The Best GIAC GCIH Exam Training materials

GIAC GCIH exam candidates all know the GIAC GCIH exam is not easy to pass. But it is also the only way to success, so they have to choose it. In order to improve the value of your career, you must pass this certification exam. The exam questions and answers designed by ITCertKing contain different targeted, and have wide coverage. There is no any other books or other information can transcend it. The question bprovided by ITCertKing definitely ace exam questions and answers that help you pass the exam. The results many people used prove that ITCertKing success rate of up to 100%. ITCertKing is the only way that suits you to pass the exam, choose it equal to create a better future.

ITCertKing GIAC GCIH exam training materials praised by the majority of candidates is not a recent thing. This shows ITCertKing GIAC GCIH exam training materials can indeed help the candidates to pass the exam. Compared to other questions providers, ITCertKing GIAC GCIH exam training materials have been far ahead. uestions broad consumer recognition and reputation, it has gained a public praise. If you want to participate in the GIAC GCIH exam, quickly into ITCertKing website, I believe you will get what you want. If you miss you will regret, if you want to become a professional IT expert, then quickly add it to cart.

If you do not know how to pass the exam more effectively, I'll give you a suggestion is to choose a good training site. This can play a multiplier effect. ITCertKing site has always been committed to provide candidates with a real GIAC GCIH certification exam training materials. The ITCertKing GIAC GCIH Certification Exam software are authorized products by vendors, it is wide coverage, and can save you a lot of time and effort.

Are you facing challenges in your career? Would you like to better prove yourself to others by improving your ability? Would you like to have more opportunities to get promoted? Hurry to sign up for IT certification exam and get the IT certificate. GIAC certification exam is one of the important exams. If you obtain GIAC certificate, you will get a great help. Because GIAC GCIH certification test is a very important exam, you can begin with passing GCIH test. Are you wandering how to pass rapidly GCIH certification exam? ITCertKing certification training dumps can help you to achieve your goals.

Exam Code: GCIH
Exam Name: GIAC (GIAC Certified Incident Handler)
One year free update, No help, Full refund!
Total Q&A: 335 Questions and Answers
Last Update: 2014-01-23

If you want to buy GIAC GCIH exam information, ITCertKing will provide the best service and the best quality products. Our exam questions have been authorized by the manufacturers and third-party. And has a large number of IT industry professionals and technology experts, based on customer demand, according to the the outline developed a range of products to meet customer needs. GIAC GCIH exam certification with the highest standards of professional and technical information, as the knowledge of experts and scholars to study and research purposes. All of the products we provide have a part of the free trial before you buy to ensure that you fit with this set of data.

GCIH Free Demo Download: http://www.itcertking.com/GCIH_exam.html

NO.1 Which of the following types of attack can guess a hashed password?
A. Brute force attack
B. Evasion attack
C. Denial of Service attack
D. Teardrop attack
Answer: A

GIAC pdf   GCIH pdf   GCIH test answers   GCIH   GCIH certification

NO.2 Network mapping provides a security testing team with a blueprint of the organization. Which of the
following steps is NOT a part of manual network mapping?
A. Gathering private and public IP addresses
B. Collecting employees information
C. Banner grabbing
D. Performing Neotracerouting
Answer: D

GIAC pdf   GCIH   GCIH   GCIH test

NO.3 Which of the following types of attacks is the result of vulnerabilities in a program due to poor
programming techniques?
A. Evasion attack
B. Denial-of-Service (DoS) attack
C. Ping of death attack
D. Buffer overflow attack
Answer: D

GIAC   GCIH pdf   GCIH   GCIH demo   GCIH exam

NO.4 Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not
concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
A. UDP sacn
B. TCP Connect scan
C. ACK scan
D. Fin scan
Answer: B

GIAC   GCIH   GCIH exam   GCIH dumps

NO.5 Choose and reorder the steps of an incident handling process in their correct order.
A.
Answer: A

GIAC certification training   GCIH   GCIH braindump   GCIH exam prep

NO.6 Which of the following statements about buffer overflow is true?
A. It manages security credentials and public keys for message encryption.
B. It is a collection of files used by Microsoft for software updates released between major service pack
releases.
C. It is a condition in which an application receives more data than it is configured to accept.
D. It is a false warning about a virus.
Answer: C

GIAC   GCIH   GCIH exam   GCIH study guide   GCIH   GCIH study guide

NO.7 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a
countermeasure, he suggests that the Network Administrator should remove the IPP printing capability
from the server. He is suggesting this as a countermeasure against __________.
A. IIS buffer overflow
B. NetBIOS NULL session
C. SNMP enumeration
D. DNS zone transfer
Answer: A

GIAC   GCIH   GCIH   GCIH exam prep

NO.8 Which of the following applications is an example of a data-sending Trojan?
A. SubSeven
B. Senna Spy Generator
C. Firekiller 2000
D. eBlaster
Answer: D

GIAC   GCIH   GCIH   GCIH exam prep   GCIH test answers

NO.9 Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer
overflow occurs when a particular operation/function writes more data into a variable than the variable
was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.
A. Dynamic buffer overflows
B. Stack based buffer overflow
C. Heap based buffer overflow
D. Static buffer overflows
Answer: B, C

GIAC exam prep   GCIH   GCIH   GCIH

NO.10 Adam, a novice computer user, works primarily from home as a medical professional. He just bought a
brand new Dual Core Pentium computer with over 3 GB of RAM. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Adam uses antivirus software,
anti-spyware software, and keeps the computer up-to-date with Microsoft patches. After another month of
working on the computer, Adam finds that his computer is even more noticeably slow. He also notices a
window or two pop-up on his screen, but they quickly disappear. He has seen these windows show up,
even when he has not been on the Internet. Adam notices that his computer only has about 10 GB of free
space available. Since his hard drive is a 200 GB hard drive, Adam thinks this is very odd.
Which of the following is the mostly likely the cause of the problem.?
A. Computer is infected with the stealth kernel level rootkit.
B. Computer is infected with stealth virus.
C. Computer is infected with the Stealth Trojan Virus.
D. Computer is infected with the Self-Replication Worm.
Answer: A

GIAC test answers   GCIH   GCIH test   GCIH exam dumps

NO.11 Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All
computers run on Windows XP. Manager of the Sales department complains Adam about the unusual
behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his
computer overnight. Adam suspects that some malicious software or Trojans have been installed on the
computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346,
and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one
application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?
A. Cheops-ng is installed on the computer.
B. Elsave is installed on the computer.
C. NetBus is installed on the computer.
D. NetStumbler is installed on the computer.
Answer: C

GIAC   GCIH   GCIH exam dumps   GCIH original questions   GCIH

NO.12 Which of the following statements are true about worms?
Each correct answer represents a complete solution. Choose all that apply.
A. Worms cause harm to the network by consuming bandwidth, whereas viruses almost always corrupt or
modify files on a targeted computer.
B. Worms can exist inside files such as Word or Excel documents.
C. One feature of worms is keystroke logging.
D. Worms replicate themselves from one system to another without using a host file.
Answer: A, B, D

GIAC demo   GCIH   GCIH exam prep   GCIH pdf

NO.13 Adam has installed and configured his wireless network. He has enabled numerous security features
such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless
router. Adam notices that when he uses his wireless connection, the speed is sometimes 16 Mbps and
sometimes it is only 8 Mbps or less. Adam connects to the management utility wireless router and finds
out that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the
router's logs and notices that the unfamiliar machine has the same MAC address as his laptop.
Which of the following attacks has been occurred on the wireless network of Adam?
A. NAT spoofing
B. DNS cache poisoning
C. MAC spoofing
D. ARP spoofing
Answer: C

GIAC   GCIH   GCIH   GCIH answers real questions   GCIH certification training

NO.14 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The
output of the scanning test is as follows:
C:\whisker.pl -h target_IP_address
-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv
John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server.
Which of the following statements about 'Printenv' vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.
A. This vulnerability helps in a cross site scripting attack.
B. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the
attacker.
C. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
D. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other
malicious scripts.
Answer: A, C, D

GIAC   GCIH certification   GCIH test

NO.15 Which of the following is a technique of using a modem to automatically scan a list of telephone
numbers, usually dialing every number in a local area code to search for computers, Bulletin board
systems, and fax machines?
A. Demon dialing
B. Warkitting
C. War driving
D. Wardialing
Answer: D

GIAC   GCIH certification   GCIH demo

NO.16 Which of the following statements are true about a keylogger?
Each correct answer represents a complete solution. Choose all that apply.
A. It records all keystrokes on the victim's computer in a predefined log file.
B. It can be remotely installed on a computer system.
C. It is a software tool used to trace all or specific activities of a user on a computer.
D. It uses hidden code to destroy or scramble data on the hard disk.
Answer: A, B, C

GIAC   GCIH   GCIH test questions   GCIH exam   GCIH   GCIH

NO.17 Which of the following commands is used to access Windows resources from Linux workstation?
A. mutt
B. scp
C. rsync
D. smbclient
Answer: D

GIAC   GCIH original questions   GCIH   GCIH   GCIH test answers

NO.18 Fill in the blank with the appropriate word.
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use
______ defense against buffer overflow attacks.
A. canary
Answer: A

GIAC dumps   GCIH   GCIH

NO.19 Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary
attack?
A. Whishker
B. Nessus
C. SARA
D. Nmap
Answer: B

GIAC   GCIH   GCIH practice test   GCIH   GCIH

NO.20 Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.
A. tcp wrapper provides access control, host address spoofing, client username lookups, etc.
B. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running
the server program directly.
C. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as
tokens to filter for access control purposes.
D. tcp wrapper protects a Linux server from IP address spoofing.
Answer: A, B, C

GIAC   GCIH   GCIH   GCIH

NO.21 In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to
the target system?
A. Ping of death
B. Jolt
C. Fraggle
D. Teardrop
Answer: A

GIAC   GCIH exam prep   GCIH dumps

NO.22 Adam works as an Incident Handler for Umbrella Inc. He has been sent to the California unit to train the
members of the incident response team. As a demo project he asked members of the incident response
team to perform the following actions:
Remove the network cable wires.
Isolate the system on a separate VLAN.
Use a firewall or access lists to prevent communication into or out of the system.
Change DNS entries to direct traffic away from compromised system.
Which of the following steps of the incident handling process includes the above actions?
A. Identification
B. Containment
C. Eradication
D. Recovery
Answer: B

GIAC test answers   GCIH test questions   GCIH test   GCIH

NO.23 You have configured a virtualized Internet browser on your Windows XP professional computer. Using
the virtualized Internet browser, you can protect your operating system from which of the following?
A. Brute force attack
B. Mail bombing
C. Distributed denial of service (DDOS) attack
D. Malware installation from unknown Web sites
Answer: D

GIAC exam dumps   GCIH study guide   GCIH original questions   GCIH

NO.24 Which of the following statements about Denial-of-Service (DoS) attack are true?
Each correct answer represents a complete solution. Choose three.
A. It disrupts services to a specific computer.
B. It changes the configuration of the TCP/IP protocol.
C. It saturates network resources.
D. It disrupts connections between two computers, preventing communications between services.
Answer: A, C, D

GIAC study guide   GCIH   GCIH   GCIH

NO.25 You see the career section of a company's Web site and analyze the job profile requirements. You
conclude that the company wants professionals who have a sharp knowledge of Windows server 2003
and Windows active directory installation and placement. Which of the following steps are you using to
perform hacking?
A. Scanning
B. Covering tracks
C. Reconnaissance
D. Gaining access
Answer: C

GIAC exam   GCIH   GCIH   GCIH certification   GCIH test questions

NO.26 Which of the following types of attacks is only intended to make a computer resource unavailable to its
users?
A. Denial of Service attack
B. Replay attack
C. Teardrop attack
D. Land attack
Answer: A

GIAC demo   GCIH test questions   GCIH

NO.27 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of
Cross-Site Scripting attack Ryan intends to do?
A. Non persistent
B. Document Object Model (DOM)
C. SAX
D. Persistent
Answer: D

GIAC   GCIH questions   GCIH   GCIH test answers   GCIH

NO.28 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and
successfully logs in to the user page of the Web site. The We-are-secure login page is vulnerable to a
__________.
A. Dictionary attack
B. SQL injection attack
C. Replay attack
D. Land attack
Answer: B

GIAC dumps   GCIH   GCIH

NO.29 Which of the following are the primary goals of the incident handling team?
Each correct answer represents a complete solution. Choose all that apply.
A. Freeze the scene.
B. Repair any damage caused by an incident.
C. Prevent any further damage.
D. Inform higher authorities.
Answer: A, B, C

GIAC   GCIH exam dumps   GCIH practice test   GCIH braindump

NO.30 John works as a Professional Penetration Tester. He has been assigned a project to test the Website
security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a
username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure
Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve
the security of the we-are-secure Website login page from the SQL injection attack?
A. Use the escapeshellarg() function
B. Use the session_regenerate_id() function
C. Use the mysql_real_escape_string() function for escaping input
D. Use the escapeshellcmd() function
Answer: C

GIAC   GCIH   GCIH   GCIH exam dumps   GCIH

ITCertKing offer the latest IIA-CIA-Part3 exam material and high-quality 000-656 pdf questions & answers. Our 000-N52 VCE testing engine and 70-332 study guide can help you pass the real exam. High-quality JN0-380 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GCIH_exam.html

Free download of the best GIAC certification G2700 exam training materials

If you find any quality problems of our G2700 or you do not pass the exam, we will unconditionally full refund. ITCertKing is professional site that providing GIAC G2700 questions and answers , it covers almost the G2700 full knowledge points.

What are you waiting for? Opportunity knocks but once. You can get GIAC G2700 complete as long as you enter ITCertKing website. You find the best G2700 exam training materials, with our exam questions and answers, you will pass the exam.

With the rapid development of IT technology, the questions in the IT certification exam are also changing. Therefore, ITCertKing also keeps updating test questions and answers. And if you purchase ITCertKing GIAC G2700 practice test materials, we will provide you with free updates for a year. As long as the questions updates, ITCertKing will immediately send the latest questions and answers to you which guarantees that you can get the latest materials at any time. ITCertKing can not only help you pass the test, but also help you learn the latest knowledge. Never pass up a good chance to have the substantial materials.

Exam Code: G2700
Exam Name: GIAC (GIAC Certified ISO-2700 Specialist Practice Test)
One year free update, No help, Full refund!
Total Q&A: 453 Questions and Answers
Last Update: 2014-01-23

According to the research of the past exams and answers, ITCertKing provide you the latest GIAC G2700 exercises and answers, which have have a very close similarity with real exam. ITCertKing can promise that you can 100% pass your first time to attend GIAC certification G2700 exam.

We will free provide you part of the exercises of GIAC certification G2700 exam on the Internet to let you try to test our product's quality. After your trail you will find ITCertKing's exercises is the most comprehensive one and is what you want to.

All the IT professionals are familiar with the GIAC G2700 exam. And everyone dreams pass this demanding exam. GIAC G2700 exam certification is generally accepted as the highest level. Do you have it? About the so-called demanding, that is difficult to pass the exam. This does not matter, with the ITCertKing's GIAC G2700 exam training materials in hand, you will pass the exam successfully. You feel the exam is demanding is because that you do not choose a good method. Select the ITCertKing, then you will hold the hand of success, and never miss it.

The opportunity always belongs to a person who has the preparation. But, when opportunities arise, will you seize the opportunities successfully? At present, you are preparing for GIAC G2700 test. Will you seize ITCertKing to make you achievement? ITCertKing GIAC G2700 certification training materials will guarantee your success. With our exam preparation materials, you will save a lot of time and pass your exam effectively. If you choose ITCertKing study guide, you will find the test questions and test answers are certainly different and high-quality, which is the royal road to success. And then, the dumps will help you prepare well enough for G2700 exam.

G2700 Free Demo Download: http://www.itcertking.com/G2700_exam.html

NO.1 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC   G2700 test questions   G2700 original questions   G2700   G2700 original questions

NO.2 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700   G2700   G2700   G2700 original questions

NO.3 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC practice test   G2700   G2700 braindump   G2700 braindump

NO.4 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC study guide   G2700 test   G2700 exam simulations

NO.5 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC   G2700   G2700   G2700 exam dumps   G2700

NO.6 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC pdf   G2700 test   G2700 exam prep   G2700   G2700 test answers

NO.7 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC pdf   G2700   G2700   G2700

NO.8 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC   G2700   G2700 certification training

NO.9 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC braindump   G2700   G2700 exam dumps   G2700 test questions

NO.10 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC test answers   G2700 exam prep   G2700 test   G2700 answers real questions   G2700

NO.11 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC questions   G2700 pdf   G2700   G2700 certification   G2700 test questions

NO.12 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC answers real questions   G2700 certification training   G2700 test questions

NO.13 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC   G2700 certification   G2700   G2700

NO.14 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC   G2700 dumps   G2700   G2700

NO.15 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC exam   G2700   G2700

NO.16 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC pdf   G2700   G2700 exam dumps   G2700 exam

NO.17 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC   G2700 exam prep   G2700   G2700

NO.18 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC dumps   G2700   G2700 test answers   G2700   G2700 dumps

NO.19 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC test   G2700 dumps   G2700   G2700

NO.20 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC certification training   G2700 exam   G2700   G2700 test   G2700 test

NO.21 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC original questions   G2700   G2700   G2700

NO.22 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC   G2700   G2700 study guide   G2700 practice test   G2700

NO.23 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC study guide   G2700   G2700 certification   G2700 dumps

NO.24 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC practice test   G2700 answers real questions   G2700 demo   G2700

NO.25 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC   G2700 certification   G2700

NO.26 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC   G2700   G2700

NO.27 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC   G2700   G2700 study guide

NO.28 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC pdf   G2700 test questions   G2700 certification training   G2700 exam dumps

NO.29 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC   G2700   G2700

NO.30 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC   G2700 test questions   G2700 braindump   G2700 exam

ITCertKing offer the latest HP2-E56 exam material and high-quality C_HANAIMP_1 pdf questions & answers. Our 70-583 VCE testing engine and 70-336 study guide can help you pass the real exam. High-quality dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/G2700_exam.html

Exam GCFA questions and answers

To effectively getting ready for GIAC GCFA test, do you know what tools are worth using? Let me tell you. ITCertKing GIAC GCFA pdf dumps are the most credible. The exam dumps is rare certification training materials which are researched by IT elite. ITCertKing GCFA braindump has a high hit rate. 100% sail through your exam. This is because IT experts can master the question point well, so that all questions the candidates may come across in the actual test are included in ITCertKing exam dumps. Is it amazing? But it is true. After you use our dumps, you will believe what I am saying.

Feedbacks of many IT professionals who have passed GIAC certification GCFA exam prove that their successes benefit from ITCertKing's help. ITCertKing's targeted test practice questions and answers to gave them great help, which save their valuable time and energy, and allow them to easily and smoothly pass their first GIAC certification GCFA exam. So ITCertKing a website worthy of your trust. Please select ITCertKing, you will be the next successful IT person. ITCertKing will help you achieve your dream.

ITCertKing have a huge senior IT expert team. They use their professional IT knowledge and rich experience to develop a wide range of different training plans which can help you pass GIAC certification GCFA exam successfully. In ITCertKing you can always find out the most suitable training way for you to pass the exam easily. No matter you choose which kind of the training method, ITCertKing will provide you a free one-year update service. ITCertKing's information resources are very wide and also very accurate. When selecting ITCertKing, passing GIAC certification GCFA exam is much more simple for you.

ITCertKing's senior team of experts has developed training materials for GIAC GCFA exam.Through ITCertKing's training and learning passing GIAC certification GCFA exam will be very simple. ITCertKing can 100% guarantee you pass your first time to participate in the GIAC certification GCFA exam successfully. And you will find that our practice questions will appear in your actual exam. When you choose our help, ITCertKing can not only give you the accurate and comprehensive examination materials, but also give you a year free update service.

Exam Code: GCFA
Exam Name: GIAC (GIAC Certified Forensics Analyst)
One year free update, No help, Full refund!
Total Q&A: 318 Questions and Answers
Last Update: 2014-01-18

As we all know, ITCertKing's GIAC GCFA exam training materials has very high profile, and it is also well-known in the worldwide. Why it produces such a big chain reaction? This is because ITCertKing's GIAC GCFA exam training materials is is really good. And it really can help us to achieve excellent results.

GCFA Free Demo Download: http://www.itcertking.com/GCFA_exam.html

NO.1 Which of the following type of file systems is not supported by Linux kernel?
A. vFAT
B. NTFS
C. HFS
D. FAT32
Answer: D

GIAC   GCFA exam prep   GCFA study guide

NO.2 Which of the following tools can be used to perform tasks such as Windows password cracking,
Windows enumeration, and VoIP session sniffing?
A. John the Ripper
B. L0phtcrack
C. Obiwan
D. Cain
Answer: D

GIAC exam prep   GCFA certification   GCFA

NO.3 The MBR of a hard disk is a collection of boot records that contain disk information such as disk
architecture, cluster size, and so on. The main work of the MBR is to locate and run necessary operating
system files that are required to run a hard disk. In the context of the operating system,
MBR is also known as the boot loader. Which of the following viruses can infect the MBR of a hard disk?
Each correct answer represents a complete solution. Choose two.
A. Stealth
B. Boot sector
C. Multipartite
D. File
Answer: B,C

GIAC exam dumps   GCFA test   GCFA dumps   GCFA   GCFA

NO.4 Adam works as a Security Administrator for Umbrella Inc. He is responsible for securing all 15 servers
of the company. To successfully accomplish the task, he enables the hardware and software firewalls and
disables all unnecessary services on all the servers. Sales manager of the company asks Adam to run
emulation software on one of the servers that requires the telnet service to function properly. Adam is
concerned about the security of the server, as telnet can be a very large security risk in an organization.
Adam decides to perform some footprinting, scanning, and penetration testing on the server to checkon
the server to check the security. Adam telnets into the server and writes the following command:
HEAD / HTTP/1.0
After pressing enter twice, Adam gets the following results:
Which of the following tasks has Adam just accomplished?
A. Poisoned the local DNS cache of the server.
B. Submitted a remote command to crash the server.
C. Grabbed the banner.
D. Downloaded a file to his local computer.
Answer: C

GIAC practice test   GCFA exam   GCFA certification   GCFA questions

NO.5 Which of the following is the first computer virus that was used to infect the boot sector of storage
media formatted with the DOS File Allocation Table (FAT) file system?
A. Melissa
B. Tequila
C. Brain
D. I love you
Answer: C

GIAC original questions   GCFA test answers   GCFA   GCFA dumps   GCFA

NO.6 You want to upgrade a partition in your computer's hard disk drive from FAT to NTFS. Which of the
following DOS commands will you use to accomplish this?
A. FORMAT C: /s
B. CONVERT C: /fs:ntfs
C. SYS C:
D. FDISK /mbr
Answer: B

GIAC original questions   GCFA   GCFA test   GCFA   GCFA exam simulations   GCFA

NO.7 Adam works as a Computer Hacking Forensic Investigator for a garment company in the United States.
A project has been assigned to him to investigate a case of a disloyal employee who is suspected of
stealing design of the garments, which belongs to the company and selling those garments of the same
design under different brand name. Adam investigated that the company does not have any policy related
to the copy of design of the garments. He also investigated that the trademark under which the employee
is selling the garments is almost identical to the original trademark of the company. On the grounds of
which of the following laws can the employee be prosecuted.?
A. Trademark law
B. Cyber law
C. Copyright law
D. Espionage law
Answer: A

GIAC test questions   GCFA demo   GCFA   GCFA   GCFA   GCFA

NO.8 John works as a professional Ethical Hacker. He has been assigned the project of testing the security of
www.we-are-secure.com. He receives the following e-mail:
The e-mail that John has received is an example of __________.
A. Virus hoaxes
B. Spambots
C. Social engineering attacks
D. Chain letters
Answer: D

GIAC answers real questions   GCFA   GCFA   GCFA

NO.9 You work as a Web developer for ABC Inc. You want to investigate the Cross-Site Scripting attack on
your company's Web site. Which of the following methods of investigation can you use to accomplish the
task?
Each correct answer represents a complete solution. Choose all that apply.
A. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL
to the company's site.
B. Look at the Web server's logs and normal traffic logging.
C. Use Wireshark to capture traffic going to the server and then searching for the requests going to the
input page, which may give log of the malicious traffic and the IP address of the source.
D. Use a Web proxy to view the Web server transactions in real time and investigate any
communication with outside servers.
Answer: A,B,D

GIAC exam   GCFA test   GCFA

NO.10 Which of the following attacks saturates network resources and disrupts services to a specific
computer?
A. Teardrop attack
B. Polymorphic shell code attack
C. Denial-of-Service (DoS) attack
D. Replay attack
Answer: C

GIAC   GCFA   GCFA   GCFA

NO.11 Which of the following encryption methods uses AES technology?
A. Dynamic WEP
B. Static WEP
C. TKIP
D. CCMP
Answer: D

GIAC   GCFA certification   GCFA   GCFA

NO.12 You work as a professional Computer Hacking Forensic Investigator for DataEnet Inc. You want to
investigate e-mail information of an employee of the company. The suspected employee is using an
online e-mail system such as Hotmail or Yahoo. Which of the following folders on the local computer will
you review to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
A. History folder
B. Temporary Internet Folder
C. Download folder
D. Cookies folder
Answer: A,B,D

GIAC   GCFA   GCFA   GCFA

NO.13 Which of the following is the correct order of loading system files into the main memory of the system,
when the computer is running on Microsoft's Windows XP operating system?
A. NTLDR, BOOT.ini, HAL.dll, NTDETECT.com, NTOSKRNL.exe
B. NTLDR, BOOT.ini, NTDETECT.com, HAL.dll, NTOSKRNL.exe
C. NTLDR, BOOT.ini, HAL.dll, NTDETECT.com, NTOSKRNL.exe
D. BOOT.ini, HAL.dll, NTDETECT.com, NTLDR, NTOSKRNL.exe
Answer: B

GIAC   GCFA   GCFA   GCFA   GCFA braindump

NO.14 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, registry, memory dumps, file system, system state backup, internet traces
B. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
C. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
D. Volatile data, file slack, file system, registry, memory dumps, system state backup, internet traces
Answer: D

GIAC   GCFA   GCFA demo   GCFA pdf   GCFA

NO.15 An executive in your company reports odd behavior on her PDA. After investigation you discover that a
trusted device is actually copying data off the PDA. The executive tells you that the behavior started
shortly after accepting an e-business card from an unknown person. What type of attack is this?
A. Session Hijacking
B. Bluesnarfing
C. PDA Hijacking
D. Privilege Escalation
Answer: B

GIAC   GCFA answers real questions   GCFA   GCFA test questions   GCFA

NO.16 A firewall is a combination of hardware and software, used to provide security to a network. It is used
to protect an internal network or intranet against unauthorized access from the Internet or other outside
networks. It restricts inbound and outbound access and can analyze all traffic between an internal
network and the Internet. Users can configure a firewall to pass or block packets from specific IP
addresses and ports. Which of the following tools works as a firewall for the Linux 2.4 kernel?
A. OpenSSH
B. IPTables
C. IPChains
D. Stunnel
Answer: B

GIAC   GCFA exam simulations   GCFA answers real questions   GCFA

NO.17 Which of the following methods is used by forensic investigators to acquire an image over the network
in a secure manner?
A. DOS boot disk
B. Linux Live CD
C. Secure Authentication for EnCase (SAFE)
D. EnCase with a hardware write blocker
Answer: C

GIAC   GCFA   GCFA   GCFA practice test

NO.18 You company suspects an employee of sending unauthorized emails to competitors. These emails are
alleged to contain confidential company data. Which of the following is the most important step for you to
take in preserving the chain of custody?
A. Preserve the email server including all logs.
B. Make copies of that employee's email.
C. Seize the employee's PC.
D. Place spyware on the employee's PC to confirm these activities.
Answer: A

GIAC   GCFA   GCFA   GCFA demo   GCFA   GCFA answers real questions

NO.19 Which of the following Acts enacted in United States allows the FBI to issue National Security Letters
(NSLs) to Internet service providers (ISPs) ordering them to disclose records about their customers?
A. Wiretap Act
B. Computer Fraud and Abuse Act
C. Economic Espionage Act of 1996
D. Electronic Communications Privacy Act of 1986
Answer: D

GIAC   GCFA pdf   GCFA

NO.20 Which of the following modules of OS X kernel (XNU) provides the primary system program interface?
A. BSD
B. LIBKERN
C. I/O Toolkit
D. Mach
Answer: A

GIAC exam dumps   GCFA original questions   GCFA   GCFA questions   GCFA test questions   GCFA

NO.21 Adam, a malicious hacker has successfully gained unauthorized access to the Linux system of
Umbrella Inc. Web server of the company runs on Apache. He has downloaded sensitive documents and
database files from the computer. After performing these malicious tasks, Adam finally runs the following
command on the Linux command box before disconnecting. for (( i =
0;i<11;i++ )); do
dd if=/dev/random of=/dev/hda && dd if=/dev/zero of=/dev/hda done
Which of the following actions does Adam want to perform by the above command?
A. Making a bit stream copy of the entire hard disk for later download.
B. Deleting all log files present on the system.
C. Wiping the contents of the hard disk with zeros.
D. Infecting the hard disk with polymorphic virus strings.
Answer: C

GIAC   GCFA   GCFA exam   GCFA practice test

NO.22 You work as a Network Administrator for Blue Bell Inc. You want to install Windows XP
Professional on your computer, which already has Windows Me installed. You want to configure your
computer to dual boot between Windows Me and Windows XP Professional. You have a single 40GB
hard disk.
Which of the following file systems will you choose to dual-boot between the two operating
systems?
A. NTFS
B. FAT32
C. CDFS
D. FAT
Answer: B

GIAC demo   GCFA study guide   GCFA   GCFA questions   GCFA

NO.23 Which of the following file systems provides file-level security?
A. CDFS
B. FAT
C. FAT32
D. NTFS
Answer: D

GIAC   GCFA   GCFA   GCFA   GCFA answers real questions   GCFA test

NO.24 You work as a Network Administrator for Perfect Solutions Inc. You install Windows 98 on a computer.
By default, which of the following folders does Windows 98 setup use to keep the registry tools?
A. $SYSTEMROOT$REGISTRY
B. $SYSTEMROOT$WINDOWS
C. $SYSTEMROOT$WINDOWSREGISTRY
D. $SYSTEMROOT$WINDOWSSYSTEM32
Answer: B

GIAC exam prep   GCFA demo   GCFA   GCFA exam dumps   GCFA

NO.25 TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the
target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker
and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port
will drop the packet. Which of the following operating systems can be easily identified with the help of TCP
FIN scanning?
A. Solaris
B. Red Hat
C. Knoppix
D. Windows
Answer: D

GIAC   GCFA certification training   GCFA   GCFA test answers   GCFA dumps

NO.26 Adam works as an Incident Handler for Umbrella Inc. He is informed by the senior authorities that the
server of the marketing department has been affected by a malicious hacking attack. Supervisors are also
claiming that some sensitive data are also stolen. Adam immediately arrived to the server room of the
marketing department and identified the event as an incident. He isolated the infected network from the
remaining part of the network and started preparing to image the entire system. He captures volatile data,
such as running process, ram, and network connections.
Which of the following steps of the incident handling process is being performed by Adam?
A. Recovery
B. Eradication
C. Identification
D. Containment
Answer: D

GIAC   GCFA   GCFA   GCFA

NO.27 Fill in the blank with the appropriate name.
_____is a list, which specifies the order of volatility of data in a Windows based system.
A. RFC 3227
Answer: A

GIAC exam prep   GCFA   GCFA answers real questions   GCFA

NO.28 Which of the following is the process of overwriting all addressable locations on a disk?
A. Drive wiping
B. Spoofing
C. Sanitization
D. Authentication
Answer: A

GIAC original questions   GCFA   GCFA   GCFA original questions   GCFA

NO.29 Mark works as a security manager for SofTech Inc. He is using a technique for monitoring what the
employees are doing with corporate resources. Which of the following techniques is being used by Mark
to gather evidence of an ongoing computer crime if a member of the staff is e-mailing company's secrets
to an opponent?
A. Electronic surveillance
B. Civil investigation
C. Physical surveillance
D. Criminal investigation
Answer: A

GIAC pdf   GCFA questions   GCFA study guide

NO.30 You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single forest single
domain network. The network is configured on IP version 6 protocol. All the computers on the network are
connected to a switch device. One day, users complain that they are unable to connect to a file server.
You try to ping the client computers from the server, but the pinging fails. You try to ping the server's own
loopback address, but it fails to ping. You restart the server, but the problem persists.
What is the most likely cause?
A. The cable that connects the server to the switch is broken.
B. Automatic IP addressing is not working.
C. The switch device is not working.
D. The server is configured with unspecified IP address.
E. The server's NIC is not working.
Answer: E

GIAC demo   GCFA original questions   GCFA

ITCertKing offer the latest MB3-701 exam material and high-quality 100-101 pdf questions & answers. Our 200-001 VCE testing engine and HP0-S33 study guide can help you pass the real exam. High-quality 000-503 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GCFA_exam.html

ITCertKing GIAC GISP exam practice questions and answers

ITCertKing.com won a good reputation by these candidates that have passed GIAC GISP certification exam. ITCertKing gets approve from the people with its powerful exam dumps. As long as you choose our dumps as review tool before the exam, you will have a happy result in GISP exam, which is perfectly obvious. Now hurry to download free demo, you will believe your choice can't be wrong.

ITCertKing is a website which is able to speed up your passing the GIAC certification GISP exams. Our GIAC certification GISP exam question bank is produced by ITCertKing's experts's continuously research of outline and previous exam. When you are still struggling to prepare for passing the GIAC certification GISP exams, please choose ITCertKing's latest GIAC certification GISP exam question bank, and it will brings you a lot of help.

If you want to buy GIAC GISP exam study guide online services, then we ITCertKing is one of the leading service provider's site. . These training products to help you pass the exam, we guarantee to refund the full purchase cost. Our website provide all the study materials and other training materials on the site and each one enjoy one year free update facilities. If these training products do not help you pass the exam, we guarantee to refund the full purchase cost.

Exam Code: GISP
Exam Name: GIAC (GIAC Information Security Professional)
One year free update, No help, Full refund!
Total Q&A: 659 Questions and Answers
Last Update: 2014-01-18

The talent is everywhere in modern society. This is doubly true for IT field. With the popularity of the computer, hardly anyone can't use a computer. Working in the IT industry, don't you feel pressure? Educational level is not representative of your strength. Education is just a ticket, however really keeping your status is your strength. As IT staff, how to cultivate your strength? It is a good choice to take IT certification test which can not only help you master more skills, also can get the certificate to prove your ability. Do you want to take GIAC GISP exam that is very popular in recent?

As the professional provider of exam related materials in IT certification test, ITCertKing has been devoted to provide all candidates with the most excellent questions and answers and has helped countless people pass the exam. ITCertKing GIAC GISP study guide can make you gain confidence and help you take the test with ease. You can pass GISP certification test on a moment's notice by ITCertKing exam dumps. Isn't it amazing? But it is true. As long as you use our products, ITCertKing will let you see a miracle.

GISP Free Demo Download: http://www.itcertking.com/GISP_exam.html

NO.1 You work as a Network Administrator for NetTech Inc. The company has a network that consists of 200
client computers and ten database servers. One morning, you find that a hacker is accessing
unauthorized data on a database server on the network. Which of the following actions will you take to
preserve the evidences?
Each correct answer represents a complete solution. Choose three.
A. Prevent a forensics experts team from entering the server room.
B. Preserve the log files for a forensics expert.
C. Prevent the company employees from entering the server room.
D. Detach the network cable from the database server.
Answer: B,C,D

GIAC   GISP   GISP certification training   GISP

NO.2 Which of the following is a technique used to attack an Ethernet wired or wireless network?
A. DNS poisoning
B. Keystroke logging
C. Mail bombing
D. ARP poisoning
Answer: D

GIAC   GISP   GISP certification training   GISP test

NO.3 Sam works as a Web Developer for McRobert Inc. He wants to control the way in which a Web
browser receives information and downloads content from Web sites. Which of the following browser
settings will Sam use to accomplish this?
A. Proxy server
B. Security
C. Cookies
D. Certificate
Answer: B

GIAC test   GISP practice test   GISP   GISP

NO.4 Which of the following is a remote access protocol that supports encryption?
A. PPP
B. SNMP
C. UDP
D. SLIP
Answer: A

GIAC   GISP   GISP   GISP test answers   GISP

NO.5 Which of the following refers to encrypted text.?
A. Plaintext
B. Cookies
C. Hypertext
D. Ciphertext
Answer: D

GIAC   GISP practice test   GISP   GISP demo   GISP

NO.6 Which of the following are used to suppress paper or wood fires?
Each correct answer represents a complete solution. Choose two.
A. Water
B. Kerosene
C. CO2
D. Soda acid
Answer: A,D

GIAC   GISP pdf   GISP

NO.7 Which of the following are the benefits of information classification for an organization?
A. It helps identify which information is the most sensitive or vital to an organization.
B. It ensures that modifications are not made to data by unauthorized personnel or processes.
C. It helps identify which protections apply to which information.
D. It helps reduce the Total Cost of Ownership (TCO).
Answer: A,C

GIAC test   GISP   GISP

NO.8 Which of the following protocols is used to establish a secure TELNET session over TCP/IP?
A. SSL
B. PGP
C. IPSEC
D. SSH
Answer: D

GIAC   GISP   GISP   GISP

NO.9 Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources
that are required for them. Which of the following access control models will he use?
A. Role-Based Access Control
B. Discretionary Access Control
C. Mandatory Access Control
D. Policy Access Control
Answer: A

GIAC answers real questions   GISP   GISP   GISP certification   GISP

NO.10 Which of the following steps can be taken to protect laptops and data they hold?
Each correct answer represents a complete solution. Choose all that apply.
A. Use slot locks with cable to connect the laptop to a stationary object.
B. Keep inventory of all laptops including serial numbers.
C. Harden the operating system.
D. Encrypt all sensitive data.
Answer: A,B,C,D

GIAC   GISP   GISP braindump   GISP answers real questions   GISP exam prep

NO.11 Fill in the blank with the appropriate value.
Service Set Identifiers (SSIDs) are case sensitive text strings that have a maximum length of_______
characters.
A. 32
Answer: A

GIAC   GISP   GISP practice test

NO.12 Which of the following statements about a fiber-optic cable are true?
Each correct answer represents a complete solution. Choose three.
A. It is immune to electromagnetic interference (EMI).
B. It can transmit undistorted signals over great distances.
C. It has eight wires twisted into four pairs.
D. It uses light pulses for signal transmission.
Answer: A,B,D

GIAC questions   GISP test questions   GISP

NO.13 Which of the following is the most secure authentication method?
A. Certificate-based authentication
B. Basic authentication
C. Digest authentication
D. Integrated Windows authentication
Answer: A

GIAC test   GISP original questions   GISP dumps   GISP   GISP test answers

NO.14 Which of the following statements about Digest authentication are true?
Each correct answer represents a complete solution. Choose two.
A. In Digest authentication, passwords are sent across a network as clear text, rather than as a has value.
B. Digest authentication is used by wireless LANs, which follow the IEEE 802.11 standard.
C. In Digest authentication, passwords are sent across a network as a hash value, rather than as clear
text.
D. Digest authentication is a more secure authentication method as compared to Basic authentication.
Answer: C,D

GIAC   GISP practice test   GISP pdf   GISP   GISP

NO.15 Which of the following statements about Switched Multimegabit Data Service (SMDS) are true?
Each correct answer represents a complete solution. Choose two.
A. It is a logical connection between two devices.
B. It uses fixed-length (53-byte) packets to transmit information.
C. It supports speeds of 1.544 Mbps over Digital Signal level 1 (DS-1) transmission facilities.
D. It is a high-speed WAN networking technology used for communication over public data networks
Answer: C,D

GIAC test questions   GISP exam   GISP test answers   GISP   GISP

NO.16 Which of the following functions are performed by a firewall?
Each correct answer represents a complete solution. Choose all that apply.
A. It hides vulnerable computers that are exposed to the Internet.
B. It logs traffic to and from the private network.
C. It enhances security through various methods, including packet filtering, circuit-level filtering, and
application filtering.
D. It blocks unwanted traffic.
Answer: A,B,C,D

GIAC test questions   GISP   GISP   GISP   GISP

NO.17 Which of the following types of attacks slows down or stops a server by overloading it with requests?
A. Vulnerability attack
B. Impersonation attack
C. Network attack
D. DoS attack
Answer: D

GIAC   GISP   GISP   GISP

NO.18 Which of the following statements about DMZ are true?
Each correct answer represents a complete solution. Choose two.
A. It is an anti-virus software that scans the incoming traffic on an internal network.
B. It is the boundary between the Internet and a private network.
C. It contains company resources that are available on the Internet, such as Web servers and FTP
servers.
D. It contains an access control list (ACL).
Answer: B,C

GIAC   GISP   GISP certification training   GISP answers real questions   GISP test answers

NO.19 When no anomaly is present in an Intrusion Detection, but an alarm is generated, the response is known
as __________.
A. False positive
B. False negative
C. True negative
D. True positive
Answer: A

GIAC original questions   GISP test answers   GISP original questions   GISP test questions   GISP   GISP

NO.20 Which of the following attacks involves multiple compromised systems to attack a single target?
A. Brute force attack
B. DDoS attack
C. Dictionary attack
D. Replay attack
Answer: B

GIAC test   GISP   GISP   GISP demo   GISP

NO.21 Which of the following terms refers to the protection of data against unauthorized access?
A. Auditing
B. Recovery
C. Confidentiality
D. Integrity
Answer: C

GIAC   GISP answers real questions   GISP original questions

NO.22 Which of the following protocols is used to verify the status of a certificate?
A. CEP
B. HTTP
C. OSPF
D. OCSP
Answer: D

GIAC certification   GISP exam dumps   GISP original questions

NO.23 Which of the following heights of fence deters only casual trespassers?
A. 3 to 4 feet
B. 2 to 2.5 feet
C. 8 feet
D. 6 to 7 feet
Answer: A

GIAC   GISP answers real questions   GISP

NO.24 Which of the following statements about the bridge are true?
Each correct answer represents a complete solution. Choose two.
A. It filters traffic based on IP addresses.
B. It forwards broadcast packets.
C. It assigns a different network address per port.
D. It filters traffic based on MAC addresses.
Answer: B,D

GIAC   GISP original questions   GISP

NO.25 Which of the following is the best way of protecting important data against virus attack?
A. Updating the anti-virus software regularly.
B. Taking daily backup of data.
C. Using strong passwords to log on to the network.
D. Implementing a firewall.
Answer: A

GIAC exam prep   GISP answers real questions   GISP study guide

NO.26 Which of the following policies is set by a network administrator to allow users to keep their emails and
documents for a fixed period of time?
A. Retention policy
B. Password policy
C. Audit policy
D. Backup policy
Answer: A

GIAC   GISP   GISP   GISP

NO.27 Which of the following statements about role-based access control (RBAC) model is true?
A. In this model, a user can access resources according to his role in the organization.
B. In this model, the permissions are uniquely assigned to each user account.
C. In this model, the same permission is assigned to each user account.
D. In this model, the users can access resources according to their seniority.
Answer: A

GIAC   GISP   GISP questions

NO.28 Which of the following statements about smurf is true?
A. It is an ICMP attack that involves spoofing and flooding.
B. It is a UDP attack that involves spoofing and flooding.
C. It is a denial of service (DoS) attack that leaves TCP ports open.
D. It is an attack with IP fragments that cannot be reassembled.
Answer: A

GIAC   GISP   GISP   GISP study guide

NO.29 Which of the following are methods used for authentication?
Each correct answer represents a complete solution. Choose all that apply.
A. Smart card
B. Biometrics
C. Username and password
D. Magnetic stripe card
Answer: A,B,C,D

GIAC questions   GISP   GISP original questions   GISP questions

NO.30 Which methods help you to recover your data in the event of a system or hard disk failure?
Each correct answer represents a complete solution. Choose two.
A. Install a RAID system
B. Use data encryption
C. Install and use a tape backup unit
D. Install UPS systems on all important devices
Answer: A,C

GIAC exam simulations   GISP pdf   GISP   GISP   GISP

ITCertKing offer the latest 000-318 exam material and high-quality 70-332 pdf questions & answers. Our HP2-Z24 VCE testing engine and MB7-701 study guide can help you pass the real exam. High-quality E20-385 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/GISP_exam.html

GIAC certification G2700 the latest exam questions and answers

There a galaxy of talents in the 21st century, but professional IT talents not so many. Society need a large number of professional IT talents. Now IT certification exam is one of the methods to inspect the employees' ability, but it is not so easy to is one of the way to IT certification exams. Generally, people who participate in the IT certification exam should choose a specific training course, and so choosing a good training course is the guarantee of success. ITCertKing's training course has a high quality, which its practice questions have 95% similarity with real examination. If you use ITCertKing's product to do some simulation test, you can 100% pass your first time to attend IT certification exam.

Are you worried about how to passs the terrible GIAC G2700 exam? Do not worry, With ITCertKing's GIAC G2700 exam training materials in hand, any IT certification exam will become very easy. ITCertKing's GIAC G2700 exam training materials is a pioneer in the GIAC G2700 exam certification preparation.

Selecting shortcut and using technique are to get better success. If you want to get security that you can pass GIAC G2700 certification exam at the first attempt, ITCertKing GIAC G2700 exam dumps is your unique and best choice. It is the dumps that you can't help praising it. There are no better dumps at the moment. The dumps can let you better accurate understanding questions point of G2700 exam so that you can learn purposefully the relevant knowledge. In addition, if you have no time to prepare for your exam, you just remember the questions and the answers in the dumps. The dumps contain all questions that can appear in the real exam, so only in this way, can you pass your exam with no ease.

Exam Code: G2700
Exam Name: GIAC (GIAC Certified ISO-2700 Specialist Practice Test)
One year free update, No help, Full refund!
Total Q&A: 453 Questions and Answers
Last Update: 2014-01-18

ITCertKing have a strong It expert team to constantly provide you with an effective training resource. They continue to use their rich experience and knowledge to study the real exam questions of the past few years. Finally ITCertKing's targeted practice questions and answers have advent, which will give a great help to a lot of people participating in the IT certification exams. You can free download part of ITCertKing's simulation test questions and answers about GIAC certification G2700 exam as a try. Through the proof of many IT professionals who have use ITCertKing's products, ITCertKing is very reliable for you. Generally, if you use ITCertKing's targeted review questions, you can 100% pass GIAC certification G2700 exam. Please Add ITCertKing to your shopping cart now! Maybe the next successful people in the IT industry is you.

G2700 Free Demo Download: http://www.itcertking.com/G2700_exam.html

NO.1 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC demo   G2700   G2700   G2700   G2700

NO.2 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC   G2700 exam   G2700 pdf   G2700 test

NO.3 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700   G2700 study guide

NO.4 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC certification training   G2700 practice test   G2700   G2700 questions

NO.5 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC certification training   G2700 braindump   G2700   G2700   G2700 answers real questions   G2700 exam

NO.6 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC   G2700 exam simulations   G2700

NO.7 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC questions   G2700   G2700

NO.8 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC   G2700 test questions   G2700   G2700   G2700

NO.9 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC   G2700 test   G2700   G2700 exam

NO.10 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC   G2700 certification training   G2700

NO.11 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC   G2700   G2700 braindump   G2700   G2700

NO.12 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC   G2700   G2700 pdf   G2700   G2700 original questions

NO.13 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC braindump   G2700   G2700 test answers   G2700 test questions

NO.14 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC exam prep   G2700 demo   G2700   G2700   G2700 answers real questions

NO.15 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC questions   G2700   G2700 test   G2700 certification   G2700   G2700

NO.16 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC test   G2700   G2700 questions

NO.17 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC exam simulations   G2700   G2700   G2700   G2700 exam   G2700

NO.18 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC   G2700   G2700 exam simulations   G2700 braindump

NO.19 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC   G2700   G2700   G2700

NO.20 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC exam dumps   G2700   G2700

NO.21 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC   G2700 study guide   G2700   G2700 practice test   G2700

NO.22 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC   G2700   G2700 original questions   G2700 test answers   G2700   G2700 exam simulations

NO.23 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC   G2700 certification training   G2700 certification training   G2700   G2700

NO.24 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC   G2700 exam dumps   G2700   G2700

NO.25 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC   G2700   G2700

NO.26 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC   G2700 dumps   G2700   G2700 exam simulations   G2700 demo

NO.27 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC answers real questions   G2700   G2700

NO.28 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC pdf   G2700   G2700 test answers   G2700

NO.29 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC exam simulations   G2700 exam dumps   G2700   G2700

NO.30 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC test questions   G2700 pdf   G2700 original questions

ITCertKing offer the latest 3I0-012 exam material and high-quality HP0-J60 pdf questions & answers. Our IIA-CFSA VCE testing engine and 642-457 study guide can help you pass the real exam. High-quality ICBB dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/G2700_exam.html