Virtual GIAC GCIA Vce Online

NEW QUESTION 1
Routers work at which layer of the OSI reference model?

• A. Transport
• B. Physical
• C. Presentation
• D. Network

Answer: D

NEW QUESTION 2
Which of the following protocols is used by e-mail servers to send messages?

• A. SNMP
• B. FTP
• C. POP3
• D. SMTP
• E. HTTP

Answer: D

NEW QUESTION 3
Which of the following ports is used by Layer 2 Tunneling Protocol (L2TP)?

• A. UDP port 1701
• B. UDP port 67
• C. TCP port 23
• D. TCP port 25

Answer: A

NEW QUESTION 4
Which of the following is a hardware/software platform that is designed to analyze, detect, and report on security related events. NIPS is designed to inspect traffic and based on its configuration or security policy, it can drop the malicious traffic?

• A. NIPS
• B. HIDS
• C. NIDS
• D. HIPS

Answer: A

NEW QUESTION 5
Which of the following types of cyber stalking damage the reputation of their victim and turn other people against them by setting up their own Websites, blogs or user pages for this purpose?

• A. False accusations
• B. False victimization
• C. Encouraging others to harass the victim
• D. Attempts to gather information about the victim

Answer: A

NEW QUESTION 6
Which of the following is used for remote file access by UNIX/Linux systems?

• A. Server Message Block (SMB)
• B. Network File System (NFS)
• C. Common Internet File System (CIFS)
• D. NetWare Core Protocol (NCP)

Answer: B

NEW QUESTION 7
You are a professional Computer Hacking forensic investigator. You have been called to collect the evidences of Buffer Overflows or Cookie snooping attack. Which of the following logs will you review to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

• A. Event logs
• B. Program logs
• C. Web server logs
• D. System logs

Answer: ABD

NEW QUESTION 8
Which of the following is true for XSS, SQL injection, and RFI?

• A. These are Trojan
• B. These are hacking tool
• C. These are types of Web application vulnerabilitie
• D. These are viruse

Answer: C

NEW QUESTION 9
Users on a TCP/IP network are able to ping resources using IP addresses. However, they are unable to connect to those resources through their host names. A malfunction or failure of which of the following servers may be the cause of the issue?

• A. Proxy
• B. DHCP
• C. DNS
• D. WINS

Answer: C

NEW QUESTION 10
John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.

• A. Brute Force attack
• B. Dictionary attack
• C. Rule based attack
• D. Hybrid attack

Answer: ABD

NEW QUESTION 11
Which of the following commands used in Linux to create bit-stream images?

• A. ss
• B. xcopy
• C. dd
• D. img

Answer: C

NEW QUESTION 12
Which of the following determines which protocols can be used by clients to access the Internet in an ISA Server enabled network?

• A. SMTP filter
• B. POP intrusion detection filter
• C. Site and content rule
• D. Protocol rule

Answer: D

NEW QUESTION 13
Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?

• A. Block ICMP type 13 messages
• B. Block all outgoing traffic on port 21
• C. Block all outgoing traffic on port 53
• D. Block ICMP type 3 messages

Answer: A

NEW QUESTION 14
Adam works as a professional Computer Hacking Forensic Investigator. He has been assigned with the project of investigating an iPod, which is suspected to contain some explicit material. Adam wants to connect the compromised iPod to his system, which is running on Windows XP (SP2) operating system. He doubts that connecting the iPod with his computer may change some evidences and settings in the iPod. He wants to set the iPod to read-only mode. This can be done by changing the registry key within the Windows XP (SP2) operating system. Which of the following registry keys will Adam change to accomplish the task?

• A. HKEY_LOCAL_MACHINE\CurrentControlset\Control\StorageDevicePolicies
• B. HKEY_LOCAL_MACHINE\System\CurrentControlset\StorageDevicePolicies
• C. HKEY_LOCAL_MACHINE\System\CurrentControlset\Control\StorageDevicePolicies
• D. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion

Answer: C

NEW QUESTION 15
Which of the following limits the number of packets seen by tcpdump?

• A. Sender filtering
• B. IFilters
• C. BPF-based filter
• D. Recipient filtering

Answer: C

NEW QUESTION 16
Which of the following is an example of penetration testing?

• A. Implementing HIDS on a computer
• B. Simulating an actual attack on a network
• C. Implementing NIDS on a network
• D. Configuring firewall to block unauthorized traffic

Answer: B

NEW QUESTION 17
Which of the following is used as a default port by the TELNET utility?

• A. 21
• B. 80
• C. 23
• D. 20

Answer: C

NEW QUESTION 18
Which of the following components are usually found in an Intrusion detection system (IDS)?
Each correct answer represents a complete solution. Choose two.

• A. Sensor
• B. Gateway
• C. Firewall
• D. Modem
• E. Console

Answer: AE

NEW QUESTION 19
Peter works as a professional Computer Hacking Forensic Investigator for eLaw-Suit law firm. He is working on a case of a cyber crime. Peter knows that the good investigative report should not only communicate the relevant facts, but also present expert opinion. This report should not include the cases in which the expert acted as a lay witness. Which of the following type of witnesses is a lay witness?

• A. One who can give a firsthand account of something seen, heard, or experience
• B. One with special knowledge of the subject about which he or she is testifyin
• C. One who observes an even
• D. One who is not qualified as an expert witnes

Answer: D

NEW QUESTION 20
Which of the following well-known ports is used by BOOTP?

• A. TCP 161
• B. UDP 69
• C. TCP 21
• D. UDP 67

Answer: D

NEW QUESTION 21
......