2022年最新の有効なGCFA試験最新問題で2022年最新の学習ガイド
GCFA認定で究極のガイド [2022年更新]
GIAC GCFA 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
質問 105
Which of the following U.S. Federal laws addresses computer crime activities in communication lines, stations, or systems?
- A. 18 U.S.C. 1030
- B. 18 U.S.C. 1029
- C. 18 U.S.C. 2701
- D. 18 U.S.C. 2510
- E. 18 U.S.C. 1362
正解: E
解説:
Section: Volume B
質問 106
Which of the following types of evidence is considered as the best evidence?
- A. Information gathered through the witness's senses
- B. The original document
- C. A computer-generated record
- D. A copy of the original document
正解: B
質問 107
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the local disk and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his task?
- A. Web ripping
- B. Fingerprinting
- C. TCP FTP proxy scanning
- D. Eavesdropping
正解: A
質問 108
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate an iphone, which is being seized from a criminal. The local police suspect that this iphone contains some sensitive information. Adam knows that the storage partition of the iphone is divided into two partitions.
The first partition is used for the operating system. Other data of iphone is stored in the second partition. Which of the following is the name with which the second partition is mounted on the iphone?
- A. /var/data
- B. /data/var
- C. /private/var
- D. /var/private
正解: C
解説:
Section: Volume C
質問 109
The MBR of a hard disk is a collection of boot records that contain disk information such as disk architecture, cluster size, and so on. The main work of the MBR is to locate and run necessary operating system files that are required to run a hard disk. In the context of the operating system, MBR is also known as the boot loader.
Which of the following viruses can infect the MBR of a hard disk?
Each correct answer represents a complete solution. Choose two.
- A. Boot sector
- B. File
- C. Multipartite
- D. Stealth
正解: A,C
解説:
Section: Volume A
Explanation/Reference:
質問 110
Adam works as a professional Computer Hacking Forensic Investigator. He works with the local police. A project has been assigned to him to investigate an iPod, which was seized from a student of the high school. It is suspected that the explicit child pornography contents are stored in the iPod. Adam wants to investigate the iPod extensively. Which of the following operating systems will Adam use to carry out his investigations in more extensive and elaborate manner?
- A. Linux
- B. Windows XP
- C. Mac OS
- D. MINIX 3
正解: C
質問 111
Which of the following statements are true about Compact Disc (CD) and Digital Versatile Disk (DVD)?
Each correct answer represents a complete solution. Choose all that apply.
- A. CDs and DVDs are not affected by X-rays, and other sources of electromagnetic radiation.
- B. Data is encoded in the form of tiny pits on the surface of the CD and DVD.
- C. CDs and DVDs are affected by EMP from nuclear detonations.
- D. It takes a small amount of energy to affect the data that written on CD and DVD.
正解: B,D
解説:
Section: Volume B
質問 112
Which of the following tools are used to determine the hop counts of an IP packet?
Each correct answer represents a complete solution. Choose two.
- A. IPCONFIG
- B. Netstat
- C. Ping
- D. TRACERT
正解: C,D
質問 113
Which of the following statements about an extended partition are true?
Each correct answer represents a complete solution. Choose two.
- A. It cannot be formatted or assigned a drive letter.
- B. It can be sub-divided into logical drives.
- C. A maximum of four extended partitions can exist on a single basic disk.
- D. It cannot contain more than one logical drive.
正解: A,B
解説:
Section: Volume A
質問 114
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate the BlackBerry, which is suspected to be used to hide some important information.
Which of the following is the first step taken to preserve the information in forensic investigation of the BlackBerry?
- A. Keep BlackBerry in 'ON' state.
- B. Remove the storage media.
- C. Eliminate the ability of the device to receive the push data.
- D. Turn off the BlackBerry.
正解: C
質問 115
Which of the following statements is NOT true about FAT16 file system?
Each correct answer represents a complete solution. Choose all that apply.
- A. FAT16 file system works well with large disks because the cluster size increases as the disk partition size increases.
- B. FAT16 file system supports Linux operating system.
- C. FAT16 does not support file-level security.
- D. FAT16 file system supports file-level compression.
正解: A,D
質問 116
Which of the following statements are true about Compact Disc (CD) and Digital Versatile Disk (DVD)?
Each correct answer represents a complete solution. Choose all that apply.
- A. CDs and DVDs are not affected by X-rays, and other sources of electromagnetic radiation.
- B. Data is encoded in the form of tiny pits on the surface of the CD and DVD.
- C. CDs and DVDs are affected by EMP from nuclear detonations.
- D. It takes a small amount of energy to affect the data that written on CD and DVD.
正解: B,D
質問 117
Peter works as a Computer Hacking Forensic Investigator for SecureEnet Inc. He has been assigned with a project of investigating a disloyal employee who is accused of stealing secret data from the company and selling it to the competitor company. Peter is required to collect proper evidences and information to present before the court for prosecution. Which of the following parameters is necessary for successful prosecution of this corporate espionage?
- A. To prove that the data belongs to the company.
- B. To present the evidences before the court.
- C. To prove that the information has a value.
- D. To submit investigative report to senior officials.
正解: C
解説:
Section: Volume C
Explanation/Reference:
質問 118
Peter works as a Security Administrator for SecureEnet Inc. He observes that the database server of the company has been compromised and the data is stolen. Peter immediately wants to report this crime to the law enforcement authorities. Which of the following organizations looks after the computer crimes investigations in the United States?
- A. Local or National office of the US secret service
- B. Federal Bureau of Investigation
- C. National Institute of Standards and Technology
- D. Incident response team
正解: A
質問 119
Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?
- A. Dictionary attack
- B. Brute Force attack
- C. Hybrid attack
- D. Rainbow attack
正解: D
質問 120
Which of the following Acts enacted in United States allows the FBI to issue National Security Letters (NSLs) to Internet service providers (ISPs) ordering them to disclose records about their customers?
- A. Economic Espionage Act of 1996
- B. Computer Fraud and Abuse Act
- C. Electronic Communications Privacy Act of 1986
- D. Wiretap Act
正解: C
質問 121
John works for an Internet Service Provider (ISP) in the United States. He discovered child
pornography material on a Web site hosted by the ISP. John immediately informed law enforcement authorities about this issue. Under which of the following Acts is John bound to take such an action?
- A. Civil Rights Act of 1991
- B. Civil Rights Act of 1964
- C. Sexual Predators Act
- D. PROTECT Act
正解: C
質問 122
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He traceroutes the We-are-secure server and gets the following result:
Considering the above traceroute result, which of the following statements can be true?
Each correct answer represents a complete solution. Choose all that apply.
- A. The We-are-secure server is using a packet filtering firewall.
- B. The IP address of the We-are-secure server is not valid.
- C. Some router along the path is down.
- D. While tracerouting, John's network connection has become slow.
正解: A,C,D
解説:
Section: Volume B
質問 123
Which of the following methods can be used to start the Disk Defragmenter utility in Windows 9x?
Each correct answer represents a complete solution. Choose two.
- A. From Start menu > Programs > Accessories > System Tools, click Disk Defragmenter.
- B. From Start menu > Programs > Windows Explorer, right-click on the drive to be defragmented > click Properties in the popup menu > Tools tab, then click the Defragment Now button.
- C. From Start menu > Programs, click Disk Defragmenter.
- D. From Start menu > Programs > Windows Explorer, right-click on the drive to be defragmented, then click the Disk Defragmenter in the popup window.
正解: A,B
質問 124
......
GCFA練習試験と学習ガイドは厳密検証されたにはFast2test：https://jp.fast2test.com/GCFA-premium-file.html
2022年最新のな厳密検証された合格させるGCFA学習ガイドベズトお試しセット：https://drive.google.com/open?id=1f_Dp68Y5060EEUqVmFPd_Wh1ci7KdjgT