Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GISF Exam - Topic 6 Question 2 Discussion

Posted by Janey on May 04, 2022 at 10:53 AM

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:

nmap -PN -p- -sI IP_Address_of_Company_Server

He analyzes that the server's TCP ports 21, 25, 80, and 111 are open.

Which of the following security policies is the company using during this entire process to mitigate therisk of hacking attacks?

Suggested Answer: A

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
15 comments · newest first
CO
Cordie 11 months ago
Non-disclosure agreements? Not really relevant here, right?
LI
Lindsey 11 months ago
I agree, audit policies are crucial for identifying vulnerabilities.
SH
Shaquana 12 months ago
Wait, how can they be sure those ports are secure?
CA
Catarina 12 months ago
Definitely! Open ports need constant monitoring.
DA
Dalene 12 months ago
Sounds like they're using an audit policy to keep track of security.
SH
Sherell 1 year ago
This question reminds me of a practice scenario we did on security policies. I think the acceptable use policy is more about user behavior rather than network scanning.
LE
Lenna 1 year ago
I'm not entirely sure, but I feel like an antivirus policy wouldn't really apply here since John is scanning ports, not dealing with malware directly.
JA
Janessa 1 year ago
I remember we discussed how an audit policy is crucial for identifying vulnerabilities, so I think that might be the right answer.
MI
Ming 1 year ago
I keep getting mixed up between audit and acceptable use policies. I guess I need to think about which one focuses more on security measures like this.
KA
Katie 1 year ago
Wait, what happens if the 15 days takes us past the end of February? I'm not sure if that would cause an issue with the leap year. I better double-check the logic here.
IR
Ira 1 year ago
I'm pretty sure PEPs are always a high-risk category. That's definitely one selection.
AN
Annita 1 year ago
Ah, this is the kind of question I was hoping to see! The Fusioninsight HD Manager is responsible for managing the Loader, so I'm confident I can identify the correct operations it would perform.
IS
Isreal 1 year ago
Alright, let's break this down. The company is currently all-equity financed, and they're adding long-term debt. Based on the debt-to-equity ratio, the cost of equity should decrease, since the financial risk to shareholders is now lower.
LA
Lajuana 1 year ago
I'm a bit unsure about this one. The options seem similar, but I'll need to double-check the definitions to make sure I select the correct setting.
VE
Verda 1 year ago
This one seems pretty straightforward. The Authorizing Official is the advisor, so I'll go with option C.
0/2000 characters

Save Cancel