Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Systems and Network Auditor Exam

Exam Name: GIAC Systems and Network Auditor
Exam Code: GSNA
Related Certification(s): GIAC Management & Leadership Certification
Certification Provider: GIAC
Actual Exam Duration: 180 Minutes
Number of GSNA practice questions in our database: 416 (updated: Apr. 30, 2024)
Expected GIAC Systems and Network Auditor Exam Topics, as suggested by GIAC :
  • Topic 1: Demonstrate the ability to audit Windows systems using common techniques/ Auditing Concepts & Methodology
  • Topic 2: Knowledge of basic auditing terms and concepts/ Demonstrate the ability to audit web applications
  • Topic 3: Scripting commands to determine process information, access controls, and system configurations/ Risk assessment are used to identify and specify controls
  • Topic 4: Configuration, authentication, session management, data security at rest and in transit, and vulnerabilities to common attacks/ Auditing Windows Systems
  • Topic 5: Demonstrate familiarity with the audit process, baselines, time based security concepts/ Auditing Networking Devices & Services
  • Topic 6: Demonstrate the ability to audit common network devices and services/ Demonstrate the ability to audit Unix systems using common techniques
Disscuss GIAC GIAC Systems and Network Auditor Topics, Questions or Ask Anything Related

Currently there are no comments in this discussion, be the first to comment!

Free GIAC GIAC Systems and Network Auditor Exam Actual Questions

Note: Premium Questions for GIAC Systems and Network Auditor were last updated On Apr. 30, 2024 (see below)

Question #1

You work as a Network Administrator for Tech Perfect Inc. For security issues, the company requires you to harden its routers. You therefore

write the following code:

Router#config terminal

Router(config) #no ip bootp server

Router(config) #no ip name-server

Router(config) #no ntp server

Router(config) #no snmp server

Router(config) #no ip http server

Router(config) #^Z

Router#

What services will be disabled by using this configuration fragment?

Each correct answer represents a complete solution. Choose all that apply.

Reveal Solution Hide Solution
Correct Answer: A, D

The above configuration fragment will disable the following services from the router:

The BootP service

The DNS function

The Network Time Protocol

The Simple Network Management Protocol

Hyper Text Transfer Protocol


Question #2

You work as a Software Developer for UcTech Inc. You want to create a new session. Which of the following methods can you use to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

Reveal Solution Hide Solution
Correct Answer: C, D

The getSession() method of the HttpServletRequest interface returns the current session associated with the request, or creates a new

session if no session exists. The method has two syntaxes as follows:

public HttpSession getSession(): This method creates a new session if it does not exist.

public HttpSession getSession(boolean create): This method becomes similar to the above method if create is true, and returns the

current session if create is false. It returns null if no session exists.

Answer B is incorrect. The getSession(false) method returns a pre-existing session. It returns null if the

client has no session

associated with it.

Answer A and E are incorrect. There is no such method as getNewSession() in Java.


Question #3

A Cisco router can have multiple connections to networks. These connections are known as interfaces for Cisco Routers. For naming each interface, Cisco generally uses the type of interface as part of the name. Which of the following are true about the naming conventions of Cisco Router interfaces?

Each correct answer represents a complete solution. Choose all that apply.

Reveal Solution Hide Solution
Correct Answer: A, B, C

A Cisco router can have multiple connections to networks. These connections are known as interfaces for Cisco Routers. For naming each interface, Cisco generally uses the type of interface as part of the name.

Following are some of the naming conventions of Cisco Router interfaces:

An Ethernet interface that is fast always starts with an F.

An interface connected to a serial connection always starts with an S.

An interface connected to an Ethernet segment of the network always starts with an E.

An interface connected to a Token Ring segment always starts with To.


Question #4

Which TCP and UDP ports can be used to start a NULL session attack in NT and 2000 operating systems?

Reveal Solution Hide Solution
Correct Answer: C

A null session is an anonymous connection to a freely accessible network share called IPC$ on Windows-based servers. It allows immediate

read and write access with Windows NT/2000 and read-access with Windows XP and 2003.

The command to be inserted at the DOS-prompt is as follows:

net use \\IP address_or_host name\ipc$ '' '/user:'

net use

Port numbers 139 TCP and 445 UDP can be used to start a NULL session attack.


Question #5

A Cisco router can have multiple connections to networks. These connections are known as interfaces for Cisco Routers. For naming each interface, Cisco generally uses the type of interface as part of the name. Which of the following are true about the naming conventions of Cisco Router interfaces?

Each correct answer represents a complete solution. Choose all that apply.

Reveal Solution Hide Solution
Correct Answer: A, B, C

A Cisco router can have multiple connections to networks. These connections are known as interfaces for Cisco Routers. For naming each interface, Cisco generally uses the type of interface as part of the name.

Following are some of the naming conventions of Cisco Router interfaces:

An Ethernet interface that is fast always starts with an F.

An interface connected to a serial connection always starts with an S.

An interface connected to an Ethernet segment of the network always starts with an E.

An interface connected to a Token Ring segment always starts with To.



Unlock Premium GIAC Systems and Network Auditor Exam Questions with Advanced Practice Test Features:
  • Select Question Types you want
  • Set your Desired Pass Percentage
  • Allocate Time (Hours : Minutes)
  • Create Multiple Practice tests with Limited Questions
  • Customer Support
Get Full Access Now

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77