GIAC GCFA GIAC Certified Forensics Analyst Exam Exam Practice Test Questions

• Question 1

  You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?Each correct answer represents a complete solution. Choose all that apply.

  • Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
  • Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.
  • Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
  • Look at the Web servers logs and normal traffic logging.

  Show Answer Answer: A,B,D Next

• Question 2

  Which of the following involves changing data prior to or during input to a computer in an effort to commit fraud?

  • Data diddling
  • Spoofing
  • Eavesdropping
  • Wiretapping

  Show Answer Answer: A Next

• Question 3

  Which of the following are known as the three laws of OPSEC?Each correct answer represents a part of the solution. Choose three.

  • If you are not protecting it (the critical and sensitive information), the adversary wins!
  • If you don't know the threat, how do you know what to protect?
  • If you don't know what to protect, how do you know you are protecting it?
  • If you don't know about your security resources you cannot protect your network.

  Show Answer Answer: A,B,C Next

• Question 4

  You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network.You are configuring a wireless LAN on the network. You experience interference on your network. Through investigation, you come to know that three foreign WAPs are within the range of your LAN. Although they have different SSIDs than yours, they are working on the same channel as yours.Which of the following steps will you take to reduce the interference?

  • Configure the same SSID as of the foreign networks.
  • Install a router on your network.
  • Change your WAP's channel.
  • Install an external antenna.

  Show Answer Answer: C Next

• Question 5

  You work as a Network Administrator for Net World International. You have configured the hard disk drive of your computer as shown in the image below:The computer is configured to dual-boot with Windows 2000 Server and Windows 98. While working on Windows 2000 Server, you save a file on the 6GB partition. You are unable to find the file while working on Windows 98. You are not even able to access the partition on which the file is saved.What is the most likely cause?

  • The file is corrupt.
  • The 6GB partition is corrupt.
  • Windows 98 does not support the NTFS file system.
  • Files saved in Windows 98 are not supported by Windows 2000.

  Show Answer Answer: C Next