Most Recent GIAC GSNA Exam Dumps

In general, nesting means embedding a construct inside another. Nesting tables is a technique in which one or more tables are embedded within a table.

Answer B, D, and C are incorrect. There are no techniques such as stacking tables, horned tables, or CSS tables.

A perimeter network, also known as a demilitarized zone or DMZ, is a small network that lies in between the Internet and a private network.

It has a connection to the Internet through an external firewall and a connection to the internal network through an interior firewall. It allows

outside users access to the specific servers located in the perimeter network while preventing access to the internal corporate network.

Servers, routers, and switches that maintain security by preventing the internal network from being exposed on the Internet are placed in a

perimeter network. A perimeter network is commonly used for deploying e-mail and Web servers for a company.

Wireless Zero Configuration (WZC), also known as Wireless Auto Configuration, or WLAN AutoConfig is a wireless connection management

utility included with Microsoft Windows XP and later operating systems as a service that dynamically selects a wireless network to connect to

based on a user's preferences and various default settings. This can be used instead of, or in the absence of, a wireless network utility from

the manufacturer of a computer's wireless networking device. The drivers for the wireless adapter query the NDIS Object IDs and pass the

available network names to the service. WZC also introduce some security threats, which are as follows:

WZC will probe for networks that are already connected. This information can be viewed by anyone using a wireless analyzer and can

be used to set up fake access points to connect.

WZC attempts to connect to the wireless network with the strongest signal. Attacker can create fake wireless networks with high-

power antennas and cause computers to associate with his access point.

Answer D is incorrect. WZC does not interfere in the configuration of encryption and MAC filtering.

Answer B is incorrect. In a ping flood attack, an attacker sends a large number of ICMP packets to the target computer using the ping

command, i.e., ping -f target_IP_address. When the target computer receives these packets in large quantities, it does not respond and

hangs.

According to the question, you are required to prevent outside computers from accessing your network. You should therefore configure the

switch's port access based on the MAC address, which can be done by configuring port security. Port security is a feature of Cisco Catalyst

series switches. Port security is used to block input based on the media access control (MAC) address to an Ethernet, Fast Ethernet, or Gigabit

Ethernet port. It denies the port access to a workstation when the MAC address of the station attempting to access the port is different from

any of the MAC addresses specified for that port.

Answer B and C are incorrect. A firewall is used to protect an internal network or intranet against unauthorized access from the

Internet or other outside networks.

Answer D is incorrect. A port scanner is a software tool that is designed to search a network host for open ports. This tool is often used

by administrators to check the security of their networks. It is also used by hackers to compromise the network and systems.

Most often user rights are determined by the groups the user belongs to. In some cases a user may mistakenly be added to a group they

should not be. It is also common that a user moves within the organization, but is still retained in their previous group giving them those

rights.

Answer B is incorrect. Access Control Lists are usually setup up manually. This means that a person would not likely be inadvertently

added. You might want to check the ACL's, and you might find some issues, but this is not the most likely way to find users with inappropriate

rights.

Answer C is incorrect. At best server logs can show you if a user accessed a resource. But a user could have access to a resource, and

simply not have used that access yet.

Answer A is incorrect. IDS logs will only help you identify potential attacks. Unless you suspect the user of intentionally trying to break

into resources, an IDS log will not help in this scenario.