Approved GIAC GCIA Simulations Online

NEW QUESTION 1
In which of the following IKE phases the IPsec endpoints establish parameters for a secure ISAKMP session?

• A. IKE Phase 2.5
• B. IKE Phase 2
• C. IKE Phase 1
• D. IKE Phase 1.5

Answer: C

NEW QUESTION 2
Which of the following commands displays the IPX routing table entries?

• A. sh ipx traffic
• B. sh ipx route
• C. sh ipx int e0
• D. sho ipx servers

Answer: B

NEW QUESTION 3
Which of the following tools allows an attacker to intentionally craft the packets to gain unauthorized access?
Each correct answer represents a complete solution. Choose two.

• A. Tcpdump
• B. Ettercap
• C. Mendax
• D. Fragroute

Answer: CD

NEW QUESTION 4
You work as a Desktop Support Technician for umbrella Inc. The company uses a Windows-based network. An employee from the sales department is facing problem in the IP configuration of the network connection. He called you to resolve the issue. You suspect that the IP configuration is not configured properly. You want to use the ping command to ensure that IPv4 protocol is working on a computer. While running the ping command from the command prompt, you find that Windows Firewall is blocking the ping command. What is the cause of the issue?

• A. Core Networking Firewall rules do not allow IPv4 or IPv6.
• B. Windows Firewall rules do not allow Core Networking Tool
• C. Windows Firewall blocks the command line tool
• D. Core Networking Firewall rules do not allow ICMPv4 or ICMPv6 Echo Request

Answer: D

NEW QUESTION 5
You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008- based network. You have created a test domain for testing IPv6 addressing. Which of the following types of addresses are supported by IPv6?
Each correct answer represents a complete solution. Choose all that apply.

• A. Unicast
• B. Multicast
• C. Broadcast
• D. Anycast

Answer: ABD

NEW QUESTION 6
Which of the following forensic tool suite is developed for Linux operating system?

• A. Wetstone
• B. MForensicsLab
• C. ProDiscover
• D. S.M.A.R.

Answer: D

NEW QUESTION 7
Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol?
Each correct answer represents a complete solution. Choose all that apply.

• A. TIS authentication
• B. Rhosts (rsh-style) authentication
• C. Kerberos authentication
• D. Password-based authentication

Answer: ABC

NEW QUESTION 8
Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered only when the algorithm compares the changed cover with the original cover. Which of the following Steganography methods is Victor using to accomplish the task?

• A. The distortion technique
• B. The spread spectrum technique
• C. The cover generation technique
• D. The substitution technique

Answer: A

NEW QUESTION 9
John, a malicious hacker, forces a router to stop forwarding packets by flooding it with many open connections simultaneously so that all hosts behind it are effectively disabled. Which of the following attacks is John performing?

• A. Rainbow attack
• B. DoS attack
• C. ARP spoofing
• D. Replay attack

Answer: B

NEW QUESTION 10
Which of the following components are usually found in an Intrusion detection system (IDS)?
Each correct answer represents a complete solution. Choose two.

• A. Sensor
• B. Gateway
• C. Firewall
• D. Modem
• E. Console

Answer: AE

NEW QUESTION 11
Which of the following utilities produces the output shown in the image below?

• A. IPCONFIG
• B. PING
• C. PATHPING
• D. TRACERT

Answer: B

NEW QUESTION 12
Which of the following IPv4 to IPv6 transition methods uses encapsulation of IPv6 packets to traverse IPv4 networks?

• A. Dual-stack
• B. Translation
• C. Tunneling
• D. Stack

Answer: C

NEW QUESTION 13
Peter, a malicious hacker, wants to perform an attack. He first compromises computers distributed across the internet and then installs specialized software on these computers. He then instructs the compromised hosts to execute the attack. Every host can then be used to launch its own attack on the target computers. Which of the following attacks is Peter performing?

• A. Ping of Death attack
• B. DDoS attack
• C. SYN flood attack
• D. Teardrop attack

Answer: B

NEW QUESTION 14
You are the Administrator for a Windows 2000 based network that uses DHCP to dynamically assign IP addresses to the clients and DNS servers. You want to ensure that the DNS servers can communicate with another DNS server. Which type of query will you run to achieve this?

• A. PATHPING
• B. NSLOOKUP
• C. PING
• D. Recursive

Answer: D

NEW QUESTION 15
You work as a system administrator for BlueSkwer.com. You are using IPv6 on all computers. You want to ensure that you do not need to manually configure the IPv6 addresses. You want to take advantage of the router discovery features. For router discovery to work properly, what is needed?

• A. A properly configured IPv6 router
• B. Network load balancers
• C. CAT 6 cables
• D. Internet Explorer 8

Answer: A

NEW QUESTION 16
In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker gather user names, passwords, and other valuable information. To attempt a zone transfer, an attacker must be connected to a DNS server that is the authoritative server for that zone. Besides this, an attacker can launch a Denial of Service attack against the zone's DNS servers by flooding them with a lot of requests. Which of the following tools can an attacker use to perform a DNS zone transfer?
Each correct answer represents a complete solution. Choose all that apply.

• A. Dig
• B. Host
• C. NSLookup
• D. DSniff

Answer: ABC

NEW QUESTION 17
Which of the following monitors program activities and modifies malicious activities on a system?

• A. RADIUS
• B. NIDS
• C. Back door
• D. HIDS

Answer: D

NEW QUESTION 18
Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

• A. SAX
• B. Persistent
• C. Document Object Model (DOM)
• D. Non persistent

Answer: B

NEW QUESTION 19
Which of the following utilities allows to view all files including invisible files and folders on a Macintosh OS X?

• A. Directory Scan
• B. Folder Scan
• C. File Scan
• D. System Scan

Answer: A

NEW QUESTION 20
......