Free GIAC Security Essentials Exam Dumps

In order to deny access to a user account, an invalid shell such as /bin/false should be assigned for the user account in the /etc/passwd file. When an invalid shell is assigned to a user account, a user cannot use the computer. You can take the following steps to deny access for a user to the computer:

1.Edit the /etc/passwd file and make the appropriate changes.

2.Use the -s switch with the USERMOD command.

3.Use CHSH -s /bin/false <user name> command.

Alternatively, you can use the USERMOD -l <user name> command at the command prompt to lock the user account.

KILL is a command used to terminate a specified process.

Answer options A, C, and D are incorrect. Blowfish, 3DES, and MD5 are encryption technologies used to secure the communication between computers on the network.

Secure Sockets Layer (SSL) is a protocol used to transmit private documents via the Internet. SSL uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity. Using the SSL protocol, clients and servers can

communicate in a way that prevents eavesdropping and tampering of data on the Internet. Many Web sites use the SSL protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that require an SSL connection start with https: instead of http:. By default, SSL uses port 443 for secured communication.

Answer option C is incorrect. SSL can only secure the communication transport. Processing of credit cards cannot be done by SSL.

The Static IP addressing is the term used for manual assignment of IP addresses to computers and devices.

Answer option C is incorrect. Automatic Private IP Addressing (APIPA) is a Windows feature, which allows household users and small business

users to create a functional single subnet TCP/IP network without manually configuring the TCP/IP protocol or setting up a DHCP server.

Answer option D is incorrect. Dynamic IP addressing is used when IP addresses are assigned to computers and devices automatically by the

DHCP service or APIPA.

Answer option B is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the

IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by using someone else's IP address to hide his

identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the

responses to be misdirected.

Much like Satellite TV, Satellite internet does not require any physical connectivity and is available almost anywhere on the planet, since it uses orbiting satellites for connectivity. Speeds are not as fast as DSL, and the connectivity can be expensive.

Answer option D is incorrect. Microwave connections are very expensive and not available for residential internet use.

Answer options B and A are both incorrect. Both require local, physical connections and would not be available in a remote rural area.

The most widely used Ethernet networks are 10BASE-T, 100BASE-TX, and 1000BASE-T (Gigabit Ethernet), running at 10 Mbit/s, 100 Mbit/s,

and 1000 Mbit/s (1 Gbit/s) respectively. These three standards all use the same connectors. Higher speed implementations nearly always

support the lower speeds as well, so that in most cases different generations of equipment can be freely mixed. They use 8 position modular

connectors, usually called RJ45 in the context of Ethernet over twisted pair. The cables usually used are four-pair or above twisted pair cable.

Each of the three standards support both full-duplex and half-duplex communication. According to the standards, they all operate over

distances of 'up to 100 meters'.

Configuration of an L2TP VPN connection and an IPSec tunnel between the offices, will provide the highest possible encryption for traffic between the offices as well as mutual authentication between the two servers.

L2TP uses IPSec for data encryption. This will ensure the highest possible level of encryption for traffic between the two offices, as well as mutual authentication without any additional hardware or software.

The wireless standard 802.11n operates at 2.4 Ghz and 5 Ghz frequencies.

IEEE 802.11n is an upcoming improvement to the IEEE 802.11-2007 wireless networking standard to improve network throughput over

previous standards, such as 802.11b and 802.11g. The IEEE 802.11n standard offers data rates from 54 Mbps to a maximum of 600 Mbps.

The current state of the art supports a physical rate of 450 Mbps, with the use of 3 spatial streams at a channel width of 40 MHz. Depending

on the environment, this may translate into a user throughput of 110 Mbps.

Application virtualization is an umbrella term that describes software technologies that improve portability, manageability and compatibility of

applications by encapsulating them from the underlying operating system on which they are executed. A fully virtualized application is not

installed in the traditional sense, although it is still executed as if it is. The application is fooled at runtime into believing that it is directly

interfacing with the original operating system and all the resources are managed by it, when in reality it is not. Application virtualization differs

from operating system virtualization in that in the latter case, the whole operating system is virtualized rather than only specific applications.

Answer option C is incorrect. System hardening is a term used for securing an operating system. It can be achieved by installing the latest

service packs, removing unused protocols and services, and limiting the number of users with administrative privileges.

Answer option B is incorrect. Encapsulation is an object-oriented programming term used to define the ability to contain and hide information

about an object, such as internal data structures and code. Encapsulation isolates the internal complexity of an object's operation from the

rest of the application. For example, when you set the width property on a command button, you do not need to know how the value is

stored and how the command button is resized.

Answer option D is incorrect. Failover is a term associated with cluster services. It refers to the ability of a server to immediately start servicing

the requests if a primary server fails. If the application services in a cluster-node fail, the Cluster Service generally tries to restart them on the

same node. If the services do not start, then it moves the services to another node in the cluster and restarts them on that node.

Start of Authority (SOA) record is the first record in any DNS database file. The SOA resource record includes the following fields: owner, TTL,

class, type, authoritative server, refresh, minimum TTL, etc.

Answer option C is incorrect. Canonical Name (CNAME) is a resource record that creates an alias for the specified Fully Qualified Domain Name

(FQDN). It hides the implementation details of a network from the clients that are connected to the network.

Answer option D is incorrect. MX is a mail exchange resource record in the database file of a DNS server. It specifies a mail exchange server for

a DNS domain name.

Answer option B is incorrect. SRV resource record is a DNS record that enables users to specify the location of servers for a specific service,

protocol, and DNS domain. For example, if there are two servers in a domain, creating SRV records specifies which hosts serve as Web

servers, and resolvers can then retrieve all the SRV resource records for the Web servers.