Exam Dumps GCFA Practice Free Latest GIAC Practice Tests
GCFA Exam Questions | Real GCFA Practice Dumps
The GCFA certification is an excellent career move for professionals who are interested in pursuing a career in computer forensics. Certified professionals are highly valued by employers and can expect to earn a competitive salary. In addition, the certification demonstrates a commitment to professional development and a dedication to upholding the highest standards of ethical conduct in the field of computer forensics.
GIAC GCFA certification is a highly respected certification in the field of digital forensics. It validates the skills and knowledge required to conduct complex digital investigations and is recognized by employers around the world. To prepare for the exam, candidates should take specialized training courses and use study materials and practice exams provided by GIAC. Achieving the GCFA certification can open up new career opportunities and increase earning potential.
NEW QUESTION # 96
Adam works as a professional Computer Hacking Forensic Investigator. He has been assigned with the project of investigating an iPod, which is suspected to contain some explicit material. Adam wants to connect the compromised iPod to his system, which is running on Windows XP (SP2) operating system.
He doubts that connecting the iPod with his computer may change some evidences and settings in the iPod. He wants to set the iPod to read-only mode. This can be done by changing the registry key within the Windows XP (SP2) operating system. Which of the following registry keys will Adam change to accomplish the task?
- A. HKEY_LOCAL_MACHINE\CurrentControlset\Control\StorageDevicePolicies
- B. HKEY_LOCAL_MACHINE\System\CurrentControlset\StorageDevicePolicies
- C. HKEY_LOCAL_MACHINE\System\CurrentControlset\Control\StorageDevicePolicies
- D. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
Answer: C
NEW QUESTION # 97
Which of the following file systems provides file-level security?
- A. CDFS
- B. FAT32
- C. FAT
- D. NTFS
Answer: D
NEW QUESTION # 98
Which of the following tools is used to extract human understandable interpretation from the computer binary files?
- A. Galleta
- B. Word Extractor
- C. FAU
- D. FTK Imager
Answer: B
NEW QUESTION # 99
You work as a Network Administrator for a bank. For securing the bank's network, you configure a firewall and an IDS. In spite of these security measures, intruders are able to attack the network. After a close investigation, you find that your IDS is not configured properly and hence is unable to generate alarms when needed. What type of response is the IDS giving?
- A. True Positive
- B. False Positive
- C. True Negative
- D. False Negative
Answer: D
NEW QUESTION # 100
Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?
- A. Forensic Sorter
- B. Device Seizure
- C. Ontrack
- D. DriveSpy
Answer: D
NEW QUESTION # 101
Your network has a Windows 2000 Server computer with FAT file system, shared by several users.
This system stores sensitive data. You decide to encrypt this data to protect it from unauthorized access.
You want to accomplish the following goals:
Data should be secure and encrypted.
Administrative efforts should be minimum.
You should have the ability to recover encrypted files in case the file owner leaves the company.
Other permissions on encrypted files should be unaffected.
File-level security is required on the disk where data is stored.
Encrypting or decrypting of files should not be the responsibility of the file owner.
You take the following steps to accomplish these goals :
Convert the FAT file system to Windows 2000 NTFS file system.
Use Encrypting File System (EFS) to encrypt data.
Which of the following goals will you be able to accomplish?
Each correct answer represents a complete solution. Choose all that apply.
- A. You have the ability to recover encrypted files in case the file owner leaves the company.
- B. File-level security is available on the disk where data is stored.
- C. Administrative efforts are minimum.
- D. Other permissions on encrypted files are unaffected.
- E. Encrypting or decrypting of files is no longer the responsibility of the file owner.
- F. Data are secured and encrypted.
Answer: A,B,C,D,E,F
NEW QUESTION # 102
You work as a Network Administrator for Perfect Solutions Inc. You install Windows 98 on a computer. By default, which of the following folders does Windows 98 setup use to keep the registry tools?
- A. $SYSTEMROOT$WINDOWSSYSTEM32
- B. $SYSTEMROOT$WINDOWSREGISTRY
- C. $SYSTEMROOT$WINDOWS
- D. $SYSTEMROOT$REGISTRY
Answer: C
Explanation:
Section: Volume A
NEW QUESTION # 103
Peter, an expert computer user, attached a new sound card to his computer. He then restarts the computer, so that the BIOS can scan the hardware changes. What will be the memory range of ROM that the BIOS scan for additional code to be executed for proper working of soundcard?
- A. hC800 to hDF80
- B. hDF80 to hFF80
- C. hAA43 to hF345
- D. hCA79 to hAC20
Answer: A
NEW QUESTION # 104
Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers?
(Click the Exhibit button on the toolbar to see the case study.)
Each correct answer represents a complete solution. Choose two.
- A. Encrypting File System (EFS)
- B. Encrypted Data Transmissions
- C. PAP authentication
- D. Two-factor authentication
- E. Digital certificates
Answer: A,E
NEW QUESTION # 105
Which of the following describes software technologies that improve portability, manageability, and compatibility of applications by encapsulating them from the underlying operating system on which they are executed?
- A. Application virtualization
- B. System control
- C. System registry
- D. Group Policy
Answer: A
Explanation:
Section: Volume B
NEW QUESTION # 106
Which of the following tools can be used by a user to hide his identity?
Each correct answer represents a complete solution. Choose all that apply.
- A. Anonymizer
- B. Proxy server
- C. War dialer
- D. IPchains
- E. Rootkit
Answer: A,B,D
NEW QUESTION # 107
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate a multimedia enabled mobile phone, which is suspected to be used in a cyber crime.
Adam uses a tool, with the help of which he can recover deleted text messages, photos, and call logs of the mobile phone. Which of the following tools is Adam using?
- A. Galleta
- B. FAU
- C. Device Seizure
- D. FTK Imager
Answer: C
NEW QUESTION # 108
You work as a Network Administrator for Web World Inc. You want to host an e-commerce Web site on your network. You want to ensure that storage of credit card information is secure. Which of the following conditions should be met to accomplish this?
Each correct answer represents a complete solution. Choose all that apply.
- A. Strong encryption software should be used to store credit card information.
- B. The NTFS file system should be implemented on a client computer.
- C. NT authentication should be required for all customers before they provide their credit card numbers.
- D. Only authorized access should be allowed to credit card information.
Answer: A,D
Explanation:
Section: Volume A
NEW QUESTION # 109
Mark works as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. Mark installs a Checkpoint Firewall NGX on a SecurePlatform device. He performs a scheduled backup of his system settings and products configuration. Where are these backup files stored?
Each correct answer represents a complete solution. Choose all that apply.
- A. SCP
- B. On a PC in a file named userC
- C. Locally on the SecurePlatform machine hard drive
- D. TFTP
Answer: A,C,D
Explanation:
Section: Volume A
NEW QUESTION # 110
Joseph works as a Web Designer for WebTech Inc. He creates a Web site and wants to protect it from lawsuits. Which of the following steps will he take to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.
- A. Restrict customers according to their locations.
- B. Restrict the access to the site.
- C. Restrict the transfer of information.
- D. Restrict shipping in certain areas.
Answer: A,B,D
NEW QUESTION # 111
Which of the following classes of hackers describes an individual who uses his computer knowledge for breaking security laws, invading privacy, and making information systems insecure?
- A. Black Hat
- B. Gray Hat
- C. White Hat
- D. Security providing organizations
Answer: A
Explanation:
Section: Volume C
NEW QUESTION # 112
Sandra wants to create a full system state backup of her computer, which is running on Microsoft Windows XP operating system. Which of the following is saved in full state system backup?
Each correct answer represents a complete solution. Choose all that apply.
- A. Windows boot files
- B. Active Directory (NTDS)
- C. file system information
- D. Registry
Answer: A,B,D
NEW QUESTION # 113
Which of the following switches of the XCOPY command copies file ownerships and NTFS permissions on files while copying the files?
- A. /r
- B. /o
- C. /p
- D. /s
Answer: B
NEW QUESTION # 114
In Linux, which of the following files describes the processes that are started up during boot up?
- A. /etc/profile
- B. /etc/passwd
- C. /etc/shadow
- D. /etc/inittab
Answer: D
Explanation:
Section: Volume C
NEW QUESTION # 115
Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?
- A. Forensic Sorter
- B. Device Seizure
- C. Ontrack
- D. DriveSpy
Answer: D
Explanation:
Section: Volume C
NEW QUESTION # 116
Joseph works as a Software Developer for WebTech Inc. He wants to protect the algorithms and the techniques of programming that he uses in developing an application. Which of the following laws are used to protect a part of software?
- A. Code Security law
- B. Trademark laws
- C. Patent laws
- D. Copyright laws
Answer: C
NEW QUESTION # 117
Adam works as a professional Computer Hacking Forensic Investigator with the local police of his area. A project has been assigned to him to investigate a PDA seized from a local drug dealer. It is expected that many valuable and important information are stored in this PDA. Adam follows investigative methods, which are required to perform in a pre-defined sequential manner for the successful forensic investigation of the PDA.
Which of the following is the correct order to perform forensic investigation of PDA?
- A. Identification, Collection, Examination, Documentation
- B. Documentation, Examination, Identification, Collection
- C. Examination, Collection, Identification, Documentation
- D. Examination, Identification, Collection, Documentation
Answer: D
Explanation:
Section: Volume A
NEW QUESTION # 118
......
Verified GCFA Exam Dumps Q&As - Provide GCFA with Correct Answers: https://www.ipassleader.com/GIAC/GCFA-practice-exam-dumps.html
Pass Your GCFA Dumps Free Latest GIAC Practice Tests: https://drive.google.com/open?id=1tvpLMuWINmlqrEArRxy_sS-Ek7WPXLbw