Sans sec401 - Study guides, Class notes & Summaries

What tcpdump flag displays hex, ASCII, and the Ethernet header? - Answer--XX What tcpdump flag allows us to turn off hostname and port resolution? - Answer--nn What TCP flag is the only one set when initiating a connection? - Answer-SYN Which tool from the aircrack-ng suite captures wireless frames? - Answer-airodump-ng To crack WPA, you must capture a valid WPA handshake? - Answer-True What is the keyspace associated with WEP IVs? - Answer-2^24 / 48 What user account is part of Windows Re...

SEC401 Network Security Essentials 401.1 Questions and Answers 100% Pass 3 Valid options for Data Protection - Correct Answer ️️ -1. Content Discovery - tools that help discover sensitive information in storage 2. Volume Storage Encryption - Protect volumes from being snapshotted, cloned and exposure, protects volumes from being explored by cloud provider, and prevents volumes from being exposed by physical loss of drives. 3. Object Storage Encryption - Same as volume storage encrypti...

Sans 401: Vulnerability Management and Response Questions and Answers 100% Pass Defenses against SQL injection attacks typically include which of the following? (Book 3 Page 109) SIEM system Input validation AV software Network-based intrusion detection - Correct Answer ️️ -Input validation What are the three components used in temporal score metrics? (Book 3 Base modifiers, report confidence, impact metrics Exploitability, report confidence, remediation level Exploitability, impa...

What tcpdump flag displays hex, ASCII, and the Ethernet header? - -XX What tcpdump flag allows us to turn off hostname and port resolution? - -nn What TCP flag is the only one set when initiating a connection? - SYN Which tool from the aircrack-ng suite captures wireless frames? - airodump-ng To crack WPA, you must capture a valid WPA handshake? - True What is the keyspace associated with WEP IVs? - 2^24 / 48 What user account is part of Windows Resource Protection? - TrustedInstaller Wha...

SEC401 Workbook, SANS 401 GSEC Exam