GSNA Exam Questions
367 real GSNA exam questions with expert-verified answers and explanations. Page 2 of 8.
- Question #51Database & Application Auditing
You work as a Software Developer for Cinera Softwares Inc. You create a DHTML page that contains ten TextBox controls to get information from the users who use your application. Yo...
CSS positioningDHTMLbrowser resize eventweb development - Question #52Network & Perimeter Auditing
You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?
rogue access pointswireless securitysite surveysnetwork auditing - Question #53Linux/Unix System Auditing
You want to repeat the last command you entered in the bash shell. Which of the following commands will you use?
bash shellhistory commandcommand repetitionLinux CLI - Question #54Database & Application Auditing
You have been assigned a project to develop a Web site for a construction company. You have to develop a Web site and want to get more control over the appearance and presentation...
external style sheetCSSweb designstyle consistency - Question #55Windows System Auditing
Which of the following can be the countermeasures to prevent NetBIOS NULL session enumeration in Windows 2000 operating systems?
NetBIOS null sessionSMB securityWindows 2000enumeration prevention - Question #56Database & Application Auditing
From an auditing perspective, database security can be broken down into four key categories: Server Security Database Connections Table Access Control Restricting Database Access W...
database securityserver securityaccess controldatabase auditing - Question #57Audit Fundamentals & Planning
John works as a Network Auditor for XYZ CORP. The company has a Windows-based network. John wants to conduct risk analysis for the company. Which of the following can be the purpos...
risk analysisthreat identificationaudit planningdecision-making - Question #58Database & Application Auditing
Which of the following methods is used to get a cookie from a client? Note: Here, request is a reference of type HttpServletRequest, and response is a reference of type HttpServlet...
HTTP cookiesHttpServletRequestJava servletweb application - Question #59Audit Fundamentals & Planning
You work as a Software Developer for UcTech Inc. You build an online book shop, so that users can purchase books using their credit cards. You want to ensure that only the administ...
confidentialityaccess controlsecurity mechanismsdata protection - Question #60Network & Perimeter Auditing
Which of the following is an enterprise-grade network/application/performance monitoring platform that tightly integrates with other smart building management systems, such as phys...
network monitoringAggregate Network Managerbuilding management integrationenterprise monitoring - Question #61Windows System Auditing
Sam works as a Network Administrator for Blue Well Inc. All client computers in the company run the Windows Vista operating. Sam creates a new user account. He wants to create a te...
Windows Vistapassword policyforced password changeuser account management - Question #62Database & Application Auditing
You work as a Web Developer for XYZ CORP. The company has a Windows-based network. You have been assigned the task to secure the website of the company. To accomplish the task, you...
website monitoringSSL certificate expirydomain expiryweb security - Question #63Audit Fundamentals & Planning
Which of the following statements is true about residual risks?
residual riskrisk managementsecurity controlsrisk assessment - Question #64Network & Perimeter Auditing
Which of the following tools is a Windows-based commercial wireless LAN analyzer for IEEE 802.11b and supports all high level protocols such as TCP/IP, NetBEUI, and IPX?
wireless LAN analyzerIEEE 802.11bAiroPeeknetwork tools - Question #65Network & Perimeter Auditing
Which of the following statements are true about SSIDs?
SSIDwireless networkWAP configurationWLAN - Question #66Windows System Auditing
Which of the following statements is NOT true about FAT16 file system?
FAT16file systemWindows file systemsdisk management - Question #67Linux/Unix System Auditing
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux- based network. John is working as a root user on the Linux operating system. He has a data...
expand commandTAB charactersLinux text processingshell commands - Question #68Network & Perimeter Auditing
You are concerned about possible hackers doing penetration testing on your network as a prelude to an attack. What would be most helpful to you in finding out if this is occurring?
firewall logspenetration testing detectionnetwork monitoringintrusion indicators - Question #69Network & Perimeter Auditing
Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 Active Directory domain-based network. The domain consists of a domain controller, two Windows...
PEAPEAP-TLSwireless authenticationWEP weakness - Question #70Network & Perimeter Auditing
You have to ensure that your Cisco Router is only accessible via telnet and ssh from the following hosts and subnets: 10.10.2.103 10.10.0.0/24 Which of the following sets of comman...
access control listsCisco routertelnet restrictionSSH access control - Question #71Audit Fundamentals & Planning
Which of the following is a prevention-driven activity to reduce errors in the project and to help the project meet its requirements?
quality assuranceaudit planningerror preventionproject requirements - Question #72Network & Perimeter Auditing
You are concerned about attackers simply passing by your office, discovering your wireless network, and getting into your network via the wireless connection. Which of the followin...
wireless security hardeningWEPWPAMAC filtering - Question #73Linux/Unix System Auditing
Which of the following key combinations in the vi editor is used to copy the current line?
vi editorcopy commandLinux text editorkeyboard shortcuts - Question #74Database & Application Auditing
Data mining is a process of sorting through data to identify patterns and establish relationships. Which of the following data mining parameters looks for patterns where one event...
data miningassociation analysispattern recognitionevent correlation - Question #75Audit Fundamentals & Planning
In which of the following social engineering attacks does an attacker first damage any part of the target's equipment and then advertise himself as an authorized person who can hel...
social engineeringreverse social engineeringimpersonationattack techniques - Question #76Linux/Unix System Auditing
Which of the following commands can be used to find out where commands are located?
type commandwhich commandLinux commandscommand location - Question #77Audit Fundamentals & Planning
Which of the following applications work as mass-emailing worms? (Choose two)
malwareemail wormsI LOVE YOUNimda - Question #78Linux/Unix System Auditing
Which of the following text editing tools can be used to edit text files without having to open them?
sedstream editorLinux text editingnon-interactive editing - Question #79Database & Application Auditing
You work as a Software Developer for UcTech Inc. You want to ensure that a class is informed whenever an attribute is added, removed, or replaced in a session. Which of the followi...
HttpSessionBindingEventJava web applicationsession managementevent handling - Question #80Network & Perimeter Auditing
Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs). It has two components, authentication and encryption. It provides security equivalen...
WEPRC4 encryptioninitialization vectorwireless security weaknesses - Question #81Network & Perimeter Auditing
Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for networ...
Nmapnetwork scanningport scanningrogue access point detection - Question #82Windows System Auditing
You work as a Network Auditor for XYZ CORP. The company has a Windows-based network. You use DumpSec as an auditing and reporting program for security issues. Which of the followin...
DumpSecDACLWindows registry auditinguser enumeration - Question #83Network & Perimeter Auditing
You work as a Network Administrator for Tech Perfect Inc. You need to configure the company firewall so that only Simple Network Management Protocol (SNMP) and Secure HTTP (HTTPS)...
firewall rule orderingHTTPSSNMPinput chain policy - Question #84Network & Perimeter Auditing
You work as a Network Administrator for XYZ CORP. The company has a Windows-based network. You want to configure the ACL with a Cisco router. Which of the following router prompts...
ACL configurationCisco routerextended NACLrouter prompts - Question #85Audit Fundamentals & Planning
Audit trail or audit log is a chronological sequence of audit records, each of which contains evidence directly pertaining to and resulting from the execution of a business process...
audit trailaudit logdetective controlscontrol types - Question #86Windows System Auditing
Which of the following does an anti-virus program update regularly from its manufacturer's Web site?
antivirusvirus definitionssignature updatesmalware protection - Question #87Windows System Auditing
Which of the following are the drawbacks of the NTLM Web authentication scheme?
NTLM authenticationweb authenticationbrowser compatibilitybrute force - Question #88Network & Perimeter Auditing
Which of the following tools uses Internet Control Message Protocol (ICMP)?
ICMPping scannernetwork toolsprotocol mapping - Question #89Database & Application Auditing
Which of the following statements about invalidating a session is true?
session managementHttpSessionsession invalidationweb application security - Question #90Linux/Unix System Auditing
You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to impose some special access restrictions on users. Which of the following Unix...
Unix access restrictions/etc/userttyuser managementUnix configuration files - Question #91Network & Perimeter Auditing
You work as a Network Administrator for XYZ CORP. The company has a Windows-based network. You want to use multiple security countermeasures to protect the integrity of the informa...
defense in depthlayered securityfirewallintrusion detection - Question #92Database & Application Auditing
Samantha works as a Web Developer for XYZ CORP. She is designing a Web site for the company. In a Web page, she uses the HTTP-EQUIV attribute to control the page cache. Which of th...
HTTP-EQUIVpragmabrowser cache controlweb headers - Question #93Network & Perimeter Auditing
Which of the following are the reasons for implementing firewall in any network?
firewall purposechoke pointsecurity policy enforcementnetwork access control - Question #94Network & Perimeter Auditing
Which of the following aaa accounting commands should be used to enable logging of both the start and stop records for user terminal sessions on the router?
AAA accountingTACACS+Cisco IOSexec session logging - Question #95Linux/Unix System Auditing
Which of the following commands can be used to intercept and log the Linux kernel messages?
klogdsysklogdkernel loggingLinux system logs - Question #96Network & Perimeter Auditing
You work as a Security Administrator in Tech Perfect Inc. The company has a TCP/IP based network. The network has a vast majority of Cisco Systems routers and Cisco network switche...
VRF-aware firewallVPN routingCisco IOSvirtual routing and forwarding - Question #97Network & Perimeter Auditing
In which of the following scanning techniques does a scanner connect to an FTP server and request that server to start data transfer to the third system?
FTP bounce attackport scanning techniquesTCP scanningnetwork enumeration - Question #98Network & Perimeter Auditing
In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can h...
DNS zone transferDNS enumerationdignslookup - Question #99Audit Fundamentals & Planning
Which of the following statements are true about security risks? (Choose three)
risk analysisrisk mitigationthreat and vulnerabilitysecurity risk concepts - Question #100Network & Perimeter Auditing
Which of the following statements about packet filtering is true?
packet filteringfirewall fundamentalstraffic controlnetwork security