Pass GIAC GCFA Exam Info and Free Practice Test [Q34-Q53]

NEW QUESTION 34
Fill in the blank with the appropriate file system.
Alternate Data Streams (ADS) is a feature of the_____ file system, which allows more than one data stream to be associated with a filename.

NEW QUESTION 35
In Linux, which of the following files describes the processes that are started up during boot up?

NEW QUESTION 36
Which of the following directories cannot be placed out of the root filesystem?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 37
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate and examine drive image of a compromised system, which is suspected to be used in cyber crime. Adam uses Forensic Sorter to sort the contents of hard drive in different categories. Which of the following type of image formats is NOT supported by Forensic Sorter?

NEW QUESTION 38
Your friend plans to install a Trojan on your computer. He knows that if he gives you a new version of chess.exe, you will definitely install the game on your computer. He picks up a Trojan and joins it to chess.exe.
The size of chess.exe was 526,895 bytes originally, and after joining this chess file to the Trojan, the file size increased to 651,823 bytes. When he gives you this new game, you install the infected chess.exe file on your computer. He now performs various malicious tasks on your computer remotely. But you suspect that someone has installed a Trojan on your computer and begin to investigate it. When you enter the netstat command in the command prompt, you get the following results:
C:WINDOWS>netstat -an | find “UDP”
UDP IP_Address:31337 *:*
Now you check the following registry address:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices In the above address, you notice a ‘default’ key in the ‘Name’ field having ” .exe” value in the corresponding ‘Data’ field. Which of the following Trojans do you think your friend may have installed on your computer on the basis of the above evidence?

NEW QUESTION 39
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we- are-secure.com. He wants to test the effect of a virus on the We-are-secure server. He injects the virus on the server and, as a result, the server becomes infected with the virus even though an established antivirus program is installed on the server. Which of the following do you think are the reasons why the antivirus installed on the server did not detect the virus injected by John?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 40
You work as a Network Administrator for Net World International. You want to configure a Windows 2000 computer to dual boot with Windows 98. The hard disk drive of the computer will be configured as a single partition drive. Which of the following file systems will you use to accomplish this?

NEW QUESTION 41
You are the Security Consultant and have been hired to check security for a client’s network. Your client has stated that he has many concerns but the most critical is the security of Web applications on their Web server. What should be your highest priority then in checking his network?

NEW QUESTION 42
Mark is the Administrator of a Linux computer. He wants to check the status of failed Telnet-based login attempts on the Linux computer. Which of the following shell commands will he use to accomplish the task?

NEW QUESTION 43
Which of the following data is NOT listed as a volatile data in RFC 3227 list for Windows based system?

NEW QUESTION 44
You are working with a team that will be bringing in new computers to a sales department at a company.
The sales team would like to keep not only their old files, but system settings as well on the new PC’s.
What should you do?

NEW QUESTION 45
Your friend plans to install a Trojan on your computer. He knows that if he gives you a new version of chess.exe, you will definitely install the game on your computer. He picks up a Trojan and joins it to chess.exe. The size of chess.exe was 526,895 bytes originally, and after joining this chess file to the Trojan, the file size increased to 651,823 bytes. When he gives you this new game, you install the infected chess.exe file on your computer. He now performs various malicious tasks on your computer remotely. But you suspect that someone has installed a Trojan on your computer and begin to investigate it. When you enter the netstat command in the command prompt, you get the following results:
C:WINDOWS>netstat -an | find “UDP”
UDP IP_Address:31337 *:*
Now you check the following registry address:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices
In the above address, you notice a ‘default’ key in the ‘Name’ field having ” .exe” value in the corresponding ‘Data’ field. Which of the following Trojans do you think your friend may have installed on your computer on the basis of the above evidence?

NEW QUESTION 46
Which of the following files contains the salted passwords in the Linux operating system?

NEW QUESTION 47
Which of the following types of cyber stalking damage the reputation of their victim and turn other people against them by setting up their own Websites, blogs or user pages for this purpose?

NEW QUESTION 48
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate the BlackBerry, which is suspected to be used to hide some important information.
Which of the following is the first step taken to preserve the information in forensic investigation of the BlackBerry?

NEW QUESTION 49
John works as a professional Ethical Hacker. He has been assigned the task of testing the security of www.we-are-secure.com. He has performed the footprinting step and now he has enough information to begin scanning in order to detect active computers. He sends a ping request to a computer using ICMP type 13. What kind of ICMP message is John using to send the ICMP ping request message?

NEW QUESTION 50
In which of the following security tests does the security testing team simulate as an employee or other person with an authorized connection to the organization’s network?

NEW QUESTION 51
Which of the following is NOT an example of passive footprinting?

NEW QUESTION 52
Adam works as a professional Computer Hacking Forensic Investigator, a project has been assigned to him to investigate and examine files present on suspect’s computer. Adam uses a tool with the help of which he can examine recovered deleted files, fragmented files, and other corrupted data. He can also examine the data, which was captured from the network, and access the physical RAM, and any processes running in virtual memory with the help of this tool. Which of the following tools is Adam using?

NEW QUESTION 53
Which of the following tools are used for footprinting?
Each correct answer represents a complete solution. Choose all that apply.