SANS 401 GSEC ALL CORRECT QUESTIONS AND
ANSWERS SET A+
✔✔Identity - ✔✔Who you claim to be
✔✔Authentication - ✔✔A process by which you prove you are who you say you are.
Something you know, have, are.
✔✔Authorization - ✔✔Determines what someone has access to or is allowed to do after
authentication
✔✔Accountability - ✔✔Deals with knowing who did what and when
✔✔Least Privilege - ✔✔Diving the least amount of access needed to do a job
✔✔Need to Know - ✔✔Give access only when it is needed and take it away when it's
not
✔✔Separation of Duties - ✔✔Break critical tasks across multiple people to limit
exposure points
✔✔Rotation of Duties - ✔✔Change jobs on a regular basis
✔✔Single Sign-On - ✔✔Log on once and the credentials are carried with the user to
simplify user management
✔✔Password Hash Strength determined by - ✔✔Quality of Algorithm, Key Length, CPU
Cycles, Character set support, Password Length
✔✔Salt - ✔✔Bytes or numbers added to hash to further create more possible
passwords
, ✔✔Incident - ✔✔An adverse event in an information system and/or network, or threat of
the occurrence of such event
✔✔Event - ✔✔Any observable occurrence in a system and/or network
✔✔Incident Handling Steps (6) - ✔✔Preparation
Identification
Containment
Eradication
Recovery
Lesson's Learned
✔✔Chain of Custody - ✔✔Document evidence items and its custody, transfer, and
disposition
✔✔Real Evidence - ✔✔Is the tangible items. Seized Computer, USB, Printout, etc.
✔✔Direct Evidence - ✔✔What the handler actually saw, not what the handler surmised
✔✔Command Injection - ✔✔Attacker sends OS commands as form or other input and
adds additional code for malicious cause
✔✔Buffer Overflows - ✔✔Program allocate a certain amount of buffer space to perform
operations
✔✔SQL Injection - ✔✔Inserting SQL into a field which is executed on the backend of
the database. Poor input validation
✔✔Cross-Site Scripting - ✔✔Allowing JavaScript to be entered into entry field and
executing to steal cookies and session data
✔✔Return on Investment (ROI | ROSI) - ✔✔The financial benefit or return received from
a given amount of money or capital invest into product
✔✔Social Engineering - ✔✔Attempts to manipulate or trick a person into providing
information or access
✔✔Network Mapping (hping) - ✔✔Enables port scanning and spoofing simultaneously
by crafting packets and analyzing the return. Test firewall rules, remote OS
fingerprinting, audit TCP/IP stacks
✔✔Port Scanning (nmap) - ✔✔Network mapper that can give information about a
network/device in order to understand open ports, services, etc.
ANSWERS SET A+
✔✔Identity - ✔✔Who you claim to be
✔✔Authentication - ✔✔A process by which you prove you are who you say you are.
Something you know, have, are.
✔✔Authorization - ✔✔Determines what someone has access to or is allowed to do after
authentication
✔✔Accountability - ✔✔Deals with knowing who did what and when
✔✔Least Privilege - ✔✔Diving the least amount of access needed to do a job
✔✔Need to Know - ✔✔Give access only when it is needed and take it away when it's
not
✔✔Separation of Duties - ✔✔Break critical tasks across multiple people to limit
exposure points
✔✔Rotation of Duties - ✔✔Change jobs on a regular basis
✔✔Single Sign-On - ✔✔Log on once and the credentials are carried with the user to
simplify user management
✔✔Password Hash Strength determined by - ✔✔Quality of Algorithm, Key Length, CPU
Cycles, Character set support, Password Length
✔✔Salt - ✔✔Bytes or numbers added to hash to further create more possible
passwords
, ✔✔Incident - ✔✔An adverse event in an information system and/or network, or threat of
the occurrence of such event
✔✔Event - ✔✔Any observable occurrence in a system and/or network
✔✔Incident Handling Steps (6) - ✔✔Preparation
Identification
Containment
Eradication
Recovery
Lesson's Learned
✔✔Chain of Custody - ✔✔Document evidence items and its custody, transfer, and
disposition
✔✔Real Evidence - ✔✔Is the tangible items. Seized Computer, USB, Printout, etc.
✔✔Direct Evidence - ✔✔What the handler actually saw, not what the handler surmised
✔✔Command Injection - ✔✔Attacker sends OS commands as form or other input and
adds additional code for malicious cause
✔✔Buffer Overflows - ✔✔Program allocate a certain amount of buffer space to perform
operations
✔✔SQL Injection - ✔✔Inserting SQL into a field which is executed on the backend of
the database. Poor input validation
✔✔Cross-Site Scripting - ✔✔Allowing JavaScript to be entered into entry field and
executing to steal cookies and session data
✔✔Return on Investment (ROI | ROSI) - ✔✔The financial benefit or return received from
a given amount of money or capital invest into product
✔✔Social Engineering - ✔✔Attempts to manipulate or trick a person into providing
information or access
✔✔Network Mapping (hping) - ✔✔Enables port scanning and spoofing simultaneously
by crafting packets and analyzing the return. Test firewall rules, remote OS
fingerprinting, audit TCP/IP stacks
✔✔Port Scanning (nmap) - ✔✔Network mapper that can give information about a
network/device in order to understand open ports, services, etc.
