Online Access Free GCFA Exam Questions

Which of the following is included in a memory dump file?

• A.The kernel-mode call stack for the thread that stopped the process from execution
• B.Security ID
• C.List of loaded drivers
• D.Stop message and its parameters

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He traceroutes the We-are-secure server and gets the following result:

Considering the above traceroute result, which of the following statements can be true?
Each correct answer represents a complete solution. Choose all that apply.

• A.Some router along the path is down.
• B.While tracerouting, John's network connection has become slow.
• C.The We-are-secure server is using a packet filtering firewall.
• D.The IP address of the We-are-secure server is not valid.

Which of the following switches of the XCOPY command copies file ownerships and NTFS permissions on files while copying the files?

• A./s
• B./o
• C./p
• D./r

You work as a Network Administrator for Perfect Solutions Inc. You install Windows 98 on a computer. By default, which of the following folders does Windows 98 setup use to keep the registry tools?

• A.$SYSTEMROOT$REGISTRY
• B.$SYSTEMROOT$WINDOWSSYSTEM32
• C.$SYSTEMROOT$WINDOWSREGISTRY
• D.$SYSTEMROOT$WINDOWS

You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

• A.Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.
• B.Look at the Web servers logs and normal traffic logging.
• C.Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
• D.Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.