GSEC Practice Test — 271 Free Questions Online

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

271Practice Questions

3Study Modes

Free

TopicSort

Question 1

Networking & Protocols

How many bytes does it take to represent the hexadecimal value OxFEDCBA?

A 12
B 2
C 3
D 6

Question 2

Networking & Protocols

Question 3

Security Frameworks and CIS Controls

Question 4

Defense in Depth

Question 5

Log Management & SIEM

Question 6

Defense in Depth

Question 7

Networking & Protocols

Question 8

Incident Handling & Response

Question 9

Windows as a Service

Question 10

Windows Access Controls

Question 11

Enforcing Windows Security Policy

Question 12

Windows Access Controls

Question 13

Cryptography

Question 14

Security Frameworks and CIS Controls

Question 15

Linux Security and Hardening

Question 16

Networking & Protocols

Question 17

Web Communication Security

Question 18

Defensible Network Architecture

Question 19

Cryptography Application

Question 20

Malicious Code & Exploit Mitigation

Question 21

Network Security Devices

Question 22

Cryptography Application

Question 23

Wireless Network Security

Question 24

Vulnerability Scanning and Penetration Testing

Question 25

Linux Fundamentals

Page 1 of 11 • Questions 1-25 of 271

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

Which of the following statements about Microsoft's VPN client software is FALSE?

A The VPN interface can be figured into the route table.
B The VPN interface has the same IP address as the interface to the network it's been specified to protect.
C The VPN client software is built into the Windows operating system.
D The VPN tunnel appears as simply another adapter.

Which of the following quantifies the effects of a potential disaster over a period of time?

A Risk Assessment
B Business Impact Analysis
C Disaster Recovery Planning
D Lessons Learned

With regard to defense-in-depth, which of the following statements about network design principles is correct?

A A secure network design requires that systems that have access to the Internet should not be accessible from the Internet and that systems accessible from the Internet should not have access to the Internet.
B A secure network design requires that networks utilize VLAN (Virtual LAN) implementations to insure that private and semi-public systems are unable to reach each other without going through a firewall.
C A secure network design will seek to provide an effective administrative structure by providing a single choke-point for the network from which all security controls and restrictions will be enforced.
D A secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements.

Which common firewall feature can be utilized to generate a forensic trail of evidence and to identify attack trends against your network?

A NAT
B State Table
C Logging
D Content filtering

Question 6

Defense in Depth

Question 7

Networking & Protocols

Question 8

Incident Handling & Response

Question 9

Windows as a Service

Question 10

Windows Access Controls

Question 11

Enforcing Windows Security Policy

Question 12

Windows Access Controls

Question 13

Cryptography

Question 14

Security Frameworks and CIS Controls

Question 15

Linux Security and Hardening

Question 16

Networking & Protocols

Question 17

Web Communication Security

Question 18

Defensible Network Architecture

Question 19

Cryptography Application

Question 20

Malicious Code & Exploit Mitigation

Question 21

Network Security Devices

Question 22

Cryptography Application

Question 23

Wireless Network Security

Question 24

Vulnerability Scanning and Penetration Testing

Question 25

Linux Fundamentals

Your organization is developing a network protection plan. No single aspect of your network seems more important than any other. You decide to avoid separating your network into segments or categorizing the systems on the network. Each device on the network is essentially protected in the same manner as all other devices.
This style of defense-in-depth protection is best described as which of the following?

A Uniform protection
B Threat-oriented
C Information-centric
D Protected enclaves

When a packet leaving the network undergoes Network Address Translation (NAT), which of the following is changed?

A TCP Sequence Number
B Source address
C Destination port
D Destination address

Which of the following elements is the most important requirement to ensuring the success of a business continuity plan?

A Disaster Recover Plans
B Anticipating all relevant threats
C Executive buy-in
D Clearly defining roles and responsibilities
E Training

Which of the following is a new Windows Server 2008 feature for the Remote Desktop Protocol (RDP)?

A The ability to allow the administrator to choose a port other than the default RDP port (TCP 3389)
B The ability to support connections from mobile devices like smart phones
C The ability to allow clients to authenticate over TLS
D The ability to allow clients to execute individual applications rather than using a terminal desktop

What is TRUE about Workgroups and Domain Controllers?

A By default all computers running Windows 2008 can only form Domain Controllers not Workgroups
B Workgroups are characterized by higher costs while Domain Controllers by lower costs
C You cannot have stand-alone computers in the midst of other machines that are members of a domain
D Workgroup computers cannot share resources, only computers running on the same domain can
E You can have stand-alone computers in the midst of other machines that are members of a domain.

When are Group Policy Objects (GPOs) NOT applied automatically to workstations?

A At 90-minute intervals
B At logon
C Every time Windows Explorer is launched
D At boot-up

Which of the following would be a valid reason to use a Windows workgroup?

A Lower initial cost
B Simplicity of single sign-on
C Centralized control
D Consistent permissions and rights

Which of the following is a characteristic of hash operations?

A Asymmetric
B Non-reversible
C Symmetric
D Variable length output

What is the discipline of establishing a known baseline and managing that condition known as?

A Condition deployment
B Observation discipline
C Security establishment
D Configuration management

Which of the following Linux commands can change both the username and group name a file belongs to?

A chown
B chgrp
C chmod
D newgrp

What is the function of the TTL (Time to Live) field in IPv4 and the Hop Limit field in IPv6 In an IP Packet header?

A These fields are decremented each time a packet is retransmitted to minimize the possibility of routing loops.
B These fields are initialized to an initial value to prevent packet fragmentation and fragmentation attacks.
C These fields are recalculated based on the required time for a packet to arrive at its destination.
D These fields are incremented each time a packet is transmitted to indicate the number of routers that an IP packet has traversed.

While using Wire shark to investigate complaints of users being unable to login to a web application, you come across an HTTP POST submitted through your web application. The contents of the POST are listed below. Based on what you see below, which of the following would you recommend to prevent future damage to your database?

Question Image

A Use ssh to prevent a denial of service attack
B Sanitize user inputs to prevent injection attacks
C Authenticate users to prevent hackers from using your database
D Use https to prevent hackers from inserting malware

Which of the following systems acts as a NAT device when utilizing VMware in NAT mode?

A Guest system
B Local gateway
C Host system
D Virtual system

Which of the following choices accurately describes how PGP works when encrypting email?

A PGP encrypts the message with the recipients public key, then encrypts this key with a random asymmetric key.
B PGP creates a random asymmetric key that it uses to encrypt the message, then encrypts this key with the recipient's public key
C PGP creates a random symmetric key that it uses to encrypt the message, then encrypts this key with the recipient's public key
D PGP encrypts the message with the recipients public key, then encrypts this key with a random symmetric key.

The previous system administrator at your company used to rely heavily on email lists, such as vendor lists and Bug Traq to get information about updates and patches. While a useful means of acquiring data, this requires time and effort to read through. In an effort to speed things up, you decide to switch to completely automated updates and patching. You set up your systems to automatically patch your production servers using a cron job and a scripted apt-get upgrade command. Of the following reasons, which explains why you may want to avoid this plan?

A The apt-get upgrade command doesn't work with the cron command because of incompatibility
B Relying on vendor and 3rd party email lists enables updates via email, for even faster patching
C Automated patching of production servers without prior testing may result in unexpected behavior or failures
D The command apt-get upgrade is incorrect, you need to run the apt-get update command

Why are false positives such a problem with IPS technology?

A File integrity is not guaranteed.
B Malicious code can get into the network.
C Legitimate services are not delivered.
D Rules are often misinterpreted.

What are the two actions the receiver of a PGP email message can perform that allows establishment of trust between sender and receiver?

A Decode the message by decrypting the asymmetric key with his private key, then using the asymmetric key to decrypt the message.
B Decode the message by decrypting the symmetric key with his private key, then using the symmetric key to decrypt the message.
C Decode the message by decrypting the symmetric key with his public key, then using the symmetric key to decrypt the message.
D Decrypt the message by encrypting the digital signature with his private key, then using the digital signature to decrypt the message.

Which of the following radio frequencies is used by the IEEE 802.11a wireless network?

A 3.7 GHz
B 7.0 GHz
C 2.4 GHz
D 5.0 GHz

Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 domain- based network. The network contains ten Windows 2003 member servers, 150 Windows XP Professional client computers. According to the company's security policy, Mark needs to check whether all the computers in the network have all available security updates and shared folders. He also needs to check the file system type on each computer's hard disk. Mark installs and runs MBSACLI.EXE with the appropriate switches on a server. Which of the following tasks will he accomplish?

A None of the tasks will be accomplished.
B He will be able to check the file system type on each computer's hard disk.
C He will be able to accomplish all the tasks.
D He will be able to check all available security updates and shared folders.

You work as a Network Administrator for Tech Perfect Inc. The company has a Linux-based network. You want to kill a process running on a Linux server. Which of the following commands will you use to know the process identification number (PID) of the process?

A killall
B ps
C getpid
D kill

Join Us Among the Stars

GSECPreview

About the GSEC Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25