GCIA Q&As. GIAC Certified Intrusion Analyst. Pass GIAC GCIA Exam with 100% Guarantee. Free Download Real Questions & Answers PDF and VCE file from:

Transcription

1 GCIA Q&As GIAC Certified Intrusion Analyst Pass GIAC GCIA Exam with 100% Guarantee Free Download Real Questions & Answers PDF and VCE file from: 100% Passing Guarantee 100% Money Back Assurance Following Questions and Answers are all new published by GIAC Official Exam Center Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 1 / 15

2 QUESTION 1 At which port does a DHCPv6 client listen for DHCP messages? A. TCP port 546 B. TCP port 547 C. UDP port 546 D. UDP port 547 Correct Answer: C QUESTION 2 Which of the following ports is used by clients to send request to connect to the server? A. Port 21 B. Port 20 C. Port 23 D. Port 25 QUESTION 3 Which of the following intrusion detection systems (IDS) produces the false alarm because of the abnormal behavior of users and network? A. Application protocol-based intrusion detection system (APIDS) B. Protocol-based intrusion detection system (PIDS) C. Network intrusion detection system (NIDS) D. Host-based intrusion detection system (HIDS) QUESTION 4 Which of the following techniques is used to identify attacks originating from a botnet? A. IFilter Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 2 / 15

3 B. BPF-based filter C. Passive OS fingerprinting D. Recipient filtering Correct Answer: C QUESTION 5 Which of the following tools can be used to check whether the network interface is in promiscuous mode or not? A. IPTraf B. MRTG C. Chkrootkit D. Ntop Correct Answer: C QUESTION 6 Which of the following are the two sub-layers present in Data Link layer of the OSI Reference model? A. Logical Link control and Media Access control B. Logical control and Link control C. Machine Link control and Logical Link control D. Data control and Media Access control Correct Answer: A QUESTION 7 Peter works as a System Administrator for TechSoft Inc. The company uses Linux-based systems. Peter\\'s manager suspects that someone is trying to log in to his computer in his absence. Which of the following commands will Peter run to show the last unsuccessful login attempts, as well as the users who have last logged in to the manager\\'s system? Each correct answer represents a complete solution. Choose two. A. lastb B. pwd C. last Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 3 / 15

4 D. rwho -a Correct Answer: AC QUESTION 8 Sandra, a novice computer user, works on Windows environment. She experiences some problem regarding bad sectors formed in a hard disk of her computer. She wants to run CHKDSK command to check the hard disk for bad sectors and to fix the errors, if any, occurred. Which of the following switches will she use with CHKDSK command to accomplish the task? A. CHKDSK /I B. CHKDSK /R /F C. CHKDSK /C /L D. CHKDSK /V /X QUESTION 9 When no anomaly is present in an Intrusion Detection, but an alarm is generated, the response is known as. A. True negative B. True positive C. False negative D. False positive QUESTION 10 Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6? A. Propagating Cipher Block Chaining (PCBC) Mode B. Cipher Block Chaining (CBC) Mode C. Cipher Feedback (CFB) Mode D. Electronic Codebook (ECB) Mode Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 4 / 15

5 QUESTION 11 Which of the following tools is a wireless sniffer and analyzer that works on the Windows operating system? A. Aeropeek B. Void11 C. Airsnort D. Kismet Correct Answer: A QUESTION 12 Which of the following is the default port for Simple Network Management Protocol (SNMP)? A. TCP port 110 B. TCP port 25 C. TCP port 80 D. UDP port 161 QUESTION 13 Which of the following switches is used with Pslist command on the command line to show the statistics for all active threads on the system, grouping these threads with their owning process? A. Pslist -x B. Pslist -m C. Pslist -t D. Pslist -d QUESTION 14 Which of the following utilities is used to verify the existence of a host in a network? A. IPCONFIG B. NETSTAT Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 5 / 15

6 C. CHKDSK D. PING QUESTION 15 Which of the following commands will you use with the tcpdump command to display the contents of the packets? A. tcpdump -q B. tcpdump -v C. tcpdump -n D. tcpdump A QUESTION 16 You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 Active Directory-based single forest multiple domain IPv4 network. All the DNS servers on the network run Windows Server The users in the network use NetBIOS name to connect network application on the network. Your manager requires you migrate the network to IPv6-enabled network without affecting any client computers. Which of the following actions will you take to accomplish the task? A. Configure stub zone on the DNS servers in the network. B. Configure GlobalNames zones on the DNS servers in the network. C. Install a new Windows Server 2003 DNS server computer on each domain and configure GlobalNames zones. D. Configure the client computers to use WINS. QUESTION 17 Which of the following tools in Helix Windows Live is used to reveal the database password of password protected MDB files created using Microsoft Access or with Jet Database Engine? A. Asterisk logger B. Access Pass View C. FAU D. Galleta Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 6 / 15

7 QUESTION 18 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP-based network. The network is connected to the Internet through a firewall. A user complains that he is unable to access the abc.com site. However, he can access all other sites. Which of the following tools will help you diagnose the problem? A. IPCONFIG B. ROUTE C. TELNET D. TRACERT QUESTION 19 The Intrusion Detection System (IDS) instructs the firewall to reject any request from a particular IP address if the network is repeatedly attacked from this address. What is this action known as? A. Spoofing B. Sending deceptive s C. Network Configuration Changes D. Shunning E. Logging F. Sending notifications Correct Answer: C QUESTION 20 Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages? A. Command injection attack B. Code injection attack C. Cross-Site Request Forgery D. Cross-Site Scripting attack Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 7 / 15

8 QUESTION 21 Which of the following is the unspecified address in IPv6? A. 1:1:1:1:1:1:1:1 B. 0:0:0:0:0:0:0:0 C. 0:0:0:0:0:0:0:1 D. 1:0:0:0:0:0:0:0 QUESTION 22 You work as a Network Administrator for Tech Perfect Inc. The office network is configured as an IPv6 network. You have to configure a computer with the IPv6 address, which is equivalent to an IPv4 publicly routable address. Which of the following types of addresses will you choose? A. Site-local B. Global unicast C. Local-link D. Loopback QUESTION 23 Which of the following protocols uses only User Datagram Protocol (UDP)? A. FTP B. ICMP C. TFTP D. POP3 Correct Answer: C QUESTION 24 Which of the following techniques allows probing firewall rule-sets and finding entry points into the targeted system or network? Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 8 / 15

9 A. Network enumerating B. Packet collision C. Distributed Checksum Clearinghouse D. Packet crafting QUESTION 25 You work as a professional Computer Hacking Forensic Investigator. A project has been assigned to you to investigate Plagiarism occurred in the source code files of C#. Which of the following tools will you use to detect the software plagiarism? A. VAST B. Jplag C. SCAM D. Turnitin QUESTION 26 Which of the following commands is a Packet sniffer? A. tcpdump B. strace C. nmap D. tail Correct Answer: A QUESTION 27 Which of the following Linux file systems is a journaled file system? A. ext3 B. ext4 C. ext2 D. ext Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 9 / 15

10 Correct Answer: A QUESTION 28 You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 domain- based network. The network has three Windows Server 2008 member servers and 150 Windows Vista client computers. According to the company\\'s security policy, you apply Windows firewall setting to the computers on the network. Now, you are troubleshooting a connectivity problem that might be caused by Windows firewall. What will you do to identify connections that Windows firewall allows or blocks? A. Configure Internet Protocol Security (IPSec). B. Configure Network address translation (NAT). C. Disable Windows firewall logging. D. Enable Windows firewall logging. QUESTION 29 Which of the following statements are true about snort? Each correct answer represents a complete solution. Choose all that apply. A. It develops a new signature to find vulnerabilities. B. It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans, CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors and system vulnerabilities, and DDoS clients. C. It encrypts the log file using the 256 bit AES encryption scheme algorithm. D. It is used as a passive trap to record the presence of traffic that should not be found on a network, such as NFS or Napster connections. Correct Answer: ABD QUESTION 30 Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses \\'Faulkner\\' as the password for the gmail account. After a few days, he starts receiving a lot of s stating that his gmail account has been hacked. He also finds that some of his important mails have been deleted by someone. Which of the following methods has the attacker used to crack Andrew\\'s password? Each correct answer represents a complete solution. Choose all that apply. A. Zero-day attack B. Dictionary-based attack C. Rainbow attack Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 10 / 15

11 D. Denial-of-service (DoS) attack E. Brute force attack F. Buffer-overflow attack G. Password guessing H. Social engineering CEGH QUESTION 31 You work as a Network Administrator for McNeil Inc. The company\\'s Windows 2000-based network is configured with Internet Security and Acceleration (ISA) Server You want to configure intrusion detection on the server. You find that the different types of attacks on the Intrusion Detection tab page of the IP Packet Filters Properties dialog box are disabled. What is the most likely cause? A. The PPTP through ISA firewall check box on the PPTP tab page of the IP Packet Filters Properties dialog box is not enabled. B. The Enable IP routing check box on the General tab page of the IP Packet Filters Properties dialog box is not selected. C. The Log packets from Allow filters check box on the Packet Filters tab page of the IP Packet Filters Properties dialog box is not enabled. D. The Enable Intrusion detection check box on the General tab page of the IP Packet FiltersProperties dialog box is not selected. QUESTION 32 Nathan works as a professional Ethical Hacker. He wants to see all open TCP/IP and UDP ports of his computer. Nathan uses the netstat command for this purpose but he is still unable to map open ports to the running process with PID, process name, and path. Which of the following commands will Nathan use to accomplish the task? A. ping B. Psloggedon C. Pslist D. fport Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 11 / 15

12 QUESTION 33 You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. A branch office is connected to the headquarters through a T1 line. Users at the branch office report poor voice quality on the IP phone while communicating with the headquarters. You find that an application, named WorkReport, at the branch office is suffocating bandwidth by sending large packets for file synchronization. You need to improve the voice quality on the IP phone. Which of the following steps will you choose to accomplish this? A. Configure traffic shaping to increase the time interval for the WorkReport packets. B. Configure traffic shaping to increase the time interval for the IP phone packets. C. Configure traffic shaping to reduce bandwidth for the IP phone. D. Configure traffic shaping to reduce bandwidth for WorkReport. QUESTION 34 You are using the TRACERT utility to trace the route to passguide.com. You receive the following output: Which of the following conclusions can you draw from viewing the output? Each correct answer represents a complete solution. Choose two. A. Everything is fine. B. One of the routers on the path to the destination is not functional. C. The destination computer is not operational. D. The IP address of the destination computer is not resolved. C QUESTION 35 You are the Administrator for a Windows 2000 based network that uses DHCP to dynamically assign IP addresses to the clients and DNS servers. You want to ensure that the DNS servers can communicate with another DNS server. Which type of query will you run to achieve this? A. PATHPING B. NSLOOKUP C. PING D. Recursive Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 12 / 15

13 QUESTION 36 Which of the following can be monitored by using the host intrusion detection system (HIDS)? Each correct answer represents a complete solution. Choose two. A. Computer performance B. File system integrity C. Storage space on computers D. System files D QUESTION 37 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP-based network. You are configuring an Internet connection on a server. Which of the following servers filters outbound Web traffic on the network? A. Proxy server B. DNS server C. WINS server D. DHCP server Correct Answer: A QUESTION 38 Which of the following commands prints out the headers of packets regarding the boolean expression? A. tcpdump B. vmstat C. iftop D. iostat Correct Answer: A QUESTION 39 Which of the following statements are true about routers? Each correct answer represents a complete solution. Choose all that apply. A. Routers do not limit physical broadcast traffic. Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 13 / 15

14 B. Routers organize addresses into classes, which are used to determine how to move packets from one network to another. C. Routers act as protocol translators and bind dissimilar networks. D. Routers are responsible for making decisions about which of several paths network (or Internet) traffic will follow. CD QUESTION 40 Which of the following hacking tools provides shell access over ICMP? A. John the Ripper B. Loki C. Nessus D. Nmap Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 14 / 15

15 Powered by TCPDF ( To Read the Whole Q&As, please purchase the Complete Version from Our website. Try our product! 100% Guaranteed Success 100% Money Back Guarantee 365 Days Free Update Instant Download After Purchase 24x7 Customer Support Average 99.9% Success Rate More than 800,000 Satisfied Customers Worldwide Multi-Platform capabilities - Windows, Mac, Android, iphone, ipod, ipad, Kindle We provide exam PDF and VCE of Cisco, Microsoft, IBM, CompTIA, Oracle and other IT Certifications. You can view Vendor list of All Certification Exams offered: Need Help Please provide as much detail as possible so we can best assist you. To update a previously submitted ticket: Any charges made through this site will appear as Global Simulators Limited. All trademarks are the property of their respective owners. Copyright pass4lead, All Rights Reserved. Latest GCIA Dumps GCIA VCE Dumps GCIA Braindumps 15 / 15