GSNA Exam Questions
367 real GSNA exam questions with expert-verified answers and explanations. Page 4 of 8.
- Question #151Network & Perimeter Auditing
You are tasked with configuring your routers with a minimum security standard that includes the following: A local Username and Password configured on the router A strong privilege...
router hardeningpassword encryptionprivilege modeSSH Telnet authentication - Question #152Network & Perimeter Auditing
This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. The main features of these tools are as follows...
NetStumblerwireless LAN detectionwar driving802.11 tools - Question #153Database & Application Auditing
Data access auditing is a surveillance mechanism that watches over access to all sensitive information contained within the database. What are the questions addressed in a perfect...
data access auditingSQL query loggingdatabase surveillanceaudit accountability - Question #154Audit Fundamentals & Planning
In 1947, the American Institute of Certified Public Accountants (AICPA) adopted GAAS to establish standards for audits. Which of the following categories of audit standards establi...
GAASAICPAgeneral standardsauditor competence - Question #155Network & Perimeter Auditing
Mark is an attacker. He wants to discover wireless LANs by listening to beacons or sending probe requests and thereby provide a launch point for further attacks. Which of the follo...
wireless discovery toolswar drivingbeacon probingWLAN reconnaissance - Question #156Network & Perimeter Auditing
Which of the following standards is used in wireless local area networks (WLANs)?
IEEE 802.11bWLAN standardswireless networkingIEEE 802 - Question #157Windows System Auditing
You are responsible for a number of Windows Server 2003 DNS servers on a large corporate network. You have decided to audit the DNS server logs. Which of the following are likely e...
DNS server logsTCP socket errorsWindows Server 2003DNS auditing - Question #158
John works as a professional Ethical Hacker. He has been assigned the project of testing the attacks. As a countermeasure, he suggests that the Network Administrator should remove...
- Question #159Linux/Unix System Auditing
Which of the following commands is most useful for viewing large files?
less commandfile viewingLinux CLIlarge file handling - Question #160Audit Fundamentals & Planning
Which of the following is an attempt to give false information or to deny that a real event or transaction should have occurred?
repudiation attacknon-repudiationsecurity attack typesinformation assurance - Question #161Network & Perimeter Auditing
Which of the following types of attack is described in the statement below? "It is a technique employed to compromise the security of network switches. In this attack, a switch is...
MAC floodingCAM table overflowswitch securitynetwork attacks - Question #162Network & Perimeter Auditing
Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?
network mappingIP enumerationbanner grabbingsecurity reconnaissance - Question #163Audit Fundamentals & Planning
Which of the following methods can be helpful to eliminate social engineering threat? (Choose three)
social engineeringdata classificationpassword policiessecurity awareness - Question #164Windows System Auditing
You work as a Network Administrator for Net World International. The company has a Windows Active Directory-based single domain single forest network. The functional level of the f...
WEPshared key authenticationwireless securityWindows XP wireless - Question #165Network & Perimeter Auditing
Which of the following tools hides information about IIS Webservers so that they can be prevented from various attacks performed by an attacker?
IIS hardeningserver banner maskingweb server fingerprintingServerMask - Question #166Database & Application Auditing
Sarah works as a Web Developer for XYZ CORP. She develops a Web site for the company. She uses tables in the Web site. Sarah embeds three tables within a table. What is the techniq...
HTML tablesnested tablesweb developmenttable layout - Question #167Linux/Unix System Auditing
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux- based network. John is working as a root user on the Linux operating system. He has recent...
split commandLinux file managementbackup operationsLinux utilities - Question #168Windows System Auditing
Which of the following statements are true about the Enum tool?
Enum toolWindows enumerationNULL sessionsbrute force - Question #169Audit Fundamentals & Planning
Which of the following processes is described in the statement below? "This is the process of numerically analyzing the effect of identified risks on overall project objectives."
quantitative risk analysisrisk assessmentproject risk managementnumerical analysis - Question #170Network & Perimeter Auditing
Which of the following statements are true about MS-CHAPv2?
MS-CHAPv2PPTP authenticationEAP-TLSdictionary attacks - Question #171Database & Application Auditing
You work as a Software Developer for XYZ CORP. You create a SQL server database named DATA1 that will manage the payroll system of the company. DATA1 contains two tables named Empl...
SQL constraintsdata integrityprimary keydatabase design - Question #172Database & Application Auditing
Which of the following listeners need not be configured in the deployment descriptor? (Choose two)
HttpSession listenersdeployment descriptorJava servletsession management - Question #173Database & Application Auditing
You work as a Database Administrator for BigApple Inc. The Company uses Oracle as its database. You enabled standard database auditing. Later, you noticed that it has a huge impact...
Oracle auditingaudit data managementdatabase performanceaudit record filtering - Question #174Database & Application Auditing
Which of the following functions are performed by methods of the HttpSessionActivationListener interface?
HttpSessionActivationListenerJVM migrationJava servletsession lifecycle - Question #175Database & Application Auditing
You work as a Software Developer for UcTech Inc. You want to encode a URL, so that it can be used with the sendRedirect() method to send the response to the client. In order to acc...
sendRedirectURL encodingHttpServletResponseJava servlet - Question #176Network & Perimeter Auditing
Which of the following protocols is the mandatory part of the WPA2 standard in the wireless networking?
WPA2CCMPwireless encryption802.11i - Question #177Network & Perimeter Auditing
Every network device contains a unique built in Media Access Control (MAC) address, which is used to identify the authentic device to limit the network access. Which of the followi...
MAC addressnetwork addressingdevice identificationaddress format - Question #178Database & Application Auditing
In which of the following does a Web site store information such as user preferences to provide customized services to users?
cookiesweb storageuser preferencessession tracking - Question #179Windows System Auditing
Which of the following tools can be used to perform tasks such as Windows password cracking, Windows enumeration, and VoIP session sniffing?
Cain toolpassword crackingWindows enumerationVoIP sniffing - Question #180Linux/Unix System Auditing
You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to set the hard disk geometry parameters, cylinders, heads, and sectors. Which of...
hdparmdisk geometryUnix commandsstorage management - Question #181Database & Application Auditing
Which of the following statements about URL rewriting are true?
URL rewritingsession trackingencodeURLcookie fallback - Question #182Network & Perimeter Auditing
The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. W...
LEAP protocolwireless authenticationdynamic key encryptionpassword hash - Question #183Database & Application Auditing
Which of the following statements is true about COLSPAN attribute?
HTML COLSPANtable attributesweb developmenttable spanning - Question #184Audit Fundamentals & Planning
You are the project manager of a Web development project. You want to get information about your competitors by hacking into their computers. You and the project team determine sho...
risk transferencerisk response strategiesproject risk managementoutsourcing risk - Question #185Network & Perimeter Auditing
Which of the following is a type of web site monitoring that is done using web browser emulation or scripted real web browsers?
synthetic monitoringweb monitoringbrowser emulationnetwork monitoring - Question #186Windows System Auditing
Which of the following is the best way to authenticate users on the intranet?
NT authenticationintranet securityWindows authenticationaccess control - Question #187Network & Perimeter Auditing
In a network, a data packet is received by a router for transmitting it to another network. For forwarding the packet to the other available networks, the router is configured with...
static routingrouting protocolsbandwidth managementnetwork routing - Question #188Linux/Unix System Auditing
John works as a Network Administrator for Perfect Solutions Inc. The company has a Debian Linux-based network. He is working on the bash shell in which he creates a variable VAR1....
export commandenvironment variablesbash shellLinux administration - Question #189Linux/Unix System Auditing
You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to query an image root device and RAM disk size. Which of the following Unix comm...
rdev commandkernel configurationUnix commandsdisk management - Question #190Database & Application Auditing
Which of the following are the methods of the HttpSession interface? (Choose three)
HttpSession interfacesession managementJava web APIweb application - Question #191Linux/Unix System Auditing
You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to allow direct access to the filesystems data structure. Which of the following...
debugfsfilesystem internalsUnix commandsext filesystem - Question #192Network & Perimeter Auditing
The employees of EWS Inc. require remote access to the company's Web servers. In order to provide solid wireless security, the company uses EAP-TLS as the authentication protocol....
EAP-TLSwireless securityPKIcertificate authentication - Question #193Network & Perimeter Auditing
Which of the following tools combines two programs, and also encrypts the resulting package in an attempt to foil antivirus programs?
trojan packagingmalware obfuscationantivirus evasionTrojan Man - Question #194Linux/Unix System Auditing
What will be the output of the following command? echo $(date %M) > date.txt
bash scriptingdate commandcommand substitutionshell output redirection - Question #195Windows System Auditing
You work as a professional Ethical Hacker. You are assigned a project to test the security of You suspect that your friend has installed the keyghost keylogger onto your computer....
keylogger countermeasuresanti-keyloggeron-screen keyboardprocess monitoring - Question #196Windows System Auditing
Andrew works as a Network Administrator for Infonet Inc. The company has a Windows 2003 domain-based network. The network has five Windows 2003 member servers and 150 Windows XP Pr...
IIS IP packet filteringport filteringweb server securitydual-homed server - Question #197Audit Fundamentals & Planning
Which of the following internal control components provides the foundation for the other components and encompasses such factors as management's philosophy and operating style?
COSO frameworkcontrol environmentinternal controlsaudit framework - Question #198Network & Perimeter Auditing
John works as a professional Ethical Hacker. He has been assigned the project of testing the The description of the tool is as follows: Which of the following tools is John using t...
AirSnortWEP crackingwireless encryptionwireless auditing tools - Question #199Network & Perimeter Auditing
You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP based switched network. A root bridge has been elected in the switched network. You have installe...
spanning tree protocolroot bridge electionbridge IDSTP convergence - Question #200Database & Application Auditing
Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?
code injectionweb attacksapplication vulnerabilityinjection attack types