GCIA GIAC Exam Questions and Free Practice Test

Question 61

Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?

A. Demilitarized zone (DMZ)

B. Intrusion detection system (IDS)

C. Firewall

D. Packet filtering

Correct Answer:B

Question 62

Which of the following methods is a behavior-based IDS detection method?

A. Knowledge-based detection

B. Protocol detection

C. Statistical anomaly detection

D. Pattern matching detection

Correct Answer:C

Question 63

Which of the following is allowed by a company to be addressed directly from the public network and is hardened to screen the rest of its network from security exposure?

A. Intrusion detection system

B. A computer installed in the network and configured with sender reputation

C. bastion host

D. Exchange ActiveSync

Correct Answer:C

Question 64

Which of the following statements about the traceroute utility are true?
Each correct answer represents a complete solution. Choose all that apply.

A. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell code cannot be recognized by any Intrusion Detection System

B. It records the time taken for a round trip for each packet at each route

C. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of each gateway along the route to the remote hos

D. It is an online tool that performs polymorphic shell code attack

Correct Answer:BC

Question 65

Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?

A. DriveSpy

B. Ontrack

C. Device Seizure

D. Forensic Sorter

Correct Answer:A

Question 66

Which of the following DNS records is used for host name to IPv6 address resolution?

A. PTR

B. SOA

C. A

D. AAAA

E. CNAME

Correct Answer:D

START GCIA EXAM