GSNA Online Practice Questions and Answers

Correct Answer:

The firewall in the enterprise network should be reconfigured or upgraded to detect and filter an Internet worm. Firewall is used to protect the network from external attacks by hackers. Firewall prevents direct communication between computers in the network and the external computers, through the Internet. Instead, all communication is done through a proxy server, outside the organization's network, which decides whether or not it is safe to let a file pass through.

Correct Answer: D

According to the scenario, John will use the netstat -an command to accomplish the task. The netstat -an command is used to get the information of all network connections and listening ports in the numerical form. The netstat command

displays protocol-related statistics and the state of current TCP/IP connections. It is used to get information about the open connections on a computer, incoming and outgoing data, as well as the ports of remote computers to which the

computer is connected. The netstat command gets all this networking information by reading the kernel routing tables in the memory. Answer: A is incorrect. The netstat -e command displays the Ethernet information. Answer: B is incorrect.

The netstat -r command displays the routing table information. Answer: C is incorrect. The netstat -s command displays per-protocol statistics.

By default, statistics are shown for TCP, UDP and IP.

Correct Answer: D

The sync command is used to flush filesystem buffers. It ensures that all disk writes have been completed before the processor is halted or rebooted. Generally, it is preferable to use reboot or halt to shut down a system, as they may perform

additional actions such as resynchronizing the hardware clock and flushing internal caches before performing a final sync.

Answer: B is incorrect. In Unix, the tune2fs command is used to adjust tunable filesystem parameters on the second extended filesystems.

Answer: A is incorrect. In Unix, the swapon command is used to activate a swap partition. Answer: C is incorrect. In Unix, the swapoff command is used to de-activate a swap partition.

Correct Answer: ABC

eBox Platform is an open source unified network server (or a Unified Network Platform) for SMEs. eBoxPlatform can act as a Gateway, Network Infrastructure Manager, Unified Threat Manager, Office Server, Unified Communications Server or a combination of them. Besides, eBox Platform includes a development framework to ease the development of new Unix-based services. Answer: D is incorrect. eBox Platform cannot act as a sandbox. A sandbox is a security mechanism for separating running programs. It is often used to execute untested code, or untrusted programs, from unverified third-parties, suppliers, and untrusted users.

Correct Answer: C

Enabling the user must change password at next logon option will make the given password a temporary password. Enabling this option forces, a user to change his existing password at next logon. Answer: B is incorrect. There is no such option in Windows Vista. Answer: D is incorrect. This option sets the password to never expire. Answer: A is incorrect. This option sets the existing password as a permanent password for the user. Only administrators can change the password of the user.

Correct Answer: AD

Except for the HttpSessionActivationListener and the HttpSessionBindingListener, all other listeners must be configured in the deployment descriptor.

HttpSessionBindingListener has methods that notify the object when it is added to or removed from a session. It has methods that informs the attributes when the session is about to be activated or passivated. These methods are related to

the attributes and not to the complete session. Hence, the container takes care of them and need not be configured in the deployment descriptor.

Correct Answer: D

An anti-virus program updates the virus definition file regularly from the anti-virus manufacturer's Web site. Antivirus (or anti-virus) software is used to prevent, detect, and remove malware, including computer viruses, worms, and trojan horses. Such programs may also prevent and remove adware, spyware, and other forms of malware. Traditional antivirus software solutions run virus scanners on schedule, on demand and some run scans in real time. If a virus or malware is located, the suspect file is usually placed into a quarantine to terminate its chances of disrupting the system. Traditional antivirus solutions scan and compare against a publicized and regularly updated dictionary of malware otherwise known as a blacklist. Some antivirus solutions have additional options that employ a heuristic engine which further examines the file to see if it is behaving in a similar manner to previous examples of malware. A new technology utilized by a few antivirus solutions is whitelisting; this technology first checks if the file is trusted and only questions those that are not. With the addition of wisdom of crowds, antivirus solutions backup other antivirus techniques by harnessing the intelligence and advice of a community of trusted users to protect each other. Answer: C is incorrect. A service pack is a collection of Fixes and Patches in a single product. A service pack can be used to handle a large number of viruses and bugs or to update an operating system with advanced better capabilities. A service pack usually contains a number of file replacements. Answer: A is incorrect. Hotfix is a collection of files used by Microsoft for software updates that are released between major service pack releases. A hotfix is about a problem, occurring under specific circumstances, which cannot wait to be fixed till the next service pack release. Hotfixes are generally related to security problems. Hence, it is essential to fix these problems as soon as possible. Answer: B is incorrect. An anti-virus program does not update Permissions regularly from its manufacturer's Web site.

Correct Answer: A

In Unix, the /etc/passwd file contains username, real name, home directory, encrypted password, and other information about a user.

Answer: C is incorrect. In Unix, the /etc/hosts file lists the hosts for name lookup use that are locally required.

Answer: D is incorrect. In Unix, the /etc/inittab file is the configuration file for init. It controls startup run levels and determines scripts to start with.

Answer: B is incorrect. In Unix, the /etc/printcap file is the configuration file for printers.

Correct Answer: ACD

KisMAC is a wireless network discovery tool for Mac OS X. It has a wide range of features, similar to those of Kismet, its Linux/BSD namesake and far exceeding those of NetStumbler, its closest equivalent on Windows. The program is geared toward network security professionals, and is not as novice-friendly as similar applications. KisMAC will scan for networks passively on supported cards - including Apple's AirPort, and AirPort Extreme, and many third-party cards, and actively on any card supported by Mac OS X itself. Cracking of WEP and WPA keys, both by brute force, and exploiting flaws such as weak scheduling and badly generated keys is supported when a card capable of monitor mode is used, and packet reinjection can be done with a supported card. GPS mapping can be performed when an NMEA compatible GPS receiver is attached. Data can also be saved in pcap format and loaded into programs such as Wireshark.

Correct Answer: B

In Unix, the /var/log/secure file is used to track the systems for user logins. Answer: D is incorrect. In Unix, the /var/log/maillog file is the normal system maillog file. Answer: A is incorrect. In Unix, the /var/log/messages file is the main system message log file. Answer: C is incorrect. In Unix, the /var/spool/mail file is the file where mailboxes are usually stored.