GPPA 시험 - GIAC실제시험문제와 답 - 285문항

Question No : 1

Which of the following is a chronological record of system activities to enable the reconstruction and examination of the sequence of events and/or changes in an event?

A.Corrective controls
B.Audit trail
C.Detective controls
D.Security audit

정답:

Question No : 2

An IDS is a group of processes working together in a network. These processes work on different computers and devices across the network.
Which of the following processes does an IDS perform? Each correct answer represents a complete solution. (Choose all that apply.)

A.Statistical analysis of abnormal traffic patterns.
B.Monitoring and analysis of user and system activity.
C.Network traffic analysis.
D.Event log analysis.

정답:

Question No : 3

Which of the following vulnerability scanners is used to test Web servers for dangerous files/CGIs, outdated server software, and other problems?

A.Hackbot
B.Nikto
C.Nessus
D.Nmap

정답:

Question No : 4

At which of the following layers of the Open System Interconnection (OSI) model the Internet Control Message Protocol (ICMP) and the Internet Group Management Protocol (IGMP) work?

A.The Data-Link layer
B.The Physical layer
C.The Network layer
D.The Presentation layer

정답:

Question No : 5

You work as a Network Administrator for ABC Inc. The company has a TCP/IP-based network. A Cisco switch is configured on the network. You change the original host name of the switch through the hostname command. The prompt displays the changed host name. After some time, power of the switch went off due to some reason. When power restored, you find that the prompt is displaying the old host name.
What is the most likely cause?

A.The running-config file got corrupted.
B.The changes were saved in running-config file.
C.The startup-config file got corrupted.
D.Host name cannot be changed permanently once switch is configured.

정답:

Question No : 6

Which of the following protocols is used by voice over IP (VoIP) applications?

A.IPv6
B.TCP
C.ICMP
D.UDP

정답:

Question No : 7

Jain works as a contract Ethical Hacker. He has recently got a project to do security checking for www.abc.com. He wants to find out the operating system of the ABC server in the information gathering step.
Which of the following commands will he use to accomplish the task? Each correct answer represents a complete solution. (Choose two.)

A.nc -v -n 208.100.2.25 80
B.nmap -v -O www.abc.com
C.nmap -v -O 208.100.2.25
D.nc 208.100.2.25 23

정답:

Question No : 8

Windump is a Windows port of the famous TCPDump packet sniffer available on a variety of platforms. In order to use this tool on the Windows platform a user must install a packet capture library.
What is the name of this library?

A.SysPCap
B.libpcap
C.WinPCap
D.PCAP

정답:

Question No : 9

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.abc.com. He is using a tool to crack the wireless encryption keys.
The description of the tool is as follows:
It is a Unix-based WLAN WEP cracking tool that recovers encryption keys. It operates by passively monitoring transmissions. It uses Chipertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys.
Which of the following tools is John using to crack the wireless encryption keys?

A.Kismet
B.AirSnort
C.PsPasswd
D.Cain

정답:

Question No : 10

An organization has more than a couple of external business, and exchanges dynamic routing information with the external business partners. The organization wants to terminate all routing from a partner at an edge router, preferably receiving only summary routes from the partner.
Which of the following will be used to change all partner addresses on traffic into a range of locally assigned addresses?

A.IPsec
B.NAT
C.ACL
D.Firewall

정답:

Question No : 11

You work as a Network Troubleshooter for ABC Inc. You want to tunnel the IPv6 traffic across an IPv4 supporting portion of the company's network.
You are using the interface configuration mode for the tunnel.
Which of the following IP addresses will you enter after the tunnel source command?

A.The IPv4 address assigned to the remote interface on which the tunnel is built.
B.The IPv6 address assigned to the remote tunnel interface.
C.The IPv6 address assigned to the local tunnel interface.
D.The IPv4 address assigned to the local interface on which the tunnel is built.

정답:

Question No : 12

Which of the following actions can be taken as the countermeasures against the ARP spoofing attack? Each correct answer represents a complete solution. (Choose all that apply.)

A.Placing static ARP entries on servers and routes
B.Using Private VLANs
C.Using 8 digit passwords for authentication
D.Looking for large amount of ARP traffic on local subnets

정답:

Question No : 13

Which of the following tools is used to analyze the files produced by several popular packetcapture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?

A.Sniffer
B.tcptraceroute
C.Fpipe
D.tcptrace

정답:

Question No : 14

10.0.0/24
Which of the following sets of commands will you use to accomplish the task?

A.access-list 10 permit 10.10.2.103 access-list 10 permit 10.10.0.0 0.0.0.255 access-list 10 deny any line vty 0 4 access-group 10 in
B.access-list 10 permit host 10.10.2.103 access-list 10 permit 10.10.0.0 0.0.0.255 access-list 10 deny any line vty 0 4 access-class 10 out
C.access-list 10 permit host 10.10.2.103 access-list 10 permit 10.10.0.0 0.0.0.255 access-list 10 deny any line vty 0 4 access-class 10 in
D.access-list 10 permit host 10.10.2.103 access-list 11 permit host 10.10.0.0 255.255.255.0 access-list 12 deny any line vty 0 4 access-group 10, 11, 12 in

정답:

Question No : 15

Which of the following well-known ports is used by BOOTP?

A.UDP 67
B.TCP 21
C.UDP 69
D.TCP 161

정답:

GIAC GPPA 시험