GIAC Security Leadership Certification (GSLC)

QUESTION NO: 1
A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is this?

A. Vulnerability attack B. Social Engineering attack C. Denial-of-Service attack D. Impersonation attack

Correct Answer: C

QUESTION NO: 2
Victor wants to use Wireless Zero Configuration (WZC) to establish a wireless network connection using his computer running on Windows XP operating system.
Which of the following are the most likely threats to his computer?
Each correct answer represents a complete solution. Choose two.

A. Attacker can use the Ping Flood DoS attack if WZC is used. B. Attacker by creating a fake wireless network with high power antenna cause Victor's computer to associate with his network to gain access. C. It will not allow the configuration of encryption and MAC filtering. Sending information is not secure on wireless network. D. Information of probing for networks can be viewed using a wireless analyzer and may be used to gain access.

Correct Answer: B,D

QUESTION NO: 3
All of the following are the password cracking attacks performed by the cain tool except for which one?

A. DoS attack B. Rainbow attack C. Dictionary attack D. Brute force attack

Correct Answer: A

QUESTION NO: 4
John works as a professional Ethical Hacker. He has been assigned the task of testing the security of www.we-are-secure.com. He installs a sniffer on the We-are-secure server thinking that the following protocols of the We-are-secure server are being used in the network:
- HTTP
- SSL
- SSH
- IPSec
Considering the above factors, which of the following types of packets can he expect to see captured in encrypted form when he checks the sniffer's log file?
Each correct answer represents a complete solution. Choose all that apply.

A. IPSec B. SSL C. HTTP D. SSH

Correct Answer: A,B,D

QUESTION NO: 5
Place the processes that are grouped under the Project Cost Management Knowledge Area in the image below.

Correct Answer:

QUESTION NO: 6
You work as a project manager for TYU project. You are planning for risk mitigation. You need to identify the risks that will need a more in-depth analysis. Which of the following activities will help you in this?

A. Risk identification B. Quantitative analysis C. Estimate activity duration D. Qualitative analysis

Correct Answer: D

QUESTION NO: 7
You work as an Exchange Administrator for McRobert Inc. You are configuring a new Exchange
2000 Server computer and two storage groups, group A and group B, on your network. You have to configure the physical disks on the Exchange 2000 Server computer to provide better performance and availability. Which configuration will you use to achieve this?

A. Single drive ---- Transaction Log Files (group A)
Single drive ---- Transaction Log Files (group B)
RAID5 --------- Information Store (groups A and B) B. Mirrored ---- Transaction Log Files (group A)
Mirrored ---- Transaction Log Files (group B)
RAID5 ------ Information store (groups A and B) C. Single drive ----- Transaction Log Files (group A)
Single drive ----- Transaction Log Files (group B)
RAID5 ----------- Information Store (group A)
RAID5 ----------- Information Store (group B) D. Mirrored ---- Transaction Log Files ( groups A and B)
RAID5 ------ Information Store (groups A and B)

Correct Answer: C

QUESTION NO: 8
Which of the following activities result in change requests?
Each correct answer represents a complete solution. Choose all that apply.

A. Inspection B. Defect repair C. Corrective actions D. Preventive actions

Correct Answer: B,C,D

GIAC Security Leadership Certification (GSLC) - GSLC Exam Questions