perimeter network while preventing access to the internal corporate network. Servers, routers, and switches that maintain security by preventing the internal network from being exposed on the Internet are placed in a perimeter network. A perimeter network is commonly used for deploying e-mail and Web servers for a company.

Correct Answer: ABC

There are three goals of risk management as follows:

1.

Identifying the risk

2.

Assessing the impact of potential threats

3.

Finding an economic balance between the impact of the risk and the cost of the countermeasure

Answer: D is incorrect. Identifying the accused does not come under the scope of risk management.

Correct Answer: B

The encodeRedirectURL() method of the HttpServletResponse interface, returns a URL by including a session ID in it for use in the sendRedirect() method. If the encoding is not required, the URL is returned unchanged. If browser supports cookies, the encodeRedirectURL() method returns the input URL unchanged, since the session ID will be persisted as a cookie. This method is different from the encodeURL as this method redirects the request to a different URL in the same session. The syntax of the encodeRedirectURL() method is as follows: public String encodeRedirectURL(String urlstring)Here, urlstring is the URL to be encoded. Answer: C is incorrect. The encodeURL() method of the HttpServletResponse interface returns a URL by including the session ID in it. If the encoding

is not required, the URL is returned unchanged. If cookies are supported by the browser, the encodeURL() method returns the input URL unchanged since the session ID will be persisted as a cookie.

The syntax of the encodeURL() method is as follows:

public String encodeURL(String urlstring) Here, urlstring is the URL to be encoded.

Correct Answer: A

The head -n 5 /etc/passwd command will show the first 5 lines of the file /etc/passwd.

Correct Answer: C

To ensure fault tolerance among the servers and to get the highest possible level of security and encryption for OWA clients, you must install two front-end Exchange 2000 servers. Place the new servers on the perimeter network and configure load balancing between them. To enhance security, you should also configure Certificate Services and create a rule on the firewall to redirect port 443 to the servers. The most secure firewall configuration is placing a firewall on either side of the front-end servers. This isolates the front-end servers in a perimeter network, commonly referred to as a demilitarized zone (DMZ). It is always better to configure more than one front-end server to get fault tolerance.

Correct Answer: A

Publishing rules are applied on SMTP servers to accept inbound mail delivery. There are three basic rules of ISA Server, which are as follows:

1.

Access rules: These rules determine what network traffic from the internal network is allowed to access the external network.

2.

Publishing rules: These rules are used for controlling access requests from the external network for the internal resources. These types of rules are usually applied to Web servers that are used for providing public access. These are also applied on SMTP servers to accept inbound mail delivery.

3.

Network rules: These rules define the traffic source, traffic destination, and the network relationship. Answer: D is incorrect. These rules are set for controlling outbound traffic. Answer: B is incorrect. These rules define how to handle the traffic. Answer: C is incorrect. There are no such ISA Server rule sets.

Correct Answer: A

The tar -u command is used to append a tar file if the on-disk version of the tar file has a modification date more recent than its copy in the tar archive.

Answer: B is incorrect. The tar -t command is used to list the contents of an archive. Answer: D is incorrect. The tar -x command is used to extract the files from an archive. Answer: C is incorrect. The tar -c command is used to create a new

archive of specified files.

Correct Answer: BCD

A data mart is a repository of data gathered from operational data and other sources that is designed to serve a particular community of knowledge workers. In scope, the data may derive from an enterprise-wide database or data warehouse or be more specialized. The emphasis of a data mart is on meeting the specific demands of a particular group of knowledge users in terms of analysis, content, presentation, and ease-of-use. Users of a data mart can expect to have data presented in terms that are familiar. In practice, the terms data mart and data warehouse each tend to imply the presence of the other in some form. However, most writers using the term seem to agree that the design of a data mart tends to start from an analysis of user needs and that a data warehouse tends to start from an analysis of what data already exists and how it can be collected in such a way that the data can later be used. A data warehouse is a central aggregation of data (which can be distributed physically); a data mart is a data repository that may derive from a data warehouse or not and that emphasizes ease of access and usability for a particular designed purpose. In general, a data warehouse tends to be a strategic but somewhat unfinished concept; a data mart tends to be tactical and aimed at meeting an immediate need. Answer: A is incorrect. Writers using a data mart believe that the design of a data mart tends to start from an analysis of user needs.

Correct Answer: B

The yy key combination in the vi editor is used to copy the current line. The vi editor is an interactive, cryptic, and screen-based text editor used to create and edit a file. It operates in either Input mode or Command mode. In Input mode, the vi editor accepts a keystroke as text and displays it on the screen, whereas in Command mode, it interprets keystrokes as commands. As the vi editor is case sensitive, it interprets the same character or characters as different commands, depending upon whether the user enters a lowercase or uppercase character. When a user starts a new session with vi, he must put the editor in Input mode by pressing the "I" key. If he is not able to see the entered text on the vi editor's screen, it means that he has not put the editor in Insert mode. The user must change the editor to Input mode before entering any text so that he can see the text he has entered. Answer: D is incorrect. It deletes next char on the right. Answer: A is incorrect. It deletes the current line and one line above. Answer: C is incorrect. It deletes from the cursor till the end of the line.

Correct Answer: ABC

The Rhosts (rsh-style), TIS, and Kerberos user authentication methods are supported by the SSH-1 protocol but not by SSH-2 protocol. Answer: D is incorrect. Password-based authentication is supported by both the SSH-1 and SSH-2 protocols.

Correct Answer: ABD

HTML lacks some of the features found in earlier hypertext systems, such as typed links, source tracking, fat links etc. Even some hypertext features that were in early versions of HTML have been ignored by most popular web browsers until recently, such as the link element and in- browser Web page editing. Sometimes Web services or browser manufacturers remedy these shortcomings. Answer: C is incorrect. Hyperlink is supported by HTML as well as Hypertext.

Correct Answer: BCD

Tiger Analytical Research Assistant (TARA) is a set of scripts that scans a Unix system for security problems. Following are the pros and cons of using TARA. Pros:

1.

It is open source.

2.

It is very modular.

3.

It can work on a wide variety of platforms.

4.

It is composed mostly of bash scripts; hence, it can run on any Unix platform with little difficulty.

Cons:

It has a very specific function of seeking paths to root.

Answer: A is incorrect. It is a limitation of TARA that reduces its flexibility to be used for different purposes.