Free Practice Questions for GIAC GSNA Exam

In Unix, the /var/log/secure file is used to track the systems for user logins. Answer: D is incorrect. In Unix, the /var/log/maillog file is the normal system maillog file. Answer: A is incorrect. In Unix, the /var/log/messages file is the main system message log file. Answer: C is incorrect. In Unix, the /var/spool/mail file is the file where mailboxes are usually stored.

In Unix, the $HOME/.htaccess file provides a way to make configuration changes on a per directory basis. Answer: A is incorrect. In Unix, the $HOME/.profile file contains the user's environment stuff and startup programs.

Answer: B is incorrect. In Unix, the $HOME/Xrootenv.0 file contains networking and environment info. Answer: D is incorrect. In Unix, the /var/log/btmp file is used to store information about failed logins.

In order to enable email communication, you will have to open ports 25 and 110. Port 25 is used by SMTP to send emails. Port 110 is used by POP3 to receive emails.

Routinely doing site surveys (or better still, having them automatically conducted frequently) is the only way to know what is connected to your network. And it will reveal any rogue access points. Answer: B is incorrect. While anti virus software is always a good idea, it will do nothing to prevent rogue access points. Answer: A is incorrect. While anti-spyware software is always a good idea, it will do nothing to prevent rogue access points. Answer: C is incorrect. A protocol analyzer will help you analyze the specific traffic on a given node, but won't be much help in directly detecting rogue access points.

The tail -n 4 /var/log/cron command will show the last four lines of the file /var/log/cron.

In Unix, the /dev/MAKEDEV file is used by system administrators for local device files or links to device files for a non-standard device driver. Answer: A is incorrect. In Unix, the profile file stores the system wide environment and startup script program. Answer: D is incorrect. In Unix, the /etc/aliases file is where the user's name is matched to a nickname for e-mail. Answer: B is incorrect. In Unix, the /etc/bootptab/ file contains the configuration for the BOOTP server daemon.

HTML lacks some of the features found in earlier hypertext systems, such as typed links, source tracking, fat links etc. Even some hypertext features that were in early versions of HTML have been ignored by most popular web browsers until recently, such as the link element and in- browser Web page editing. Sometimes Web services or browser manufacturers remedy these shortcomings. Answer: C is incorrect. Hyperlink is supported by HTML as well as Hypertext.

In Unix, the /etc/securetty file is used to identify the secure terminals from where the root can be allowed to log in. Answer: B is incorrect. In Unix, the /etc/ioports file shows which I/O ports are in use at the moment. Answer: A is incorrect. In Unix, the /etc/services file is the configuration file that lists the network services that the system supports. Answer: C is incorrect. In Unix, the /proc/interrupts file is the configuration file that shows the interrupts in use and how many of each there has been.

The nmap utility, also commonly known as port scanner, is used to view the open ports on a Linux computer. It is used by administrators to determine which services are available for external users. This utility helps administrators in deciding whether to disable the services that are not being used in order to minimize any security risk. Answer: B is incorrect. NSLOOKUP is a tool for diagnosing and troubleshooting Domain Name System (DNS) problems. It performs its function by sending queries to the DNS server and obtaining detailed responses at the command prompt. This information can be useful for diagnosing and resolving name resolution issues, verifying whether or not the resource records are added or updated correctly in a zone, and debugging other server-related problems. This tool is installed along with the TCP/IP protocol through the Control Panel.

Answer: C is incorrect. NETSH is a command line tool to configure TCP/IP settings such as the IP address, Subnet Mask, Default Gateway, DNS, WINS addresses, etc. Answer: A is incorrect. L0phtcrack is a tool which identifies and remediate security vulnerabilities that result from the use of weak or easily guessed passwords. It recovers Windows and Unix account passwords to access user and administrator accounts.