You work as a Network Auditor for XYZ CORP. The company has a Windows-based network. You use DumpSec as an auditing and reporting program for security issues. Which of the following statements is…

The correct answer is A. It obtains the DACLs for the registry. B. It dumps user and group information. C. It collates the DACLs for the file system. DumpSec, a program launched by Somarsoft, is a security auditing and reporting program for Microsoft Windows. It collates and obtains the permissions (DACLs) and audit settings (SACLs) for the file system, registry, printers, and shares in a concise, readable format, so that…

Windows System Auditing

Question

You work as a Network Auditor for XYZ CORP. The company has a Windows-based network. You use DumpSec as an auditing and reporting program for security issues. Which of the following statements is true about DumpSec? (Choose three)

Options

AIt obtains the DACLs for the registry.
BIt dumps user and group information.
CIt collates the DACLs for the file system.
DIt kills the running services in the Windows environment.

How the community answered

(52 responses)

A
81% (42)
D
19% (10)

Explanation

DumpSec, a program launched by Somarsoft, is a security auditing and reporting program for Microsoft Windows. It collates and obtains the permissions (DACLs) and audit settings (SACLs) for the file system, registry, printers, and shares in a concise, readable format, so that holes in system security are readily apparent. DumpSec also dumps user, group, and replication information, policies, as well as services (Win32) and kernel drivers loaded on the system. It can also report the current status of services (running or stopped) in the Windows environment. Answer: D is incorrect. It cannot kill running services. It can only report the current status of services (running or stopped) in the Windows environment.

Topics

#DumpSec#DACL#Windows registry auditing#user enumeration

Community Discussion

No community discussion yet for this question.

Full GSNA Practice