GIAC GSLC Value Pack (Frequently Bought Together)

Victor works as a network administrator for DataSecu Inc. He uses a dual firewall Demilitarized Zone (DMZ) to insulate the rest of the network from the portions that is available to the Internet.
Which of the following security threats may occur if DMZ protocol attacks are performed?
Each correct answer represents a complete solution. Choose all that apply.

• A. The attacker can exploit any protocol used to go into the internal network or intranet of the company.
• B. The attacker managing to break the first firewall defense can access the internal network without breaking the second firewall if it is different.
• C. The attacker can perform a Zero Day attack by delivering a malicious payload that is not a part of the intrusion detection/prevention systems guarding the network.
• D. The attacker can gain access to the Web server in a DMZ and exploit the database.

What does a firewall check to prevent certain ports and applications from getting the packets into an Enterprise?

• A. The transport layer port numbers and the application layer headers
• B. The presentation layer headers and the session layer port numbers
• C. The network layer headers and the session layer port numbers
• D. The application layer port numbers and the transport layer headers

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

• A. MS-CHAP v2
• B. WEP
• C. EFS
• D. SSL

Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.

• A. The attacker must target a site that doesn't check the referrer header.
• B. The target site should have limited lifetime authentication cookies.
• C. The attacker must determine the right values for all the form inputs.
• D. The target site should authenticate in GET and POST parameters, not only cookies.

You are the Network Administrator for a company that does a large amount of defense contract business.
A high level of security, particularly regarding sensitive documents, is required. Which of the following steps will you take to secure network printers?
Each correct answer represents a complete solution. Choose two.

• A. Remove the printers from the network and not allow remote printing.
• B. Secure all remote administrative protocols such as telnet.
• C. Ensure that the printers hard drive is scanned for spyware.
• D. Limit the size of print jobs on the printer.
• E. Do not allow duplicate print jobs.