GSNA Exam Questions
367 real GSNA exam questions with expert-verified answers and explanations. Page 3 of 8.
- Question #101Database & Application Auditing
Mark works as a Web Designer for XYZ CORP. The company has a Windows-based network. Mark creates an HTML document that gives the following error on execution: "These hypertext syst...
HTML limitationshypertext featuresfat linktyped link - Question #102Database & Application Auditing
Which of the following statements about data integrity of a container are true? (Choose two)
data integrityHTTP transit securitymessage tamperingcontainer security - Question #103Network & Perimeter Auditing
What does a firewall check to prevent certain ports and applications from getting the packets into an Enterprise?
firewall inspectiontransport layerapplication layer headersport filtering - Question #104Network & Perimeter Auditing
You work as a Network Administrator for XYZ CORP. The company's Windows 2000 network is configured with Internet Security and Acceleration (ISA) Server 2000. ISA Server is configur...
ISA Serverpacket filteringHTTPSport 443 - Question #105Database & Application Auditing
You work as a Database Administrator for Dolliver Inc. The company uses Oracle 11g as its database. You have used the LogMiner feature for auditing purposes. Which of the following...
Oracle LogMinerdata dictionaryredo log filesdatabase auditing - Question #106Audit Fundamentals & Planning
Which of the following policies helps reduce the potential damage from the actions of one person?
separation of dutiesinternal controlsrisk reductionaccess policy - Question #107Database & Application Auditing
Web mining allows a user to look for patterns in data through content mining, structure mining, and usage mining. What is the function of structure mining?
web miningstructure miningweb analysisdata patterns - Question #108Network & Perimeter Auditing
John works as a professional Ethical Hacker. He has been assigned a project to test the security local disk and obtains all the files on the Web site. Which of the following techni...
web rippingreconnaissanceweb content copyingethical hacking - Question #109Network & Perimeter Auditing
Which of the following records is the first entry in a DNS database file?
DNSSOA recordDNS database structurezone file - Question #110Linux/Unix System Auditing
Which of the following statements about the /etc/profile file are true?
/etc/profileumasksystem-wide variablesLinux shell config - Question #111Database & Application Auditing
Which of the following are attributes of the <TABLE> tag? (Choose three)
HTML TABLE tagweb markup attributesapplication structureweb development - Question #112Linux/Unix System Auditing
You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to make changes on a per-directory basis. Which of the following Unix configurati...
.htaccessper-directory configurationUnix web serveraccess control - Question #113Audit Fundamentals & Planning
Which of the following types of audit constructs a risk profile for existing and new projects?
technology audit typesrisk profileinnovation process auditIT audit planning - Question #114Audit Fundamentals & Planning
Pervasive IS controls can be used across all the internal departments and external contractors to define the direction and behavior required for the technology to function properly...
pervasive IS controlsIT governancesoftware development controlsdisaster recovery - Question #115Network & Perimeter Auditing
With reference to the given case study, one of the security goals requires to configure a secure connection between the Boston distribution center and the headquarters. You want to...
IP packet filtersL2TP VPNIPSecsite-to-site connectivity - Question #116Database & Application Auditing
Which of the following are the limitations for the cross site request forgery (CSRF) attack?
CSRFcross-site request forgeryreferrer headerweb attack limitations - Question #117Network & Perimeter Auditing
John works as a professional Ethical Hacker. He has been assigned a project to test the security server. Now, he suggests some countermeasures to avoid such brute force attacks on...
brute force attackCAPTCHAlogin attempt limitsauthentication hardening - Question #118Network & Perimeter Auditing
Which of the following types of firewall ensures that the packets are part of the established session?
stateful inspection firewallsession trackingfirewall typespacket filtering - Question #119Network & Perimeter Auditing
One of the sales people in your company complains that sometimes he gets a lot of unsolicited messages on his PD A. After asking a few questions, you determine that the issue only...
bluejackingBluetooth securitywireless attacksunsolicited messaging - Question #120Network & Perimeter Auditing
Which of the following is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers,...
wardialingmodem scanningtelephone reconnaissancelegacy attack techniques - Question #121Network & Perimeter Auditing
You work as a Security manager for Qualoxizz Inc. Your company has number of network switches in the site network infrastructure. Which of the following actions will you perform to...
switch hardeningdefault credentialsnetwork infrastructure securitymanagement ports - Question #122Windows System Auditing
You are the Network Admin for a company. You are concerned about users having access to items they should not. Your concern is that they may inadvertently have been granted access...
user access reviewgroup membershipprivilege managementunintended access - Question #123Network & Perimeter Auditing
Brutus is a password cracking tool that can be used to crack the following authentications: HTTP (Basic Authentication) HTTP (HTML Form/CGI) POP3 (Post Office Protocol v3) FTP (Fil...
Brutus toolpassword crackingdictionary attackhybrid attack - Question #124Network & Perimeter Auditing
John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the c...
steganographydata exfiltrationinsider threatcovert channel - Question #125Audit Fundamentals & Planning
Which of the following backup sites takes the longest recovery time?
cold sitebackup sitesrecovery timebusiness continuity - Question #126Network & Perimeter Auditing
Many organizations create network maps of their network system to visualize the network and understand the relationship between the end devices and the transport layer that provide...
network mappingroute analyticsSNMPactive probing - Question #127Database & Application Auditing
You have been assigned a project to develop a Web site for a construction company. You plan to develop a Web site and want to get more control over the appearance and presentation...
CSSembedded style sheetweb developmentstyle scope - Question #128Network & Perimeter Auditing
You want to monitor the network infrastructure of a software-based company. The network infrastructure of the company consists of the following: Windows TCP/IP services Web and mai...
network monitoringmonitoring toolsinfrastructure visibilityAxence nVision - Question #129Network & Perimeter Auditing
You work as a Network Administrator for Techpearl Inc. You are configuring the rules for the firewall of the company. You need to allow internal users to access secure external web...
firewall rulesHTTPSport 443access control - Question #130Database & Application Auditing
Which of the following statements is true about the Digest Authentication scheme?
digest authenticationHTTP authenticationchecksumcredential handling - Question #131Network & Perimeter Auditing
You have detected what appears to be an unauthorized wireless access point on your network. However this access point has the same MAC address as one of your real access points and...
evil twin attackrogue access pointMAC spoofingwireless security - Question #132Database & Application Auditing
You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following method...
XSS investigationweb server logsforensic analysiscross-site scripting - Question #133Linux/Unix System Auditing
Which of the following commands will you use to watch a log file /var/adm/messages while the log file is updating continuously?
tail -flog monitoringLinux commandslog file - Question #134Linux/Unix System Auditing
Mark works as the Network Administrator for XYZ CORP. The company has a Unix-based network. Mark wants to scan one of the Unix systems to detect security vulnerabilities. To accomp...
TARA scannervulnerability scanningUnix securitysecurity tools - Question #135Database & Application Auditing
Mark works as a Web Developer for XYZ CORP. He is developing a Web site for the company. The Manager of the company requires Mark to use tables instead of frames in the Web site. W...
HTML tablesframesbookmarkingweb design - Question #136Database & Application Auditing
Samantha works as a Web Developer for XYZ CORP. She develops a Web application using Visual InterDev. She wants to group a series of HTML elements together so that an action can be...
DIV tagHTML groupingweb developmentelement layout - Question #137Network & Perimeter Auditing
Which of the following are the disadvantages of Dual-Homed Host Firewall Architecture?
dual-homed hostfirewall architectureproxy servicesbastion host - Question #138Audit Fundamentals & Planning
What are the purposes of audit records on an information system? (Choose two)
audit recordsaudit logsinvestigationtroubleshooting - Question #139Network & Perimeter Auditing
Which of the following statements are true about WPA?
WPAWPA-PSKwireless securitypassphrase strength - Question #140Linux/Unix System Auditing
You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to do RARP mapping from hardware mapping addresses to IP addresses. Which of the...
RARP/etc/ethersUnix configuration fileshardware address mapping - Question #141Network & Perimeter Auditing
You work as a Security Administrator in Tech Perfect Inc. The company has a TCP/IP based network. The network has a vast majority of Cisco Systems routers and Cisco network switche...
Cisco routerboot configurationrunning config archivalimage resilience - Question #142Linux/Unix System Auditing
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux- based network. John is working as a root user on the Linux operating system. He executes t...
Linux root userUIDenvironment variablesshell output - Question #143Network & Perimeter Auditing
You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless network. To provide security, you are configuring ISA Server 2006 as a firewall. Wh...
ISA Server 2006firewall configurationwireless securityVPN access - Question #144Windows System Auditing
You work as the Network Administrator for a company. You configure a Windows 2000-based computer as the Routing and Remote Access server, so that users can access the company's net...
RRASauthentication loggingremote accessWindows 2000 - Question #145Database & Application Auditing
What is the extension of a Cascading Style Sheet?
CSSfile extensionsweb standardsHTML - Question #146Linux/Unix System Auditing
Which of the following is a basic feature of the Unix operating system? (Choose three)
Unix fundamentalsfile permissionsportabilitymultitasking - Question #147Audit Fundamentals & Planning
Which of the following statements are true about a hot site?
hot sitedisaster recoverybusiness continuitybackup sites - Question #148Windows System Auditing
You have purchased a laptop that runs Windows Vista Home Premium. You want to protect your computer from malicious applications, such as spyware, while connecting to the Internet....
Windows Defenderdefinition updatesscheduled scanningspyware protection - Question #149Database & Application Auditing
Which of the following tags will create two vertical frames, as given in the image below, where the left frame is half as wide as the right one?
HTML framesFRAMESETcolumn layoutweb markup - Question #150Network & Perimeter Auditing
You work as a Network Administrator for XYZ CORP. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems. You us...
Nessusvulnerability scanningmisconfigurationremote exploit