GNSA Online Practice Questions and Answers

Correct Answer:

John will click the Disable button in the Software Explorer page to Disable the application running on his computer.

Windows Defender is a software product designed by Microsoft to provide continuous security against malware. If it detects anything suspicious, an alert will appear on the screen. Windows Defender can also be used to scan a computer for

suspicious software. It can remove or quarantine any malware or spyware it finds.

The Quarantined items link will open the Quarantined items page that will help a user to remove or restore software that Windows Defender has prevented from running.

The Allowed items link will open the Allowed items page that will help a user to view software that are not monitored with Windows Defender.

Correct Answer: C

According to the scenario, you will use the wc -c file1.txt 2>error.txt command to accomplish the task. The 2> operator is an error redirector, which, while running a command, redirects the error (if it exists) on the specified file.

Answer: B, D are incorrect.

The > or 1> redirector can be used to redirect the output of the wc -c file1.txt file to the error.txt file; however, you want to write the errors in the error.txt file, not the whole output.

Answer: A is incorrect.

The >> operator will redirect the output of the command in the same manner as the > or 1> operator. Although the >>operator will not overwrite the error.txt file, it will append the error.txt file.

Correct Answer: AC

There are two prominent techniques used today for creating Internet maps:

Active probing: It is the first works on the data plane of the Internet and is called active probing. It is used to infer Internet topology based on router adjacencies.

AS PATH Inference: It is the second works on the control plane and infers autonomous system connectivity based on BGP data.

Correct Answer: A

You will have to disable anonymous authentication. This will prevent unauthorized users from accessing the FTP server. Anonymous authentication (anonymous access) is a method of authentication for Websites. Using this method, a user

can establish a Web connection to the IIS server without providing a username and password. Hence, this is an insecure method of authentication. This method is generally used to permit unknown users to access the Web or FTP server

directories.

Answer: D is incorrect. Enabling anonymous authentication will allow all the users to access the server.

Answer: B is incorrect. Stopping the FTP service on the server will prevent all the users from accessing the FTP server.

Answer: C is incorrect. Disabling the network adapter on the FTP server will disconnect the server from the network.

Correct Answer: D

tag specifies a frameset used to organize multiple frames and nested framesets in an HTML document. It defines the location, size, and orientation of frames. An HTML document can either contain a tag or a

tag.

Answer: A, B, C are incorrect. There are no HTML tags such as , , and .

Correct Answer: B

Circuit-level firewall operates at the Session layer of the OSI model. This type of firewall regulates traffic based on whether or not a trusted connection has been established.

Correct Answer: C

Enabling the user must change password at next logon option will make the given password a temporary password. Enabling this option forces, a user to change his existing password at next logon.

Answer: B is incorrect. There is no such option in Windows Vista.

Answer: D is incorrect. This option sets the password to never expire.

Answer: A is incorrect. This option sets the existing password as a permanent password for the user. Only administrators can change the password of the user.

Correct Answer: BC

sed and grep are the two commands that can be used to search a specified string in all text files without opening them. sed is a stream editor that is used to perform basic text transformations on an input stream (a file or input from a pipeline).

Correct Answer: AB

In order to connect a client computer to a secured Wireless LAN (WLAN), you are required to provide the following information: SSID of the WLAN WEP key rticlesItemsReportsHelp

Correct Answer: A

The stateful inspection firewall combines the circuit level and the application level firewall techniques. It assures the session or connection between the two parties is valid. It also inspects packets from the session to assure that the packets

are part of the established session and not malicious.

Answer: C is incorrect. The circuit-level firewall regulates traffic based on whether or not a trusted connection has been established. Answer: D is incorrect. The application level firewall inspects the contents of packets, rather than the source/

destination or connection between the two devices.

Answer: B is incorrect. There is no firewall type such as switch-level firewall.

Correct Answer: D

Most often user rights are determined by the groups the user belongs to. In some cases a user may mistakenly be added to a group they should not be. It is also common that a user moves within the organization, but is still retained in their

previous group giving them those rights.

Answer: B is incorrect. Access Control Lists are usually setup up manually. This means that a person would not likely be inadvertently added. You might want to check the ACL's, and you might find some issues, but this is not the most likely

way to find users with inappropriate rights.

Answer: C is incorrect. At best server logs can show you if a user accessed a resource. But a user could have access to a resource, and simply not have used that access yet. Answer: A is incorrect. IDS logs will only help you identify

potential attacks. Unless you suspect the user of intentionally trying to break into resources, an IDS log will not help in this scenario.

Correct Answer: D

AirSnort is a Linux-based WLAN WEP cracking tool that recovers encryption keys. AirSnort operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the

WEP keys.

Answer: C is incorrect. Kismet is an IEEE 802.11 wireless network sniffer and intrusion detection system.

Correct Answer: B

You can use the tr command to convert all lowercase letters of a text file to uppercase. The tr command is used to translate, squeeze, and/or delete characters from standard input, writing to standard output. If you want to change all lowercase letters to uppercase, you will use the tr [a-z] [A-Z] command. commands cannot translate the text from one form to another.

Correct Answer: BD

System hardening is a term used for securing an operating system. It can be achieved by installing the latest service packs, removing unused protocols and services, and limiting the number of users with administrative privileges.

Correct Answer: B

According to the question, you highest priority is to scan the Web applications for vulnerability.