Pass the GIAC Management GSLC Questions and answers with ExamsMirror

Which of the following is used to detect malicious activity such as port scans or even attempts for cracking into computers by monitoring network traffic?

Which of the following statements about Digest authentication are true?

Each correct answer represents a complete solution. Choose two.

Which of the following is a method of defeating a cryptographic scheme by trying a large number of possibilities?

Which of the following are the types of access controls?

Each correct answer represents a complete solution. Choose three.

In which of the following does an attacker use multiple computers throughout the network that has been previously infected?

Which of the following terms refers to a prolonged loss of power?

Which of the following is the best encryption algorithm to encrypt and decrypt messages?

Which of the following is the practice of a domain name registrant using the five-day "grace period" (the Add Grace Period or AGP) at the beginning of the registration of an ICANN-regulated second-level domain to test the marketability of the domain?

Which of the following is not a man-made threat?

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is as follows:

C:\whisker.pl -h target_IP_address

-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =

= Host: target_IP_address

= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1

mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22

+ 200 OK: HEAD /cgi-bin/printenv

John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server. Which of the following statements about 'Printenv' vulnerability are true?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following programs collects email addresses of users and creates a mailing list?

Which field is NOT defined while creating rules for the Network Honeypot rulebase?

Which of the following is used to provide the service of exchanging data directly between two hosts on the same network?

Which of the following tools hides information about IIS Webservers so that they can be prevented from various attacks performed by an attacker?

Which of the following protocols are used to provide secure communication between a client and a server over the Internet?

Each correct answer represents a part of the solution. Choose two.