GCIA Practice Test — 429 Free Questions Online

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

429Practice Questions

3Study Modes

Free

TopicSort

Question 1

Advanced IDS Concepts

Which of the following is known as a message digest?

A Hash function
B Hashing algorithm
C Spider
D Message authentication code

Question 2

Wireshark Fundamentals

Question 3

Network Forensics and Traffic Analysis

Question 4

IDS Fundamentals and Network Architecture

Question 5

Application Protocols

Question 6

Network Forensics and Traffic Analysis

Question 7

Network Forensics and Traffic Analysis

Question 8

IDS Fundamentals and Network Architecture

Question 9

Network Forensics and Traffic Analysis

Question 10

IPv6

Question 11

IDS Fundamentals and Network Architecture

Question 12

Network Forensics and Traffic Analysis

Question 13

Network Forensics and Traffic Analysis

Question 14

Network Forensics and Traffic Analysis

Question 15

Advanced IDS Concepts

Question 16

Network Forensics and Traffic Analysis

Question 17

Intrusion Detection System Rules

Question 18

Application Protocols

Question 19

Advanced IDS Concepts

Question 20

IDS Fundamentals and Network Architecture

Question 21

Application Protocols

Question 22

UDP and ICMP

Question 23

Network Forensics and Traffic Analysis

Question 24

Application Protocols

Question 25

Network Forensics and Traffic Analysis

Page 1 of 18 • Questions 1-25 of 429

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

network?
Each correct answer represents a complete solution. Choose all that apply.

A For interoperability, IPv4 addresses use the last 32 bits of IPv6 addresses.
B It increases the number of available IP addresses.
C It provides improved authentication and security.
D It uses 128-bit addresses.
E It uses longer subnet masks than those used in IPv4.

Which of the following tools is used to analyze a system and report any unsigned drivers found?

A regedit.exe
B sigverify.exe
C sigverif.exe
D msconfig

Andrew works as a System Administrator for NetPerfect Inc. All client computers on the network run on Mac OS X. The Sales Manager of the company complains that his MacBook is not able to boot. Andrew wants to check the booting process. He suspects that an error persists in the bootloader of Mac OS X. Which of the following is the default bootloader on Mac OS X that he should use to resolve the issue?

A LILO
B BootX
C NT Loader
D GRUB

Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server.
Which of the following files will he review to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

A Checkpoint files
B EDB and STM database files
C Temporary files
D cookie files

Question 6

Network Forensics and Traffic Analysis

Question 7

Network Forensics and Traffic Analysis

Question 8

IDS Fundamentals and Network Architecture

Question 9

Network Forensics and Traffic Analysis

Question 10

IPv6

Question 11

IDS Fundamentals and Network Architecture

Question 12

Network Forensics and Traffic Analysis

Question 13

Network Forensics and Traffic Analysis

Question 14

Network Forensics and Traffic Analysis

Question 15

Advanced IDS Concepts

Question 16

Network Forensics and Traffic Analysis

Question 17

Intrusion Detection System Rules

Question 18

Application Protocols

Question 19

Advanced IDS Concepts

Question 20

IDS Fundamentals and Network Architecture

Question 21

Application Protocols

Question 22

UDP and ICMP

Question 23

Network Forensics and Traffic Analysis

Question 24

Application Protocols

Question 25

Network Forensics and Traffic Analysis

This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. The main features of these tools are as follows:
✑ It displays the signal strength of a wireless network, MAC address, SSID, channel details, etc.
✑ It is commonly used for the following purposes:

A War driving
B Detecting unauthorized access points
C Detecting causes of interference on a WLAN
D WEP ICV error tracking
E Making Graphs and Alarms on 802.11 Data, including Signal Strength

Adam works as a Security Analyst for Umbrella Inc. He is performing real-time traffic analysis on IP networks using Snort. Adam is facing problems in analyzing intrusion data. Which of the following software combined with Snort can Adam use to get a visual representation of intrusion data?
Each correct answer represents a complete solution. Choose all that apply.

A Basic Analysis and Security Engine (BASE)
B sguil
C KFSensor
D OSSIM

Mark works as a Network Security Administrator for BlueWells Inc. The company has a Windowsbased network. Mark is giving a presentation on Network security threats to the newly recruited employees of the company. His presentation is about the External threats that the company recently faced in the past. Which of the following statements are true about external threats?
Each correct answer represents a complete solution. Choose three.

A These are the threats that originate from outside an organization in which the attacker attempts to gain unauthorized access.
B These are the threats that originate from within the organization.
C These are the threats intended to flood a network with large volumes of access requests.
D These threats can be countered by implementing security controls on the perimeters of the network, such as firewalls, which limit user access to the Internet.

Which of the following file systems is designed by Sun Microsystems?

A NTFS
B CIFS
C ZFS
D ext2

network. You have to configure a computer with the IPv6
address, which is equivalent to an IPv4 publicly routable address. Which of the following types of addresses will you choose?

A Site-local
B Global unicast
C Local-link
D Loopback

Which of the following statements are true about snort?
Each correct answer represents a complete solution. Choose all that apply.

A It develops a new signature to find vulnerabilities.
B It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans, CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors and system vulnerabilities, and DDoS clients.
C It encrypts the log file using the 256 bit AES encryption scheme algorithm.
D It is used as a passive trap to record the presence of traffic that should not be found on a network, such as NFS or Napster connections.

Allen works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate a computer, which is used by the suspect to sexually harass the victim using instant messenger program. Suspect's computer runs on Windows operating system. Allen wants to recover password from instant messenger program, which suspect is using, to collect the evidence of the crime. Allen is using Helix Live for this purpose. Which of the following utilities of Helix will he use to accomplish the task?

A Asterisk Logger
B Access PassView
C Mail Pass View
D MessenPass

Which of the following tools are used to determine the hop counts of an IP packet?
Each correct answer represents a complete solution. Choose two.

A TRACERT
B Ping
C IPCONFIG
D Netstat

Adam works as a Computer Hacking Forensic Investigator in a law firm. He has been assigned with his first project. Adam collected all required evidences and clues. He is now required to write an investigative report to present before court for further prosecution of the case. He needs guidelines to write an investigative report for expressing an opinion. Which of the following are the guidelines to write an investigative report in an efficient way?
Each correct answer represents a complete solution. Choose all that apply.

A All ideas present in the investigative report should flow logically from facts to conclusions.
B Opinion of a lay witness should be included in the investigative report.
C The investigative report should be understandable by any reader.
D There should not be any assumptions made about any facts while writing the investigative report.

Which of the following can be applied as countermeasures against DDoS attacks?
Each correct answer represents a complete solution. Choose all that apply.

A Limiting the amount of network bandwidth.
B Blocking IP address.
C Using LM hashes for passwords.
D Using Intrusion detection systems.
E Using the network-ingress filtering.

Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate a multimedia enabled mobile phone, which is suspected to be used in a cyber crime. Adam uses a tool, with the help of which he can recover deleted text messages, photos, and call logs of the mobile phone. Which of the following tools is Adam using?

A FAU
B FTK Imager
C Galleta
D Device Seizure

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?

A Block ICMP type 13 messages
B Block all outgoing traffic on port 21
C Block all outgoing traffic on port 53
D Block ICMP type 3 messages

Which of the following tools performs comprehensive tests against web servers for multiple items, including over 6100 potentially dangerous files/CGIs?

A Dsniff
B Snort
C Nikto
D Sniffer

Which of the following methods is a behavior-based IDS detection method?

A Knowledge-based detection
B Protocol detection
C Statistical anomaly detection
D Pattern matching detection

You work as a Network Administrator for McNeil Inc. The company's Windows 2000-based network is configured with Internet Security and Acceleration (ISA) on the server. You find that the different types of attacks on the Intrusion Detection tab page of the IP
Packet Filters Properties dialog box are disabled. What is the most likely cause?

A The PPTP through ISA firewall check box on the PPTP tab page of the IP Packet Filters Properties dialog box is not enabled.
B The Enable IP routing check box on the General tab page of the IP Packet Filters Properties dialog box is not selected.
C The Log packets from Allow filters check box on the Packet Filters tab page of the IP Packet Filters Properties dialog box is not enabled.
D The Enable Intrusion detection check box on the General tab page of the IP Packet Filters Properties dialog box is not selected.

Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?

A Command injection attack
B Code injection attack
C Cross-Site Request Forgery
D Cross-Site Scripting attack

You work as a Network Administrator for Tech Perfect Inc. Your company has a Windows 2000- based network. You want to verify the connectivity of a host in the network. Which of the following utilities will you use?

A PING
B TELNET
C NETSTAT
D TRACERT

Sandra, a novice computer user, works on Windows environment. She experiences some problem regarding bad sectors formed in a hard disk of her computer.
She wants to run CHKDSK command to check the hard disk for bad sectors and to fix the errors, if any, occurred. Which of the following switches will she use with
CHKDSK command to accomplish the task?

A CHKDSK /I
B CHKDSK /R /F
C CHKDSK /C /L
D CHKDSK /V /X

Mark works as a Network administrator for SecureEnet Inc. His system runs on Mac OS X. He wants to boot his system from the Network Interface Controller
(NIC). Which of the following snag keys will Mark use to perform the required function?

A D
B N
C Z
D C

Which of the following methods is used by forensic investigators to acquire an image over the network in a secure manner?

A Linux Live CD
B DOS boot disk
C Secure Authentication for EnCase (SAFE)
D EnCase with a hardware write blocker

Join Us Among the Stars

GCIAPreview

About the GCIA Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25