GIAC GSNA Exam Dumps

DIV is an HTML tag that groups a series of elements into a larger group. It can be used when an action needs to be performed collectively on

the grouped elements. The DIV tag acts as a container for other elements.

Answer D is incorrect. The SPAN tag is used within an element to group a part of it. For example, this tag can be used to group a few

sentences from within a paragraph, so that a particular action can be performed only on them.

Answer C is incorrect. The BODY tag is used to specify the beginning and end of the document body.

Answer B is incorrect. There is no tag such as GROUP in HTML.

Piggybacking refers to access of a wireless Internet connection by bringing one's own computer within the range of another's wireless

connection, and using that service without the subscriber's explicit permission or knowledge. It is a legally and ethically controversial practice,

with laws that vary in jurisdictions around the world. While completely outlawed in some jurisdictions, it is permitted in others. The process of

sending data along with the acknowledgment is called piggybacking.

Answer C is incorrect. Bluebugging is an attack used only in a Bluetooth network. Bluebugging is a form of bluetooth attack often

caused by a lack of awareness. Bluebugging tools allow attacker to 'take control' of the victim's phone via the usage of the victim's Bluetooth

phone headset. It does this by pretending to be the users bluetooth headset and therefore 'tricking' the phone to obey its call commands.

Answer D is incorrect. A worm is a software program that uses computer networks and security holes to replicate itself from one

computer to another. It usually performs malicious actions, such as using the resources of computers as well as shutting down computers.

Answer B is incorrect. A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance

of a computer or network. It is also known as a network saturation attack or bandwidth consumption attack. Attackers perform DoS attacks by

sending a large number of protocol packets to the network. The effects of a DoS attack are as follows:

Saturates network resources

Disrupts connections between two computers, thereby preventing communications between services

Disrupts services to a specific computer

Causes failure to access a Web site

Results in an increase in the amount of spam

A Denial-of-Service attack is very common on the Internet because it is much easier to accomplish. Most of the DoS attacks rely on the

weaknesses in the TCP/IP protocol.

A Cisco router can have multiple connections to networks. These connections are known as interfaces for Cisco Routers. For naming each interface, Cisco generally uses the type of interface as part of the name.

Following are some of the naming conventions of Cisco Router interfaces:

An Ethernet interface that is fast always starts with an F.

An interface connected to a serial connection always starts with an S.

An interface connected to an Ethernet segment of the network always starts with an E.

An interface connected to a Token Ring segment always starts with To.

The Digest Authentication scheme is a replacement of the Basic Authentication scheme. This authentication scheme is based on the challenge

response model. In Digest authentication, the password is never sent across the network in clear text format but is always transmitted as an

MD5 digest of the user's password. In this way, the password cannot be determined with the help of a sniffer.

How does it work? In this authentication scheme, an optional header allows the server to specify the algorithm used to create the checksum

or digest (by default, the MD5 algorithm). The Digest Authentication scheme provides the challenge using a randomly chosen value. This

randomly chosen value is a server-specified data string which may be uniquely generated each time a 401 response is made. A valid response

contains a checksum (by default, the MD5 checksum) of the username, the password, the given random value, the HTTP method, and the

requested URL. In this way, the password is never sent in clear text format.

Drawback: Although the password is not sent in clear text format, an attacker can gain access with the help of the digested password, since

the digested password is really all the information needed to access the web site.

Answer D, C, and B are incorrect. These statements are true about the Basic Authentication scheme.

/var/log/mailog ?le generally contains the source and destination IP addresses, date and time stamps, and other information that may be

used to check the information contained within an e-mail header. Linux uses Syslog to maintain logs of what has occurred on the system. The

configuration file /etc/syslog.conf is used to determine where the Syslog service (Syslogd) sends its logs. Sendmail can create event messages

and is usually configured to record the basic information such as the source and destination addresses, the sender and recipient addresses,

and the message ID of e-mail. The syslog.conf will display the location of the log file for e-mail.

Answer B, C, and D are incorrect. All these files are not valid log files.