GIAC GNSA Exam Questions & Answers

Correct Answer: D

Most often user rights are determined by the groups the user belongs to. In some cases a user may mistakenly be added to a group they should not be. It is also common that a user moves within the organization, but is still retained in their

previous group giving them those rights.

Answer: B is incorrect. Access Control Lists are usually setup up manually. This means that a person would not likely be inadvertently added. You might want to check the ACL's, and you might find some issues, but this is not the most likely

way to find users with inappropriate rights.

Answer: C is incorrect. At best server logs can show you if a user accessed a resource. But a user could have access to a resource, and simply not have used that access yet. Answer: A is incorrect. IDS logs will only help you identify

potential attacks. Unless you suspect the user of intentionally trying to break into resources, an IDS log will not help in this scenario.

Correct Answer: C

The Trojan Man is a Trojan wrapper that not only combines two programs, but also encrypts the resulting package in an attempt to foil antivirus programs.

Correct Answer: D

According to the question, you want to prevent Windows Defender from taking any action automatically during the scanning of your laptop. In order to accomplish this, you will have to clear the Apply default actions to items detected during a scan check box in Defender Options.

If you clear the Applydefault actions to items detected during a scan check box, it will result in Windows Defender only recommending an action to take for detected malicious software.