GIAC GIAC Information Security GCIA Questions & Answers

• Question 41:

  You work as a Network Administrator for Tech Perfect Inc. The office network is configured as an IPv6 network. You have to configure a computer with the IPv6 address, which is equivalent to an IPv4 publicly routable address. Which of the following types of addresses will you choose?

  A. Site-local

  B. Global unicast

  C. Local-link

  D. Loopback

  Correct Answer: B

• Question 42:

  Which of the following is the default port for Simple Network Management Protocol (SNMP)?

  A. TCP port 110

  B. TCP port 25

  C. TCP port 80

  D. UDP port 161

  Correct Answer: D

• Question 43:

  Which of the following statements are true about snort? Each correct answer represents a complete solution. Choose all that apply.

  A. It develops a new signature to find vulnerabilities.

  B. It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans, CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors and system vulnerabilities, and DDoS clients.

  C. It encrypts the log file using the 256 bit AES encryption scheme algorithm.

  D. It is used as a passive trap to record the presence of traffic that should not be found on a network, such as NFS or Napster connections.

  Correct Answer: ABD

• Question 44:

  Allen works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate a computer, which is used by the suspect to sexually harass the victim using instant messenger program. Suspect's computer runs on Windows operating system. Allen wants to recover password from instant messenger program, which suspect is using, to collect the evidence of the crime. Allen is using Helix Live for this purpose. Which of the following utilities of Helix will he use to accomplish the task?

  A. Asterisk Logger

  B. Access PassView

  C. Mail Pass View

  D. MessenPass

  Correct Answer: D

• Question 45:

  Which of the following tools are used to determine the hop counts of an IP packet? Each correct answer represents a complete solution. Choose two.

  A. TRACERT

  B. Ping

  C. IPCONFIG

  D. Netstat

  Correct Answer: AB

• Question 46:

  Adam works as a Computer Hacking Forensic Investigator in a law firm. He has been assigned with his first project. Adam collected all required evidences and clues. He is now required to write an investigative report to present before court

  for further prosecution of the case. He needs guidelines to write an investigative report for expressing an opinion. Which of the following are the guidelines to write an investigative report in an efficient way?

  Each correct answer represents a complete solution. Choose all that apply.

  A. All ideas present in the investigative report should flow logically from facts to conclusions.

  B. Opinion of a lay witness should be included in the investigative report.

  C. The investigative report should be understandable by any reader.

  D. There should not be any assumptions made about any facts while writing the investigative report.

  Correct Answer: ACD

• Question 47:

  Which of the following NETSH commands for interface Internet protocol version 4 (IPv4) is used to delete a DNS server or all DNS servers from a list of DNS servers for a specified interface or for all interfaces?

  A. disable dnsserver

  B. alter dnsserver

  C. delete dnsserver

  D. remove dnsserver

  Correct Answer: C

• Question 48:

  Which of the following hacking tools provides shell access over ICMP?

  A. John the Ripper

  B. Loki

  C. Nessus

  D. Nmap

  Correct Answer: B

• Question 49:

  Which of the following is an automated vulnerability assessment tool?

  A. Kismet

  B. Nessus

  C. Sniffer

  D. Snort

  Correct Answer: B

• Question 50:

  What is the maximum size of an IP datagram for Ethernet?

  A. 1200 bytes

  B. 1024 bytes

  C. 1500 bytes

  D. 4500 bytes

  Correct Answer: C