GIAC GIAC Information Security GCFA Questions & Answers

• Question 21:

  Which of the following switches is used with Pslist command on the command line to show the statistics for all active threads on the system, grouping these threads with their owning process?

  A. Pslist -m

  B. Pslist -d

  C. Pslist -x

  D. Pslist -t

  Correct Answer: B

• Question 22:

  Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers?

  (Click the Exhibit button on the toolbar to see the case study.)

  Each correct answer represents a complete solution. Choose two.

  A. PAP authentication

  B. Encrypting File System (EFS)

  C. Digital certificates

  D. Two-factor authentication

  E. Encrypted Data Transmissions

  Correct Answer: BC

• Question 23:

  Which of the following registry hives stores information about the file extensions that are mapped to their corresponding applications?

  A. HKEY_CURRENT_USER

  B. HKEY_USERS

  C. HKEY_CLASSES_ROOT

  D. HKEY_LOCAL_MACHINE

  Correct Answer: C

• Question 24:

  An organization wants to mitigate the risks associated with the lost or stolen laptops and the associated disclosure laws, while reporting data breaches. Which of the following solutions will be best for the organization?

  A. Hashing function

  B. Digital signature

  C. Trusted Platform Module

  D. Whole disk encryption

  Correct Answer: D

• Question 25:

  Which of the following cryptographic methods are used in EnCase to ensure the integrity of the data, which is acquired for the investigation? Each correct answer represents a complete solution. Choose two.

  A. MD5

  B. CRC

  C. HAVAL

  D. Twofish

  Correct Answer: AB

• Question 26:

  Which of the following fsck commands will you use to check all filesystems listed in /etc/fstab?

  A. fsck -f

  B. fsck -P

  C. fsck -A

  D. fsck -y

  Correct Answer: C

• Question 27:

  Which of the following switches of the XCOPY command copies file ownerships and NTFS permissions on files while copying the files?

  A. /r

  B. /p

  C. /s

  D. /o

  Correct Answer: D

• Question 28:

  Which of the following sections of United States Economic Espionage Act of 1996 criminalizes the misappropriation of trade secrets related to or included in a product that is produced for or placed in interstate commerce, with the knowledge or intent that the misappropriation will injure the owner of the trade secret?

  A. Title 18, U.S.C. 1839

  B. Title 18, U.S.C. 1832

  C. Title 18, U.S.C. 1831

  D. Title 18, U.S.C. 1834

  Correct Answer: B

• Question 29:

  Which of the following statements about the NTDETECT.COM file is true? Each correct answer represents a complete solution. Choose three.

  A. It is used to gather information about currently installed hardware on the computer.

  B. It is a startup file of the Windows NT/2000 operating system.

  C. It is located in the root of the startup disk.

  D. It is used to dual-boot a computer.

  Correct Answer: ABC

• Question 30:

  Which of the following can be monitored by using the host intrusion detection system (HIDS)? Each correct answer represents a complete solution. Choose two.

  A. Computer performance

  B. System files

  C. File system integrity

  D. Storage space on computers

  Correct Answer: BC