GIAC GSEC Exam Questions & Answers

Which of the following is a benefit of using John the Ripper for auditing passwords?

A. John's Blowfish cracking routine uses a complex central computing loop that increases the cost of each hash computation.

B. John the Ripper is much slower for auditing passwords encrypted with MD5 and Blowfish.

C. John's MD5 cracking routine uses a simplified central computing loop that decreases the cost of each hash computation.

D. John cannot use the DES bit-slicing technique, so it is much slower than other tools, especially when used against DES-encrypted passwords.

What type of formal document would include the following statement?

Employees are responsible for exercising good judgment regarding the reasonableness of personal use. Individual departments are responsible for creating guidelines concerning personal application of Internet/Intranet/Extranet systems. In the absence of such policies, employees should be guided by departmental policies, and if there is any uncertainty, employees should consult their supervisor or manager.

A. Company privacy statement

B. Remote access policy

C. Acceptable use policy

D. Non-disclosure agreement

Which choice best describes the line below?

alert tcp any any -> 192.168.1.0/24 80 (content: /cgi-bin/test.cgi"; msg: "Attempted CGI-BIN Access!!";)

A. Tcpdump filter

B. IP tables rule

C. Wire shark filter

D. Snort rule