[Free] 2017(Sep) CollectDumps Dumpsleader GIAC GSNA Dumps with VCE and PDF 1-10

CollectDumps 2017 Sep GIAC Official New Released GSNA
100% Free Download! 100% Pass Guaranteed!
http://www.CollectDumps.com/GSNA.html

GIAC Systems and Network Auditor

Question No: 1 – (Topic 1)

Sarah works as a Web Developer for XYZ CORP. She is creating a Web site for her company. Sarah wants greater control over the appearance and presentation of Web pages. She wants the ability to precisely specify the display attributes and the appearance of elements on the Web pages. How will she accomplish this?

  1. Use the Database Design wizard.

  2. Make two templates, one for the index page and the other for all other pages.

  3. Use Cascading Style Sheet (CSS).

  4. Make a template and use it to create each Web page.

Answer: C

Explanation: Sarah should use the Cascading Style Sheet (CSS) while creating Web pages. This will give her greater control over the appearance and presentation of the Web pages and will also enable her to precisely specify the display attributes and the appearance of elements on the Web pages.

Question No: 2 – (Topic 1)

You work as a Network Administrator for XYZ CORP. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory- based single forest single domain network. You have installed a Windows Server 2008 computer. You have configured auditing on this server. The client computers of the company use the Windows XP Professional operating system. You want to audit each event that is related to a user managing an account in the user database on the computer where the auditing is configured. To accomplish the task, you have enabled the Audit account management option on the server. Which of the following events can be audited by enabling this audit option?

  1. Access to an Active Directory object

  2. Change of password for a user account

  3. Addition of a user account to a group

  4. Creation of a user account

Answer: B,C,D

Explanation: Audit account management is one of the nine audit settings that can be configured on a Windows computer. This option is enabled to audit each event that is related to a user managing an account in the user database on the computer where the auditing is configured. These events include the following: Creating a user account Adding a user account to a group Renaming a user account Changing password for a user account This option is also used to audit the changes to the domain account of the domain controllers.

Question No: 3 – (Topic 1)

John works as a contract Ethical Hacker. He has recently got a project to do security checking for www.we-are-secure.com. He wants to find out the operating system of the we- are-secure server in the information gathering step. Which of the following commands will he use to accomplish the task? (Choose two)

A. nc 208.100.2.25 23

B. nmap -v -O www.we-are-secure.com

C. nc -v -n 208.100.2.25 80

D. nmap -v -O 208.100.2.25

Answer: B,D

Explanation: According to the scenario, John will use quot;nmap -v -O 208.100.2.25quot; to detect the operating system of the we-are-secure server. Here, -v is used for verbose and -O is used for TCP/IP fingerprinting to guess the remote operating system. John may also use the DNS name of we-are-secure instead of using the IP address of the we-are-secure server. So, he can also use the nmap command quot;nmap -v -O www.we-are-secure.com quot;.

Answer: C is incorrect. quot;nc -v -n 208.100.2.25 80quot; is a Netcat command, which is used to banner grab for getting information about the

Question No: 4 – (Topic 1)

You check performance logs and note that there has been a recent dramatic increase in the amount of broadcast traffic. What is this most likely to be an indicator of?

  1. Misconfigured router

  2. DoS attack

  3. Syn flood

  4. Virus

Answer: B

Explanation: There are several denial of service (DoS) attacks that specifically use broadcast traffic to flood a targeted computer. Seeing an unexplained spike in broadcast traffic could be an indicator of an attempted denial of service attack. Answer: D is incorrect. Viruses can cause an increase in network traffic, and it is possible for that to be broadcast traffic. However, a DoS attack is more likely than a virus to cause this particular problem.

Answer: C is incorrect. A syn flood does not cause increased broadcast traffic. Answer: A is incorrect. A misconfigured router could possibly cause an increase in broadcast traffic.

However, this a recent problem, the router is unlikely to be the issue.

Question No: 5 – (Topic 1)

You run the wc -c file1.txt command. If this command displays any error message, you want to store the error message in the error.txt file. Which of the following commands will you use to accomplish the task?

  1. wc -c file1.txt gt;gt;error.txt

  2. wc -c file1.txt 1gt;error.txt

  3. wc -c file1.txt 2gt;error.txt

  4. wc -c file1.txt gt;error.txt

Answer: C

Explanation: According to the scenario, you will use the wc -c file1.txt 2gt;error.txt command to accomplish the task. The 2gt; operator is an error redirector, which, while running a command, redirects the error (if it exists) on the specified file. Answer: B, D are incorrect. The gt; or 1gt; redirector can be used to redirect the output of the wc -c file1.txt file to the error.txt file; however, you want to write the errors in the error.txt file, not the whole output. Answer: A is incorrect. The gt;gt; operator will redirect the output of the command in the same manner as the gt; or 1gt; operator. Although the gt;gt; operator will not overwrite the error.txt file, it will append the error.txt file.

Question No: 6 – (Topic 1)

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He wants to forward all the kernel messages to the remote host having IP address 192.168.0.1. Which of the following changes will he perform in the syslog.conf file to accomplish the task?

A. kern.* @192.168.0.1

B. !*.* @192.168.0.1

C. !kern.* @192.168.0.1

D. *.* @192.168.0.1

Answer: A

Explanation: According to the scenario, John will make the following entry in the syslog.conf file to forward all the kernel messages to the remote host having IP address 192.168.0.1: kern.* @192.168.0.1 Answer: D is incorrect. This entry will forward all the messages to the remote host having IP address 192.168.0.1. Answer: B is incorrect. This entry will not forward any message to the remote host having IP address 192.168.0.1.

Answer: C is incorrect. This entry will not forward any kernel message to the remote host having IP address 192.168.0.1.

Question No: 7 – (Topic 1)

John works as a Security Professional. He is assigned a project to test the security of www.we-are-secure.com. John wants to get the information of all network connections and listening ports in the numerical form. Which of the following commands will he use?

  1. netstat -e

  2. netstat -r

  3. netstat -s

  4. netstat -an

Answer: D

Explanation: According to the scenario, John will use the netstat -an command to accomplish the task. The netstat -an command is used to get the information of all network connections and listening ports in the numerical form. The netstat command displays protocol-related statistics and the state of current TCP/IP connections. It is used to get

information about the open connections on a computer, incoming and outgoing data, as well as the ports of remote computers to which the computer is connected. The netstat command gets all this networking information by reading the kernel routing tables in the memory. Answer: A is incorrect. The netstat -e command displays the Ethernet information. Answer: B is incorrect. The netstat -r command displays the routing table information.

Answer: C is incorrect. The netstat -s command displays per-protocol statistics. By default, statistics are shown for TCP, UDP and IP.

Question No: 8 – (Topic 1)

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He wants to use Kismet as a wireless sniffer to sniff the We-are-secure network. Which of the following IEEE-based traffic can be sniffed with Kismet?

A. 802.11g B. 802.11n C. 802.11b D. 802.11a

Answer: A,B,C,D

Explanation: Kismet can sniff IEEE 802.11a, 802.11b, 802.11g, and 802.11n-based wireless network traffic.

Question No: 9 – (Topic 1)

Which of the following statements about the traceroute utility are true?

  1. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of each gateway along the route to the remote host.

  2. It records the time taken for a round trip for each packet at each router.

  3. It is an online tool that performs polymorphic shell code attacks.

  4. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell code cannot be recognized by any Intrusion Detection Systems.

Answer: A,B

Explanation: Traceroute is a route-tracing utility that displays the path an IP packet takes to reach its destination. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of each gateway along the route to the remote host. This tool also records the time taken for a round trip for each packet at each router that can be used to find any faulty router along the path. Answer: C, D are incorrect. Traceroute does not perform polymorphic shell code attacks. Attacking tools such as ADMutate areused to perform polymorphic shell code attacks.

Question No: 10 – (Topic 1)

George works as an office assistant in Soft Well Inc. The company uses the Windows Vista operating system. He wants to disable a program running on a computer. Which of the following Windows Defender tools will he use to accomplish the task?

  1. Allowed items

  2. Quarantined items

  3. Options

  4. Software Explorer

Answer: D Explanation:

Software Explorer is used to remove, enable, or disable a program running on a computer. Answer: A is incorrect. Allowed items contains a list of all the programs that a user has chosen not to monitor with Windows Defender. Answer: C is incorrect. Options is used to choose how Windows Defender should monitor all the programs running on a computer.

Answer: B is incorrect. Quarantined items is used to remove or restore a program blocked by Windows Defender.

100% Free Download!
Download Free Demo:GSNA Demo PDF
100% Pass Guaranteed!
Download 2017 CollectDumps GSNA Full Exam PDF and VCE

CollectDumps ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 CollectDumps IT Certification PDF and VCE