GIAC GCFW training and testing

ITCertKing's GIAC GCFW exam training materials not only can save your energy and money, but also can save a lot of time for you. Because the things what our materials have done, you might need a few months to achieve. So what you have to do is use the ITCertKing GIAC GCFW exam training materials. And obtain this certificate for yourself. ITCertKing will help you to get the knowledge and experience that you need and will provide you with a detailed GIAC GCFW exam objective. So with it, you will pass the exam.

ITCertKing GIAC GCFW exam training materials praised by the majority of candidates is not a recent thing. This shows ITCertKing GIAC GCFW exam training materials can indeed help the candidates to pass the exam. Compared to other questions providers, ITCertKing GIAC GCFW exam training materials have been far ahead. uestions broad consumer recognition and reputation, it has gained a public praise. If you want to participate in the GIAC GCFW exam, quickly into ITCertKing website, I believe you will get what you want. If you miss you will regret, if you want to become a professional IT expert, then quickly add it to cart.

When you click into ITCertKing's site, you will see so many people daily enter the website. You can not help but be surprised. In fact, this is normal. ITCertKing is provide different training materials for alot of candidates. They are using our training materials tto pass the exam. This shows that our GIAC GCFW exam training materials can really play a role. If you want to buy, then do not miss ITCertKing website, you will be very satisfied.

At present, GIAC GCFW exam really enjoys tremendous popularity. As far as you that you have not got the certificate, do you also want to take GCFW test? GIAC GCFW certification test is really hard examination. But it doesn't mean that you cannot get high marks and pass the exam easily. What is the shortcut for your exam? Do you want to know the test taking skills? Now, I would like to tell you making use of ITCertKing GCFW questions and answers can help you get the certificate.

Exam Code: GCFW
Exam Name: GIAC (GIAC Certified Firewall Analyst)
One year free update, No help, Full refund!
Total Q&A: 391 Questions and Answers
Last Update: 2014-01-27

As a member of the people working in the IT industry, do you have a headache for passing some IT certification exams? Generally, IT certification exams are used to test the examinee's related IT professional knowledge and experience and it is not easy pass these exams. For the examinees who are the first time to participate IT certification exam, choosing a good pertinent training program is very necessary. ITCertKing can offer a specific training program for many examinees participating in IT certification exams. Our training program includes simulation test before the formal examination, specific training course and the current exam which has 95% similarity with the real exam. Please add ITCertKing to you shopping car quickly.

GCFW Free Demo Download: http://www.itcertking.com/GCFW_exam.html

NO.1 Which of the following IDs is used to reassemble the fragments of a datagram at the destination point?
A. IP identification number
B. SSID
C. MAK ID
D. IP address
Answer: A

GIAC   GCFW   GCFW pdf   GCFW study guide   GCFW certification training

NO.2 WinDump, tcpdump, and Wireshark specify which fields of information libpcap should record.
Which of the following filters do they use in order to accomplish the task?
A. Berkeley Packet Filter
B. IM filter
C. Web filter
D. FIR filter
Answer: A

GIAC   GCFW   GCFW   GCFW original questions

NO.3 Which of the following can be monitored by using the host intrusion detection system (HIDS)?
Each correct answer represents a complete solution. Choose two.
A. Computer performance
B. File system integrity
C. Storage space on computers
D. System files
Answer: B,D

GIAC   GCFW   GCFW braindump   GCFW exam prep   GCFW

NO.4 Which of the following limits the number of packets seen by tcpdump?
A. BPF-based filter
B. Recipient filtering
C. Sender filtering
D. IFilters
Answer: A

GIAC answers real questions   GCFW certification training   GCFW test answers   GCFW exam dumps   GCFW test questions

NO.5 A packet filtering firewall inspects each packet passing through the network and accepts or rejects it
based on user-defined rules. Based on which of the following information are these rules set to filter the
packets?
Each correct answer represents a complete solution. Choose all that apply.
A. Layer 4 protocol information
B. Actual data in the packet
C. Interface of sent or received traffic
D. Source and destination Layer 3 address
Answer: A,C,D

GIAC exam dumps   GCFW study guide   GCFW certification

NO.6 Which of the following are the reasons that network administrators use Access Control Lists?
Each correct answer represents a complete solution. Choose two.
A. Encrypting data to be routed
B. Removing weak user password
C. Controlling VTY access into a router
D. Filtering traffic as it passes through a router
Answer: C,D

GIAC   GCFW   GCFW   GCFW answers real questions

NO.7 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
B. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
C. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: C

GIAC answers real questions   GCFW   GCFW practice test   GCFW test

NO.8 Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6?
A. Electronic Codebook (ECB) Mode
B. Cipher Block Chaining (CBC) Mode
C. Propagating Cipher Block Chaining (PCBC) Mode
D. Cipher Feedback (CFB) Mode
Answer: B

GIAC   GCFW braindump   GCFW study guide   GCFW

NO.9 Which of the following ICMPv6 neighbor discovery messages is sent by hosts to request an immediate
router advertisement, instead of waiting for the next scheduled advertisement?
A. Router Advertisement
B. Neighbor Advertisement
C. Router Solicitation
D. Neighbor Solicitation
Answer: C

GIAC exam   GCFW test questions   GCFW dumps   GCFW

NO.10 Which of the following is an attack with IP fragments that cannot be reassembled?
A. Dictionary attack
B. Smurf attack
C. Teardrop attack
D. Password guessing attack
Answer: C

GIAC   GCFW   GCFW

NO.11 You work as a Network Architect for Tech Perfect Inc. The company has a corporate LAN network. You
will have to perform the following tasks:
l Limit events that occur from security threats such as viruses, worms, and spyware.
l Restrict access to the network based on identity or security posture.
Which of the following services will you deploy in the network to accomplish the tasks?
A. NetFlow
B. Protocol-Independent Multicast
C. Network Admission Control
D. Firewall Service Module
Answer: C

GIAC   GCFW   GCFW dumps   GCFW original questions   GCFW certification training

NO.12 Which of the following proxy servers is placed anonymously between the client and remote server and
handles all of the traffic from the client?
A. Web proxy server
B. Open proxy server
C. Forced proxy server
D. Caching proxy server
Answer: C

GIAC original questions   GCFW exam prep   GCFW

NO.13 Which of the following is the default port for POP3?
A. 25
B. 21
C. 80
D. 110
Answer: B

GIAC test answers   GCFW   GCFW

NO.14 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except the ports that must be used. He does need to have
port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still
worried about the programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block ICMP type 3 messages
C. Block all outgoing traffic on port 21
D. Block all outgoing traffic on port 53
Answer: A

GIAC study guide   GCFW   GCFW test   GCFW exam prep

NO.15 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP network. You have
been assigned a task to configure security mechanisms for the network of the company. You have
decided to configure a packet filtering firewall. Which of the following may be the reasons that made you
choose a packet filtering firewall as a security mechanism?
Each correct answer represents a complete solution. Choose all that apply.
A. It makes security transparent to end-users which provide easy use of the client application s.
B. It prevents application-layer attacks.
C. It is easy to install packet filtering firewalls in comparison to the other network security sol utions.
D. It easily matches most of the fields in Layer 3 packets and Layer 4 segment headers, and thus,
provides a lot of flexibility in implementing security policies.
Answer: A,C,D

GIAC answers real questions   GCFW   GCFW answers real questions   GCFW

NO.16 Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing
(APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an
attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether.
The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
Answer: A,C,D,E

GIAC   GCFW   GCFW   GCFW

NO.17 Which of the following are the countermeasures against a man-in-the-middle attack?
Each correct answer represents a complete solution. Choose all that apply.
A. Using Secret keys for authentication.
B. Using public key infrastructure authentication.
C. Using Off-channel verification.
D. Using basic authentication.
Answer: A,B,C

GIAC   GCFW   GCFW

NO.18 Which of the following number ranges is used for the IP Standard ACL?
A. 100-199
B. 1000-1099
C. 600-699
D. 1-99
Answer: D

GIAC   GCFW answers real questions   GCFW   GCFW exam prep

NO.19 Which of the following protocols does IPsec use to perform various security functions in the network?
Each correct answer represents a complete solution. Choose all that apply.
A. Skinny Client Control Protocol
B. Authentication Header
C. Encapsulating Security Payload
D. Internet Key Exchange
Answer: B,C,D

GIAC   GCFW   GCFW pdf

NO.20 Choose the best explanation for the resulting error when entering the command below.
A. The command is attempting to create a standard access list with extended access list param eters.
B. The ACL commands should be entered from the (config-router) configuration mode.
C. The wildcard mask is not provided for the source and destination addresses.
D. The port number given does not correspond with the proper transport protocol.
Answer: A

GIAC   GCFW   GCFW

NO.21 You work as a Security Manger for Tech Perfect Inc. The company has a Windows-based network.
You want to scroll real-time network traffic to a command console in a readable format. Which of the
following command line utilities will you use to accomplish the task?
A. WinPcap
B. WinDump
C. iptables
D. libpcap
Answer: B

GIAC certification training   GCFW   GCFW dumps   GCFW exam   GCFW dumps   GCFW braindump

NO.22 Which of the following statements are true about an IDP rule base notification?
A. It can be defined as reusable logical entities that the user can apply to the rules.
B. When an action is performed, a notification defines how to log information.
C. It is used to specify the type of network traffic that has to be monitored for attacks.
D. It directs an IDP to drop or close the connection.
Answer: B

GIAC   GCFW test questions   GCFW practice test

NO.23 Which of the following devices is used to identify out-of-date software versions, applicable patches,
system upgrades, etc?
A. Retinal scanner
B. Fingerprint reader
C. Smart card reader
D. Vulnerability scanner
Answer: D

GIAC   GCFW certification training   GCFW pdf

NO.24 John works as a professional Ethical Hacker. He has been assigned a project for testing the security of
www.we-are-secure.com. He wants to corrupt an IDS signature database so that performing attacks on
the server is made easy and he can observe the flaws in the We-are-secure server. To perform his task,
he first of all sends a virus that continuously changes its signature to avoid detection from IDS. Since the
new signature of the virus does not match the old signature, which is entered in the IDS signature
database, IDS becomes unable to point out the malicious virus. Which of the following IDS evasion
attacks is John performing?
A. Session splicing attack
B. Evasion attack
C. Polymorphic shell code attack
D. Insertion attack
Answer: C

GIAC   GCFW answers real questions   GCFW   GCFW   GCFW

NO.25 Which of the following types of Intrusion Detection Systems consists of an agent on a host that identifies
intrusions by analyzing system calls, application logs, file-system modifications (binaries, password files,
capability/acl databases) and other host activities and state?
A. HIDS
B. NIDS
C. APIDS
D. PIDS
Answer: A

GIAC dumps   GCFW exam prep   GCFW certification training   GCFW test answers   GCFW

NO.26 Which of the following commands configures a router to encrypt all passwords entered after the
command has been executed, as well as all passwords already on the running configuration?
A. no service password-encryption
B. enable password-encryption
C. no enable password-encryption
D. service password-encryption
Answer: D

GIAC   GCFW test questions   GCFW

NO.27 Which of the following statements about the traceroute utility are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
B. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
C. It records the time taken for a round trip for each packet at each router.
D. It is an online tool that performs polymorphic shell code attacks.
Answer: B,C

GIAC   GCFW   GCFW exam prep   GCFW certification   GCFW

NO.28 Which of the following components are usually found in an Intrusion detection system (IDS).?
Each correct answer represents a complete solution. Choose two.
A. Firewall
B. Console
C. Gateway
D. Modem
E. Sensor
Answer: B,E

GIAC braindump   GCFW questions   GCFW answers real questions   GCFW study guide

NO.29 Which of the following intrusion detection systems (IDS) monitors network traffic and compares it
against an established baseline?
A. Network-based
B. File-based
C. Signature-based
D. Anomaly-based
Answer: D

GIAC   GCFW certification training   GCFW   GCFW test questions   GCFW

NO.30 A scenario involves a pool of users with private IP addresses who need to access the Internet;
however, the company has a limited number of IP addresses and needs to ensure users occupy only one
public IP address.
Which technology is used to allow a pool of users to share one global IP address for Internet access?
A. Port Address Translation
B. Per-user Address Translation
C. Pool Address Translation
D. Private Address Translation
Answer: A

GIAC   GCFW   GCFW

ITCertKing offer the latest 100-101 exam material and high-quality 200-120 pdf questions & answers. Our 1z0-593 VCE testing engine and 70-414 study guide can help you pass the real exam. High-quality C_HANATEC131 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GCFW_exam.html

GIAC GCIA exam practice questions and answers

The exam materiala of the ITCertKing GIAC GCIA is specifically designed for candicates. It is a professional exam materials that the IT elite team specially tailored for you. Passed the exam certification in the IT industry will be reflected in international value. There are many dumps and training materials providers that would guarantee you pass the GIAC GCIA exam. ITCertKing speak with the facts, the moment when the miracle occurs can prove every word we said.

Are you still worrying about the high difficulty to pass GIAC certification GCIA exam? Are you still sleeplessly endeavoring to review the book in order to pass GIAC GCIA exam certification? Do you want to pass GIAC GCIA exam certification faster? Be quick to select our ITCertKing! Having it can quickly fulfill your dreams.

Exam Code: GCIA
Exam Name: GIAC (GIAC Certified Intrusion Analyst)
One year free update, No help, Full refund!
Total Q&A: 508 Questions and Answers
Last Update: 2014-01-01

Are you struggling to prepare GIAC certification GCIA exam? Do you want to achieve the goal of passing GIAC certification GCIA exam as soon as possible? You can choose the training materials provided by ITCertKing. If you choose ITCertKing, passing GIAC certification GCIA exam is no longer a dream.

You can first download ITCertKing's free exercises and answers about GIAC certification GCIA exam as a try, then you will feel that ITCertKing give you a reassurance for passing the exam. If you choose ITCertKing to provide you with the pertinence training, you can easily pass the GIAC certification GCIA exam.

GCIA Free Demo Download: http://www.itcertking.com/GCIA_exam.html

NO.1 Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a
suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review
to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.
A. Checkpoint files
B. EDB and STM database files
C. Temporary files
D. cookie files
Answer: A,B,C

GIAC   GCIA original questions   GCIA   GCIA   GCIA   GCIA

NO.2 Which of the following tools performs comprehensive tests against web servers for multiple items,
including over 6100 potentially dangerous files/CGIs?
A. Dsniff
B. Snort
C. Nikto
D. Sniffer
Answer: C

GIAC   GCIA   GCIA   GCIA   GCIA braindump

NO.3 Which of the following statements about a host-based intrusion prevention system (HIPS) are true?
Each correct answer represents a complete solution. Choose two.
A. It can detect events scattered over the network.
B. It can handle encrypted and unencrypted traffic equally.
C. It cannot detect events scattered over the network.
D. It is a technique that allows multiple computers to share one or more IP addresses.
Answer: B,C

GIAC   GCIA practice test   GCIA   GCIA   GCIA test questions

NO.4 Sasha wants to add an entry to your DNS database for your mail server. Which of the following types of
resource records will she use to accomplish this.?
A. ANAME
B. SOA
C. MX
D. CNAME
Answer: C

GIAC dumps   GCIA   GCIA pdf   GCIA dumps   GCIA

NO.5 Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned
to him to investigate a multimedia enabled mobile phone, which is suspected to be used in a cyber crime.
Adam uses a tool, with the help of which he can recover deleted text messages, photos, and call logs of
the mobile phone. Which of the following tools is Adam using?
A. FAU
B. FTK Imager
C. Galleta
D. Device Seizure
Answer: D

GIAC questions   GCIA exam simulations   GCIA

NO.6 Which of the following is the default port for Simple Network Management Protocol (SNMP)?
A. TCP port 110
B. TCP port 25
C. TCP port 80
D. UDP port 161
Answer: D

GIAC exam   GCIA test answers   GCIA   GCIA   GCIA

NO.7 Which of the following can be applied as countermeasures against DDoS attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Limiting the amount of network bandwidth.
B. Blocking IP address.
C. Using LM hashes for passwords.
D. Using Intrusion detection systems.
E. Using the network-ingress filtering.
Answer: A,B,D,E

GIAC   GCIA demo   GCIA questions   GCIA   GCIA certification

NO.8 Which of the following tools are used to determine the hop counts of an IP packet?
Each correct answer represents a complete solution. Choose two.
A. TRACERT
B. Ping
C. IPCONFIG
D. Netstat
Answer: A,B

GIAC   GCIA   GCIA   GCIA

NO.9 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Tunneling proxy server
B. Reverse proxy server
C. Anonymous proxy server
D. Intercepting proxy server
Answer: D

GIAC   GCIA   GCIA   GCIA demo   GCIA

NO.10 You are the Network Administrator for a large corporate network. You want to monitor all network traffic
on your local network for suspicious activities and receive a notification when a possible attack is in
process. Which of the following actions will you take for this?
A. Enable verbose logging on the firewall
B. Install a network-based IDS
C. Install a DMZ firewall
D. Install a host-based IDS
Answer: B

GIAC   GCIA test answers   GCIA test answers

NO.11 Which of the following is known as a message digest?
A. Hash function
B. Hashing algorithm
C. Spider
D. Message authentication code
Answer: A

GIAC exam simulations   GCIA   GCIA   GCIA

NO.12 Which of the following methods is a behavior-based IDS detection method?
A. Knowledge-based detection
B. Protocol detection
C. Statistical anomaly detection
D. Pattern matching detection
Answer: C

GIAC   GCIA   GCIA questions   GCIA answers real questions

NO.13 Mark works as a Network Security Administrator for BlueWells Inc. The company has a
Windowsbased network. Mark is giving a presentation on Network security threats to the newly recruited
employees of the company. His presentation is about the External threats that the company recently faced
in the past. Which of the following statements are true about external threats?
Each correct answer represents a complete solution. Choose three.
A. These are the threats that originate from outside an organization in which the attacker attempts to gain
unauthorized access.
B. These are the threats that originate from within the organization.
C. These are the threats intended to flood a network with large volumes of access requests.
D. These threats can be countered by implementing security controls on the perimeters of the network,
such as firewalls, which limit user access to the Internet.
Answer: A,C,D

GIAC   GCIA exam dumps   GCIA   GCIA study guide

NO.14 You work as a Network Administrator for Tech Perfect Inc. Your company has a Windows 2000based
network. You want to verify the connectivity of a host in the network. Which of the following utilities will you
use?
A. PING
B. TELNET
C. NETSTAT
D. TRACERT
Answer: A

GIAC   GCIA   GCIA   GCIA test answers   GCIA certification training   GCIA certification training

NO.15 Which of the following statements are true about snort?
Each correct answer represents a complete solution. Choose all that apply.
A. It develops a new signature to find vulnerabilities.
B. It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans,
CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors
and system vulnerabilities, and DDoS clients.
C. It encrypts the log file using the 256 bit AES encryption scheme algorithm.
D. It is used as a passive trap to record the presence of traffic that should not be found on a network, such
as NFS or Napster connections.
Answer: A,B,D

GIAC   GCIA   GCIA   GCIA questions   GCIA

NO.16 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
B. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
C. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: B

GIAC questions   GCIA   GCIA exam

NO.17 Adam works as a Security Analyst for Umbrella Inc. He is performing real-time traffic analysis on IP
networks using Snort. Adam is facing problems in analyzing intrusion data. Which of the following
software combined with Snort can Adam use to get a visual representation of intrusion data?
Each correct answer represents a complete solution. Choose all that apply.
A. Basic Analysis and Security Engine (BASE)
B. sguil
C. KFSensor
D. OSSIM
Answer: A,B,D

GIAC exam prep   GCIA exam prep   GCIA certification   GCIA pdf

NO.18 Which of the following Web attacks is performed by manipulating codes of programming languages
such as SQL, Perl, Java present in the Web pages?
A. Command injection attack
B. Code injection attack
C. Cross-Site Request Forgery
D. Cross-Site Scripting attack
Answer: B

GIAC   GCIA   GCIA   GCIA demo   GCIA pdf

NO.19 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc.
Which of the following types of Cross-Site Scripting attack Ryan intends to do?
A. Document Object Model (DOM)
B. Non persistent
C. SAX
D. Persistent
Answer: D

GIAC answers real questions   GCIA study guide   GCIA questions   GCIA exam dumps   GCIA

NO.20 Victor works as a network administrator for DataSecu Inc. He uses a dual firewall Demilitarized
Zone (DMZ) to insulate the rest of the network from the portions that is available to the Internet.
Which of the following security threats may occur if DMZ protocol attacks are performed?
Each correct answer represents a complete solution. Choose all that apply.
A. Attacker can perform Zero Day attack by delivering a malicious payload that is not a part of the
intrusion detection/prevention systems guarding the network.
B. Attacker can gain access to the Web server in a DMZ and exploit the database.
C. Attacker managing to break the first firewall defense can access the internal network without breaking
the second firewall if it is different.
D. Attacker can exploit any protocol used to go into the internal network or intranet of the com pany
Answer: A,B,D

GIAC   GCIA braindump   GCIA braindump   GCIA exam prep   GCIA

NO.21 John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite
fruit. John's password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Dictionary attack
B. Hybrid attack
C. Brute Force attack
D. Rule based attack
Answer: A,B,C

GIAC braindump   GCIA   GCIA   GCIA   GCIA certification

NO.22 Allen works as a professional Computer Hacking Forensic Investigator. A project has been assigned to
him to investigate a computer, which is used by the suspect to sexually harass the victim using instant
messenger program. Suspect's computer runs on Windows operating system. Allen wants to recover
password from instant messenger program, which suspect is using, to collect the evidence of the crime.
Allen is using Helix Live for this purpose. Which of the following utilities of Helix will he use to accomplish
the task?
A. Asterisk Logger
B. Access PassView
C. Mail Pass View
D. MessenPass
Answer: D

GIAC   GCIA practice test   GCIA   GCIA   GCIA test questions   GCIA certification

NO.23 SSH is a network protocol that allows data to be exchanged between two networks using a secure
channel. Which of the following encryption algorithms can be used by the SSH protocol?
Each correct answer represents a complete solution. Choose all that apply.
A. Blowfish
B. IDEA
C. DES
D. RC4
Answer: A,B,C

GIAC original questions   GCIA   GCIA exam prep

NO.24 You work as a Network Administrator for McNeil Inc. The company's Windows 2000-based network is
configured with Internet Security and Acceleration (ISA) Server 2000. You want to configure intrusion
detection on the server. You find that the different types of attacks on the Intrusion Detection tab page of
the IP Packet Filters Properties dialog box are disabled. What is the most likely cause?
A. The PPTP through ISA firewall check box on the PPTP tab page of the IP Packet Filters
Properties dialog box is not enabled.
B. The Enable IP routing check box on the General tab page of the IP Packet Filters Properties dialog box
is not selected.
C. The Log packets from Allow filters check box on the Packet Filters tab page of the IP Packet Filters
Properties dialog box is not enabled.
D. The Enable Intrusion detection check box on the General tab page of the IP Packet Filters Properties
dialog box is not selected.
Answer: D

GIAC   GCIA answers real questions   GCIA   GCIA

NO.25 This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a,
802.11b, and 802.11g standards. The main features of these tools are as follows: -It displays the signal
strength of a wireless network, MAC address, SSID, channel details, etc. -It is commonly used for the
following purposes:
A. War driving
B. Detecting unauthorized access points
C. Detecting causes of interference on a WLAN
D. WEP ICV error tracking
E. Making Graphs and Alarms on 802.11 Data, including Signal Strength
Answer: D

GIAC exam simulations   GCIA   GCIA study guide   GCIA answers real questions

NO.26 You work as a Network Administrator for Tech Perfect Inc. The office network is configured as an IPv6
network. You have to configure a computer with the IPv6 address, which is equivalent to an IPv4 publicly
routable address. Which of the following types of addresses will you choose?
A. Site-local
B. Global unicast
C. Local-link
D. Loopback
Answer: B

GIAC test questions   GCIA   GCIA certification training

NO.27 Andrew works as a System Administrator for NetPerfect Inc. All client computers on the network run on
Mac OS X. The Sales Manager of the company complains that his MacBook is not able to boot. Andrew
wants to check the booting process. He suspects that an error persists in the bootloader of Mac OS X.
Which of the following is the default bootloader on Mac OS X that he should use to resolve the issue?
A. LILO
B. BootX
C. NT Loader
D. GRUB
Answer: B

GIAC pdf   GCIA exam dumps   GCIA   GCIA exam simulations

NO.28 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the
Internet. Adam is still worried about programs like Hping2 that can get into a network through covert
channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block all outgoing traffic on port 21
C. Block all outgoing traffic on port 53
D. Block ICMP type 3 messages
Answer: A

GIAC   GCIA   GCIA   GCIA braindump

NO.29 Adam works as a Computer Hacking Forensic Investigator in a law firm. He has been assigned with
his first project. Adam collected all required evidences and clues. He is now required to write an
investigative report to present before court for further prosecution of the case. He needs guidelines to
write an investigative report for expressing an opinion. Which of the following are the guidelines to write
an investigative report in an efficient way?
Each correct answer represents a complete solution. Choose all that apply.
A. All ideas present in the investigative report should flow logically from facts to conclusions.
B. Opinion of a lay witness should be included in the investigative report.
C. The investigative report should be understandable by any reader.
D. There should not be any assumptions made about any facts while writing the investigative report.
Answer: A,C,D

GIAC questions   GCIA   GCIA answers real questions   GCIA

NO.30 Which of the following file systems is designed by Sun Microsystems?
A. NTFS
B. CIFS
C. ZFS
D. ext2
Answer: C

GIAC   GCIA study guide   GCIA   GCIA   GCIA study guide

ITCertKing offer the latest NS0-155 exam material and high-quality 000-N45 pdf questions & answers. Our MB6-889 VCE testing engine and 70-583 study guide can help you pass the real exam. High-quality 70-480 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GCIA_exam.html

Latest GIAC GSEC of exam practice questions and answers

To pass GIAC GSEC certification exam seems to be a very difficult task. Having registered GSEC test, are you worrying about how to prepare for the exam? If so, please see the following content, I now tell you a shortcut through the GSEC exam. The certification training dumps that can let you pass the test first time have appeared and it is ITCertKing GIAC GSEC exam dumps. If you would like to sail through the test, come on and try it.

Are you satisfied with your present job? Are you satisfied with what you are doing? Do you want to improve yourself? To master some useful skills is helpful to you. Now that you choose to work in the IT industry, you must register IT certification test and get the IT certificate which will help you to upgrade yourself. What's more important, you can prove that you have mastered greater skills. And then, to take GIAC GSEC exam can help you to express your desire. Don't worry. ITCertKing will help you to find what you need in the exam and our dumps must help you to obtain GSEC certificate.

ITCertKing not only provide the products which have high quality to each candidate, but also provides a comprehensive after-sales service. If you are using our products, we will let you enjoy one year of free updates. So that you can get the latest exam information in time. We will be use the greatest efficiency to service each candidate.

GIAC certification GSEC exam can give you a lot of change. Such as work, life would have greatly improve. Because, after all, GSEC is a very important certified exam of GIAC. But GSEC exam is not so simple.

ITCertKing have a strong It expert team to constantly provide you with an effective training resource. They continue to use their rich experience and knowledge to study the real exam questions of the past few years. Finally ITCertKing's targeted practice questions and answers have advent, which will give a great help to a lot of people participating in the IT certification exams. You can free download part of ITCertKing's simulation test questions and answers about GIAC certification GSEC exam as a try. Through the proof of many IT professionals who have use ITCertKing's products, ITCertKing is very reliable for you. Generally, if you use ITCertKing's targeted review questions, you can 100% pass GIAC certification GSEC exam. Please Add ITCertKing to your shopping cart now! Maybe the next successful people in the IT industry is you.

Exam Code: GSEC
Exam Name: GIAC (GIAC Security Essentials Certification)
One year free update, No help, Full refund!
Total Q&A: 280 Questions and Answers
Last Update: 2014-01-01

GSEC Free Demo Download: http://www.itcertking.com/GSEC_exam.html

NO.1 The /cat/etc/passwd file on a client computer contains the following entry: Martha:x:::::bin/false
Which of the following is true for Martha?
A. Martha's password is x.
B. Martha has full access on the computer.
C. Martha has limited access on the computer.
D. Martha has been denied access on the computer.
Answer: D

GIAC answers real questions   GSEC   GSEC certification   GSEC   GSEC

NO.2 Which of the following statements about service pack are true? Each correct answer represents a
complete solution. Choose two.
A. It is a collection of Fixes and Patches in a single product.
B. It is a medium by which product updates are distributed.
C. It is a term generally related to security problems in a software.
D. It is a term used for securing an operating system.
Answer: A,B

GIAC answers real questions   GSEC exam dumps   GSEC   GSEC

NO.3 You work as a Network Administrator for Tech Perfect Inc. The company has a Linux-based network.
You have configured a VPN server for remote users to connect to the company's network. Which of the
following encryption types will Linux use?
A. MSCHAP
B. RC2
C. 3DES
D. CHAP
Answer: C

GIAC   GSEC   GSEC pdf   GSEC

NO.4 Which of the following statements are true about satellite broadband Internet access? Each correct
answer represents a complete solution. Choose two.
A. It is among the least expensive way of gaining broadband Internet access.
B. It is among the most expensive way of gaining broadband Internet access.
C. This type of internet access has low latency compared to other broadband services.
D. This type of internet access has high latency compared to other broadband services.
Answer: B, D

GIAC   GSEC practice test   GSEC

NO.5 You work as a Network Administrator for Perfect World Inc. You are configuring a network that will
include 1000BaseT network interface cards in servers and client computers. What is the maximum
segment length that a 1000BaseT network supports?
A. 100 meters
B. 480 meters
C. 1000 meters
D. 10 meters
Answer: A

GIAC test   GSEC answers real questions   GSEC   GSEC   GSEC

NO.6 You work as a Linux Technician for Tech Perfect Inc. You want to protect your server from intruders
who exploit services that are started with TCP Wrappers. Which of the following files will help you protect
the server?
Each correct answer represents a part of the solution. Choose two.
A. httpd.conf
B. lilo.conf
C. hosts.deny
D. hosts.allow
Answer: C, D

GIAC   GSEC exam   GSEC pdf

NO.7 Which of the following ports is the default port for IMAP4 protocol?
A. TCP port 443
B. TCP port 143
C. TCP port 25
D. TCP port 80
Answer: B

GIAC   GSEC   GSEC   GSEC test answers   GSEC dumps

NO.8 You have a customer who wants to put wireless internet in his remote cabin. The cabin is many miles
from any other building with internet connectivity or access points. What should you recommend?
A. DSL
B. FIOS connection
C. Satellite internet
D. Microwave connection
Answer: C

GIAC demo   GSEC   GSEC   GSEC

NO.9 What is the maximum cable segment length supported by a 10BaseT network?
A. 100 meters
B. 300 meters
C. 250 meters
D. 500 meters
E. 150 meters
Answer: A

GIAC certification   GSEC   GSEC   GSEC

NO.10 Which of the following records is the first entry in a DNS database file?
A. SOA
B. SRV
C. CNAME
D. MX
Answer: A

GIAC test   GSEC   GSEC certification training   GSEC   GSEC

NO.11 Which of the following is used to implement a procedure to control inbound and outbound traffic on a
network?
A. Cookies
B. Sam Spade
C. NIDS
D. ACL
Answer: D

GIAC   GSEC   GSEC answers real questions   GSEC exam prep

NO.12 Which of the following is a security threat if included in the search path of a computer?
A. /usr
B. /sbin
C. .
D. /usr/bin
Answer: C

GIAC exam simulations   GSEC questions   GSEC practice test   GSEC   GSEC

NO.13 Which of the following enables an inventor to legally enforce his right to exclude others from using his
invention?
A. Patent
B. Artistic license
C. Phishing
D. Spam
Answer: A

GIAC   GSEC demo   GSEC braindump   GSEC   GSEC

NO.14 Which of the following statements about the availability concept of Information security management is
true?
A. It ensures reliable and timely access to resources.
B. It determines actions and behaviors of a single individual within a system.
C. It ensures that unauthorized modifications are not made to data by authorized personnel or processes.
D. It ensures that modifications are not made to data by unauthorized personnel or processes.
Answer: A

GIAC test questions   GSEC braindump   GSEC   GSEC   GSEC

NO.15 John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based
network. John is working as a root user on the Linux operating system. He executes the following
command in the terminal:
echo $USER, $UID
Which of the following will be displayed as the correct output of the above command?
A. root, 500
B. root, 0
C. John, 502
D. John, 0
Answer: B

GIAC answers real questions   GSEC certification   GSEC original questions   GSEC braindump

NO.16 Which of the following terms refers to manual assignment of IP addresses to computers and devices?
A. Static IP addressing
B. Spoofing
C. APIPA
D. Dynamic IP addressing
Answer: A

GIAC test   GSEC   GSEC exam   GSEC   GSEC

NO.17 You have been hired by the company to upgrade its existing Windows NT 4.0 network to a Windows
2000 based network. In the past, the company's support group has faced difficult time because users
changed the configuration of their workstations. Which of the following features of the Active Directory
would best justify the move to the Windows 2000 network.?
A. Dynamic domain name system (DDNS)
B. Organizational unit (OU)
C. Dynamic host configuration protocol (DHCP)
D. Group policy object (GPO)
Answer: D

GIAC practice test   GSEC exam simulations   GSEC   GSEC   GSEC

NO.18 Which of the following is not an encryption technology?
A. Blowfish
B. KILL
C. 3DES
D. MD5
Answer: B

GIAC original questions   GSEC study guide   GSEC exam dumps   GSEC   GSEC exam simulations   GSEC

NO.19 Which of the following terms is synonymous with the willful destruction of another person's property?
A. Spoofing
B. Hacking
C. Phishing
D. Vandalism
Answer: D

GIAC test questions   GSEC exam   GSEC   GSEC   GSEC

NO.20 Which of the following frequencies are used by wireless standard 802.11n to operate? Each correct
answer represents a complete solution. Choose two.
A. 1 Ghz
B. 2 Ghz
C. 2.4 Ghz
D. 5 Ghz
Answer: C, D

GIAC   GSEC certification training   GSEC exam prep   GSEC exam simulations   GSEC practice test

NO.21 Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 domain-
based network. The company has two offices in different cities. The offices are connected through the
Internet. Both offices have a Windows 2003 server named SERV1 and SERV2 respectively. Mark is
required to create a secure connection between both offices. He configures a VPN connection between
the offices using the two servers. He uses L2TP for VPN and also configures an IPSec tunnel. Which of
the following will he achieve with this configuration?
Each correct answer represents a part of the solution. Choose two.
A. Encryption for the local files stored on the two servers
B. Highest possible encryption for traffic between the offices
C. Mutual authentication between the two servers
D. Extra bandwidth on the Internet connection
Answer: B, C

GIAC   GSEC   GSEC   GSEC original questions

NO.22 Which of the following statements regarding Secure Sockets Layer (SSL) are true? Each correct
answer represents a complete solution. Choose all that apply.
A. SSL provides message integrity to prevent alteration to the message.
B. During SSL session, information is encrypted to prevent unauthorized disclosure.
C. SSL can process credit cards.
D. SSL can support 128-bit encryption.
Answer: A,B,D

GIAC test questions   GSEC   GSEC test   GSEC test answers   GSEC demo

NO.23 You work as a Network Administrator for McRoberts Inc. The company has a Linux-based network. You
have created a script named lf.cgi. You want to provide the following permissions on it:
rwsr-sr-- Which of the following commands will you execute?
A. chmod 2754
B. chmod 6754
C. chmod 7754
D. chmod 4754
Answer: B

GIAC questions   GSEC   GSEC questions   GSEC   GSEC   GSEC

NO.24 Which of the following devices connects two segments of the same local area network (LAN) but keeps
traffic separate on the two segments?
A. Hub
B. Modem
C. Bridge
D. Switch
Answer: C

GIAC exam prep   GSEC   GSEC

NO.25 Which of the following directories contains the log files in Linux?
A. /log
B. /root
C. /var/log
D. /etc
Answer: C

GIAC questions   GSEC practice test   GSEC   GSEC

NO.26 You want to temporarily change your primary group to another group of which you are a member. In
this process, a new shell will be created, and when you exit the shell, your previous group will be
reinstated. Which of the following commands will you use to accomplish this task?
A. newgrp
B. chgrp
C. chown
D. chmod
Answer: A

GIAC exam prep   GSEC dumps   GSEC

NO.27 Which of the following is NOT the feature of SELinux in the Red Hat enterprise Linux?
A. SELinux does not provide Kernel-level security.
B. All process and files have a context.
C. SELinux implements Mandatory Access Control (MAC) security in Red Hat Enterprise Linux.
D. SELinux applies to all users, including root.
Answer: A

GIAC   GSEC   GSEC   GSEC certification   GSEC test   GSEC

NO.28 Which of the following protocols multicasts messages and information among all member devices in
an IP multicast group?
A. IGMP
B. TCP
C. ARP
D. ICMP
Answer: A

GIAC   GSEC   GSEC answers real questions   GSEC study guide   GSEC

NO.29 Rick works as a Network Administrator. He is configuring the systems for maximum security. Before
using the security template, he wants to edit it to change some of the security settings that are not
required for now. Which of the following tools will he choose, to edit the security template?
A. Group Policy MMC snap-in
B. Security Configuration and Analysis MMC snap-in
C. Security Templates MMC snap-in
D. SECEDIT utility
Answer: C

GIAC exam prep   GSEC   GSEC   GSEC exam

NO.30 Which of the following terms describes software technologies that improve portability, manageability
and compatibility of applications by encapsulating them from the underlying operating system on which
they are executed?
A. Application virtualization
B. Encapsulation
C. System hardening
D. Failover
Answer: A

GIAC   GSEC test   GSEC study guide   GSEC braindump   GSEC study guide

ITCertKing offer the latest ICBB exam material and high-quality HP0-J61 pdf questions & answers. Our CTAL-TA_Syll2012 VCE testing engine and 000-318 study guide can help you pass the real exam. High-quality 646-206 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GSEC_exam.html

Latest GIAC GCFW of exam practice questions and answers

Now IT industry is more and more competitive. Passing GIAC GCFW exam certification can effectively help you entrench yourself and enhance your status in this competitive IT area. In our ITCertKing you can get the related GIAC GCFW exam certification training tools. Our ITCertKing IT experts team will timely provide you the accurate and detailed training materials about GIAC certification GCFW exam. Through the learning materials and exam practice questions and answers provided by ITCertKing, we can ensure you have a successful challenge when you are the first time to participate in the GIAC certification GCFW exam. Above all, using ITCertKing you do not spend a lot of time and effort to prepare for the exam.

There are a lot of sites provide the GIAC GCFW exam certification and other training materials for you . ITCertKing is only website which can provide you GIAC GCFW exam certification with high quality. In the guidance and help of ITCertKing, you can through your GIAC GCFW exam the first time. The questions and the answer provided by ITCertKing are IT experts use their extensive knowledge and experience manufacturing out . It can help your future in the IT industry to the next level.

ITCertKing is a professional IT certification sites, the certification success rate is 100%. This number is proved by candidates through practice. Because ITCertKing has a strong IT team of experts, they are committed to study exam questions and answers, and serve the vital interests of the majority of candidates. They use their own professional mind and experience to meet the needs of the candidates. According to the needs of the candidate, they consider the issue from all angles, and manufacturing applicability exam training materials. This material is GIAC GCFW exam training materials, which including questions and answers.

Exam Code: GCFW
Exam Name: GIAC (GIAC Certified Firewall Analyst)
One year free update, No help, Full refund!
Total Q&A: 391 Questions and Answers
Last Update: 2013-12-09

How far the distance between words and deeds? It depends to every person. If a person is strong-willed, it is close at hand. I think you should be such a person. Since to choose to participate in the GIAC GCFW certification exam, of course, it is necessary to have to go through. This is also the performance that you are strong-willed. ITCertKing GIAC GCFW exam training materials is the best choice to help you pass the exam. The training materials of ITCertKing website have a unique good quality on the internet. If you want to pass the GIAC GCFW exam, you'd better to buy ITCertKing's exam training materials quickly.

GCFW Free Demo Download: http://www.itcertking.com/GCFW_exam.html

NO.1 Which of the following statements are true about an IDP rule base notification?
A. It can be defined as reusable logical entities that the user can apply to the rules.
B. When an action is performed, a notification defines how to log information.
C. It is used to specify the type of network traffic that has to be monitored for attacks.
D. It directs an IDP to drop or close the connection.
Answer: B

GIAC exam prep   GCFW certification   GCFW exam prep

NO.2 Which of the following components are usually found in an Intrusion detection system (IDS).?
Each correct answer represents a complete solution. Choose two.
A. Firewall
B. Console
C. Gateway
D. Modem
E. Sensor
Answer: B,E

GIAC   GCFW certification training   GCFW   GCFW certification training

NO.3 Choose the best explanation for the resulting error when entering the command below.
A. The command is attempting to create a standard access list with extended access list param eters.
B. The ACL commands should be entered from the (config-router) configuration mode.
C. The wildcard mask is not provided for the source and destination addresses.
D. The port number given does not correspond with the proper transport protocol.
Answer: A

GIAC study guide   GCFW answers real questions   GCFW   GCFW

NO.4 Which of the following is the default port for POP3?
A. 25
B. 21
C. 80
D. 110
Answer: B

GIAC test answers   GCFW exam   GCFW   GCFW

NO.5 Which of the following are the countermeasures against a man-in-the-middle attack?
Each correct answer represents a complete solution. Choose all that apply.
A. Using Secret keys for authentication.
B. Using public key infrastructure authentication.
C. Using Off-channel verification.
D. Using basic authentication.
Answer: A,B,C

GIAC pdf   GCFW certification training   GCFW certification

NO.6 Which of the following intrusion detection systems (IDS) monitors network traffic and compares it
against an established baseline?
A. Network-based
B. File-based
C. Signature-based
D. Anomaly-based
Answer: D

GIAC   GCFW braindump   GCFW   GCFW   GCFW certification

NO.7 Which of the following IDs is used to reassemble the fragments of a datagram at the destination point?
A. IP identification number
B. SSID
C. MAK ID
D. IP address
Answer: A

GIAC braindump   GCFW   GCFW

NO.8 You work as a Network Architect for Tech Perfect Inc. The company has a corporate LAN network. You
will have to perform the following tasks:
l Limit events that occur from security threats such as viruses, worms, and spyware.
l Restrict access to the network based on identity or security posture.
Which of the following services will you deploy in the network to accomplish the tasks?
A. NetFlow
B. Protocol-Independent Multicast
C. Network Admission Control
D. Firewall Service Module
Answer: C

GIAC certification training   GCFW exam simulations   GCFW   GCFW

NO.9 Which of the following number ranges is used for the IP Standard ACL?
A. 100-199
B. 1000-1099
C. 600-699
D. 1-99
Answer: D

GIAC   GCFW   GCFW braindump   GCFW

NO.10 Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6?
A. Electronic Codebook (ECB) Mode
B. Cipher Block Chaining (CBC) Mode
C. Propagating Cipher Block Chaining (PCBC) Mode
D. Cipher Feedback (CFB) Mode
Answer: B

GIAC practice test   GCFW   GCFW original questions

NO.11 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except the ports that must be used. He does need to have
port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still
worried about the programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block ICMP type 3 messages
C. Block all outgoing traffic on port 21
D. Block all outgoing traffic on port 53
Answer: A

GIAC answers real questions   GCFW   GCFW

NO.12 Which of the following protocols does IPsec use to perform various security functions in the network?
Each correct answer represents a complete solution. Choose all that apply.
A. Skinny Client Control Protocol
B. Authentication Header
C. Encapsulating Security Payload
D. Internet Key Exchange
Answer: B,C,D

GIAC dumps   GCFW   GCFW exam prep   GCFW certification training   GCFW

NO.13 Which of the following can be monitored by using the host intrusion detection system (HIDS)?
Each correct answer represents a complete solution. Choose two.
A. Computer performance
B. File system integrity
C. Storage space on computers
D. System files
Answer: B,D

GIAC   GCFW test questions   GCFW answers real questions   GCFW   GCFW test questions   GCFW exam simulations

NO.14 Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing
(APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an
attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether.
The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
Answer: A,C,D,E

GIAC   GCFW   GCFW certification training   GCFW study guide   GCFW

NO.15 Which of the following is an attack with IP fragments that cannot be reassembled?
A. Dictionary attack
B. Smurf attack
C. Teardrop attack
D. Password guessing attack
Answer: C

GIAC pdf   GCFW   GCFW   GCFW   GCFW exam

NO.16 Which of the following types of Intrusion Detection Systems consists of an agent on a host that identifies
intrusions by analyzing system calls, application logs, file-system modifications (binaries, password files,
capability/acl databases) and other host activities and state?
A. HIDS
B. NIDS
C. APIDS
D. PIDS
Answer: A

GIAC exam simulations   GCFW study guide   GCFW

NO.17 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP network. You have
been assigned a task to configure security mechanisms for the network of the company. You have
decided to configure a packet filtering firewall. Which of the following may be the reasons that made you
choose a packet filtering firewall as a security mechanism?
Each correct answer represents a complete solution. Choose all that apply.
A. It makes security transparent to end-users which provide easy use of the client application s.
B. It prevents application-layer attacks.
C. It is easy to install packet filtering firewalls in comparison to the other network security sol utions.
D. It easily matches most of the fields in Layer 3 packets and Layer 4 segment headers, and thus,
provides a lot of flexibility in implementing security policies.
Answer: A,C,D

GIAC study guide   GCFW   GCFW   GCFW

NO.18 Which of the following statements about the traceroute utility are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
B. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
C. It records the time taken for a round trip for each packet at each router.
D. It is an online tool that performs polymorphic shell code attacks.
Answer: B,C

GIAC   GCFW braindump   GCFW   GCFW

NO.19 Which of the following are the reasons that network administrators use Access Control Lists?
Each correct answer represents a complete solution. Choose two.
A. Encrypting data to be routed
B. Removing weak user password
C. Controlling VTY access into a router
D. Filtering traffic as it passes through a router
Answer: C,D

GIAC exam prep   GCFW exam prep   GCFW   GCFW test answers   GCFW

NO.20 Which of the following limits the number of packets seen by tcpdump?
A. BPF-based filter
B. Recipient filtering
C. Sender filtering
D. IFilters
Answer: A

GIAC   GCFW   GCFW   GCFW   GCFW

NO.21 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
B. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
C. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: C

GIAC braindump   GCFW   GCFW practice test   GCFW dumps   GCFW demo   GCFW

NO.22 A scenario involves a pool of users with private IP addresses who need to access the Internet;
however, the company has a limited number of IP addresses and needs to ensure users occupy only one
public IP address.
Which technology is used to allow a pool of users to share one global IP address for Internet access?
A. Port Address Translation
B. Per-user Address Translation
C. Pool Address Translation
D. Private Address Translation
Answer: A

GIAC   GCFW   GCFW dumps   GCFW

NO.23 Which of the following devices is used to identify out-of-date software versions, applicable patches,
system upgrades, etc?
A. Retinal scanner
B. Fingerprint reader
C. Smart card reader
D. Vulnerability scanner
Answer: D

GIAC braindump   GCFW   GCFW   GCFW   GCFW test questions

NO.24 Which of the following ICMPv6 neighbor discovery messages is sent by hosts to request an immediate
router advertisement, instead of waiting for the next scheduled advertisement?
A. Router Advertisement
B. Neighbor Advertisement
C. Router Solicitation
D. Neighbor Solicitation
Answer: C

GIAC questions   GCFW   GCFW pdf

NO.25 Which of the following proxy servers is placed anonymously between the client and remote server and
handles all of the traffic from the client?
A. Web proxy server
B. Open proxy server
C. Forced proxy server
D. Caching proxy server
Answer: C

GIAC   GCFW practice test   GCFW braindump   GCFW   GCFW answers real questions   GCFW test answers

NO.26 John works as a professional Ethical Hacker. He has been assigned a project for testing the security of
www.we-are-secure.com. He wants to corrupt an IDS signature database so that performing attacks on
the server is made easy and he can observe the flaws in the We-are-secure server. To perform his task,
he first of all sends a virus that continuously changes its signature to avoid detection from IDS. Since the
new signature of the virus does not match the old signature, which is entered in the IDS signature
database, IDS becomes unable to point out the malicious virus. Which of the following IDS evasion
attacks is John performing?
A. Session splicing attack
B. Evasion attack
C. Polymorphic shell code attack
D. Insertion attack
Answer: C

GIAC   GCFW demo   GCFW   GCFW pdf   GCFW demo

NO.27 A packet filtering firewall inspects each packet passing through the network and accepts or rejects it
based on user-defined rules. Based on which of the following information are these rules set to filter the
packets?
Each correct answer represents a complete solution. Choose all that apply.
A. Layer 4 protocol information
B. Actual data in the packet
C. Interface of sent or received traffic
D. Source and destination Layer 3 address
Answer: A,C,D

GIAC exam dumps   GCFW answers real questions   GCFW   GCFW exam simulations

NO.28 WinDump, tcpdump, and Wireshark specify which fields of information libpcap should record.
Which of the following filters do they use in order to accomplish the task?
A. Berkeley Packet Filter
B. IM filter
C. Web filter
D. FIR filter
Answer: A

GIAC exam simulations   GCFW demo   GCFW   GCFW   GCFW

NO.29 Which of the following commands configures a router to encrypt all passwords entered after the
command has been executed, as well as all passwords already on the running configuration?
A. no service password-encryption
B. enable password-encryption
C. no enable password-encryption
D. service password-encryption
Answer: D

GIAC   GCFW original questions   GCFW demo   GCFW

NO.30 You work as a Security Manger for Tech Perfect Inc. The company has a Windows-based network.
You want to scroll real-time network traffic to a command console in a readable format. Which of the
following command line utilities will you use to accomplish the task?
A. WinPcap
B. WinDump
C. iptables
D. libpcap
Answer: B

GIAC   GCFW   GCFW exam dumps

ITCertKing offer the latest 70-461 exam material and high-quality C_TSCM62_65 pdf questions & answers. Our HP0-J64 VCE testing engine and CAT-380 study guide can help you pass the real exam. High-quality MB6-889 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GCFW_exam.html

The Best GIAC GSNA exam practice questions and answers

ITCertKing IT Certification has years of training experience. ITCertKing GIAC GSNA exam training materials is a reliable product. IT elite team continue to provide our candidates with the latest version of the GSNA exam training materials. Our staff made ​​great efforts to ensure that you always get good grades in examinations. To be sure, ITCertKing GIAC GSNA exam materials can provide you with the most practical IT certification material.

The ITCertKing GIAC GSNA exam questions is 100% verified and tested. ITCertKing GIAC GSNA exam practice questions and answers is the practice test software. In ITCertKing, you will find the best exam preparation material. The material including practice questions and answers. The information we have could give you the opportunity to practice issues, and ultimately achieve your goal that through GIAC GSNA exam certification.

What is ITCertKing GIAC GSNA exam training materials? There are many online sites provide GIAC GSNA exam training resources. But ITCertKing provide you the most actual information. ITCertKing have professional personnel of certification experts, technical staff, and comprehensive language masters. They are always studying the latest GIAC GSNA exam. Therefore, if you want to pass the GIAC GSNA examination, please Login ITCertKing website. It will let you close to your success, and into your dream paradise step by step.

Having a GIAC GSNA certification can enhance your employment prospects,and then you can have a lot of good jobs. ITCertKing is a website very suitable to candidates who participate in the GIAC certification GSNA exam. ITCertKing can not only provide all the information related to the GIAC certification GSNA exam for the candidates, but also provide a good learning opportunity for them. ITCertKing be able to help you pass GIAC certification GSNA exam successfully.

Exam Code: GSNA
Exam Name: GIAC (GIAC Systems and Network Auditor)
One year free update, No help, Full refund!
Total Q&A: 368 Questions and Answers
Last Update: 2013-12-09

ITCertKing can provide you with a reliable and comprehensive solution to pass GIAC certification GSNA exam. Our solution can 100% guarantee you to pass the exam, and also provide you with a one-year free update service. You can also try to free download the GIAC certification GSNA exam testing software and some practice questions and answers to on ITCertKing website.

GIAC GSNA is a certification exam to test IT professional knowledge. ITCertKing is a website which can help you quickly pass the GIAC certification GSNA exams. Before the exam, you use pertinence training and test exercises and answers that we provide, and in a short time you'll have a lot of harvest.

When you select to use ITCertKing's products, you have set the first foot on the peak of the IT industry and the way to your dream is one step closer. The practice questions of ITCertKing can not only help you pass GIAC certification GSNA exam and consolidate your professional knowledge, but also provide you one year free update service.

GSNA Free Demo Download: http://www.itcertking.com/GSNA_exam.html

NO.1 George works as an office assistant in Soft Well Inc. The company uses the Windows Vista operating
system. He wants to disable a program running on a computer. Which of the following Windows Defender
tools will he use to accomplish the task?
A. Allowed items
B. Quarantined items
C. Options
D. Software Explorer
Answer: D

GIAC test   GSNA   GSNA

NO.2 A Web developer with your company wants to have wireless access for contractors that come in to
work on various projects. The process of getting this approved takes time. So rather than wait, he has put
his own wireless router attached to one of the network ports in his department. What security risk does
this present?
A. None, adding a wireless access point is a common task and not a security risk.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. An unauthorized WAP is one way for hackers to get into a network.
Answer: D

GIAC   GSNA test answers   GSNA study guide

NO.3 Which of the following statements are true about locating rogue access points using WLAN discovery
software such as NetStumbler, Kismet, or MacStumbler if you are using a Laptop integrated with Wi-Fi
compliant MiniPCI card? (Choose two)
A. These tools can determine the rogue access point even when it is attached to a wired network.
B. These tools can determine the authorization status of an access point.
C. These tools cannot detect rogue access points if the victim is using data encryption.
D. These tools detect rogue access points if the victim is using IEEE 802.11 frequency bands.
Answer: B,D

GIAC   GSNA certification   GSNA certification   GSNA

NO.4 You work as a Network Administrator for XYZ CORP. The company has a Windows Active
Directory-based single domain single forest network. The functional level of the forest is Windows Server
2003. The company's management has decided to provide laptops to its sales team members. These
laptops are equipped with smart card readers. The laptops will be configured as wireless network clients.
You are required to accomplish the following tasks: The wireless network communication should be
secured. The laptop users should be able to use smart cards for getting authenticated. In order to
accomplish the tasks, you take the following steps: Configure 802.1x and WEP for the wireless
connections. Configure the PEAP-MS-CHAP v2 protocol for authentication. What will happen after you
have taken these steps?
A. Both tasks will be accomplished.
B. The laptop users will be able to use smart cards for getting authenticated.
C. The wireless network communication will be secured.
D. None of the tasks will be accomplished.
Answer: C

GIAC original questions   GSNA pdf   GSNA exam prep   GSNA demo

NO.5 You work as a Network Auditor for XYZ CORP. The company has a Windows-based network. While
auditing the company's network, you are facing problems in searching the faults and other entities that
belong to it. Which of the following risks may occur due to the existence of these problems?
A. Residual risk
B. Inherent risk
C. Secondary risk
D. Detection risk
Answer: D

GIAC   GSNA   GSNA   GSNA

NO.6 John works as a Security Professional. He is assigned a project to test the security of www.we-
are-secure.com. John wants to get the information of all network connections and listening ports in the
numerical form. Which of the following commands will he use?
A. netstat -e
B. netstat r
C. netstat -s
D. netstat an
Answer: D

GIAC   GSNA   GSNA   GSNA original questions

NO.7 You run the wc -c file1.txt command. If this command displays any error message, you want to store the
error message in the error.txt file. Which of the following commands will you use to accomplish the task?
A. wc -c file1.txt >>error.txt
B. wc -c file1.txt 1>error.txt
C. wc -c file1.txt 2>error.txt
D. wc -c file1.txt >error.txt
Answer: C

GIAC   GSNA   GSNA   GSNA

NO.8 Which of the following is a wireless auditing tool that is used to pinpoint the actual physical location of
wireless devices in the network?
A. KisMAC
B. Ekahau
C. Kismet
D. AirSnort
Answer: B

GIAC   GSNA exam dumps   GSNA test answers   GSNA

NO.9 Which of the following allows the use of multiple virtual servers using different DNS names resolved by
the same IP address?
A. HTTP 1.1
B. JAVA
C. HTML
D. VPN
Answer: A

GIAC   GSNA   GSNA test answers   GSNA

NO.10 Which of the following statements about the traceroute utility are true?
A. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
B. It records the time taken for a round trip for each packet at each router.
C. It is an online tool that performs polymorphic shell code attacks.
D. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
Answer: A,B

GIAC   GSNA braindump   GSNA   GSNA certification

NO.11 John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based
network. John is working as a root user on the Linux operating system. He wants to forward all the kernel
messages to the remote host having IP address 192.168.0.1. Which of the following changes will he
perform in the syslog.conf file to accomplish the task?
A. kern.* @192.168.0.1
B. !*.* @192.168.0.1
C. !kern.* @192.168.0.1
D. *.* @192.168.0.1
Answer: A

GIAC practice test   GSNA   GSNA   GSNA demo   GSNA test

NO.12 John works as a contract Ethical Hacker. He has recently got a project to do security checking for
www.we-are-secure.com. He wants to find out the operating system of the we-are-secure server in the
information gathering step. Which of the following commands will he use to accomplish the task? (Choose
two)
A. nc 208.100.2.25 23
B. nmap -v -O www.we-are-secure.com
C. nc -v -n 208.100.2.25 80
D. nmap -v -O 208.100.2.25
Answer: B,D

GIAC demo   GSNA   GSNA   GSNA   GSNA exam prep

NO.13 Which of the following tools works both as an encryption-cracking tool and as a keylogger?
A. Magic Lantern
B. KeyGhost Keylogger
C. Alchemy Remote Executor
D. SocketShield
Answer: A

GIAC   GSNA exam simulations   GSNA   GSNA braindump

NO.14 Sarah works as a Web Developer for XYZ CORP. She is creating a Web site for her company. Sarah
wants greater control over the appearance and presentation of Web pages. She wants the ability to
precisely specify the display attributes and the appearance of elements on the Web pages. How will she
accomplish this?
A. Use the Database Design wizard.
B. Make two templates, one for the index page and the other for all other pages.
C. Use Cascading Style Sheet (CSS).
D. Make a template and use it to create each Web page.
Answer: C

GIAC certification training   GSNA demo   GSNA   GSNA exam   GSNA

NO.15 You work as a Network Administrator for XYZ CORP. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single forest single
domain network. You have installed a Windows Server 2008 computer. You have configured auditing on
this server. The client computers of the company use the Windows XP Professional operating system.
You want to audit each event that is related to a user managing an account in the user database on the
computer where the auditing is configured. To accomplish the task, you have enabled the Audit account
management option on the server. Which of the following events can be audited by enabling this audit
option.?
A. Access to an Active Directory object
B. Change of password for a user account
C. Addition of a user account to a group
D. Creation of a user account
Answer: B,C,D

GIAC   GSNA study guide   GSNA certification   GSNA practice test   GSNA test

NO.16 You check performance logs and note that there has been a recent dramatic increase in the amount of
broadcast traffic. What is this most likely to be an indicator of?
A. Misconfigured router
B. DoS attack
C. Syn flood
D. Virus
Answer: B

GIAC   GSNA dumps   GSNA

NO.17 Which of the following is Microsoft's implementation of the file and application server for the Internet
and private intranets?
A. Internet Server Service (ISS)
B. Internet Server (IS)
C. WWW Server (WWWS)
D. Internet Information Server (IIS)
Answer: D

GIAC demo   GSNA test questions   GSNA demo   GSNA exam dumps   GSNA exam prep

NO.18 John works as a professional Ethical Hacker. He has been assigned the project of testing the security of
www.we-are-secure.com. He wants to use Kismet as a wireless sniffer to sniff the Weare-secure network.
Which of the following IEEE-based traffic can be sniffed with Kismet?
A. 802.11g
B. 802.11n
C. 802.11b
D. 802.11a
Answer: A,B,C,D

GIAC   GSNA   GSNA braindump

NO.19 You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You
want to print the super block and block the group information for the filesystem present on a system.
Which of the following Unix commands can you use to accomplish the task?
A. e2fsck
B. dump
C. dumpe2fs
D. e2label
Answer: C

GIAC demo   GSNA   GSNA   GSNA test questions

NO.20 You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You
want to set some terminal characteristics and environment variables. Which of the following Unix
configuration files can you use to accomplish the task?
A. /etc/sysconfig/routed
B. /proc/net
C. /etc/sysconfig/network-scripts/ifcfg-interface
D. /etc/sysconfig/init
Answer: D

GIAC test answers   GSNA   GSNA demo   GSNA exam simulations

ITCertKing offer the latest 312-50v8 exam material and high-quality NS0-504 pdf questions & answers. Our VCAC510 VCE testing engine and NS0-156 study guide can help you pass the real exam. High-quality 000-781 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GSNA_exam.html