[Q32-Q54] 100%の合格率を試そう！更新されたのはGCFA試験問題 [2023]

100%の合格率を試そう！更新されたのはGCFA試験問題 [2023]

合格させるGCFA試験にはリアル問題解答

GCFA 認定資格は、デジタルフォレンジック分析のキャリアアップを目指す人にとって貴重な資産です。この資格を取得することで、個人がデジタル証拠を効果的に分析し、正確で信頼性の高い結果を提供するために必要な知識とスキルを持っていることを雇用主に示すことができます。さらに、この認定資格は、この分野のプロフェッショナルのネットワークへのアクセスを提供し、最新のデジタルフォレンジック分析の技術やテクニックについての継続的なトレーニングや教育の機会を提供します。

質問 # 32
You work as the Network Administrator for McNeil Inc. The company has a Unix-based network. You want to query an image root device and RAM disk size. Which of the following Unix commands can you use to accomplish the task?

A. setfdprm
B. rdump
C. mount
D. rdev

正解：D

解説：
Section: Volume B

質問 # 33
Which of the following registry hives stores configuration information specific to a particular user who is currently logged on to the computer?

A. HKEY_USERS
B. HKEY_CURRENT_USER
C. HKEY_LOCAL_MACHINE
D. HKEY_CLASSES_ROOT

正解：B

解説：
Section: Volume B

質問 # 34
Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.

A. Routers act as protocol translators and bind dissimilar networks.
B. Routers are responsible for making decisions about which of several paths network (or Internet) traffic will follow.
C. Routers do not limit physical broadcast traffic.
D. Routers organize addresses into classes, which are used to determine how to move packets from one network to another.

正解：A、B、D

質問 # 35
What is the name of the Secondary IDE slave, fourth partition in Linux operating system according to the Linux naming convention?

A. HDD4
B. HDA4
C. SDB3
D. HDC4

正解：A

質問 # 36
Which of the following switches is used with Pslist command on the command line to show the statistics for all active threads on the system, grouping these threads with their owning process?

A. Pslist -x
B. Pslist -m
C. Pslist -t
D. Pslist -d

正解：D

質問 # 37
Which of the following needs to be documented to preserve evidences for presentation in court?

A. Separation of duties
B. Incident response policy
C. Account lockout policy
D. Chain of custody

正解：D

質問 # 38
Sam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate a compromised system, which runs on Linux operating system. Sam wants to investigate and review local software, system libraries, and other application installed on the system.
Which of the following directories in Linux will he review to accomplish the task?

A. /mnt
B. /lib
C. /sbin
D. /tmp

正解：C

質問 # 39
Which of the following tools is used to restore deleted files from Linux and Mac OS X file system?

A. Active@ UNERASER
B. R-Undelete
C. Active@ UNDELETE
D. Easy-Undelete

正解：D

質問 # 40
Which of the following statements is NOT true about FAT16 file system?
Each correct answer represents a complete solution. Choose all that apply.

A. FAT16 file system works well with large disks because the cluster size increases as the disk partition size increases.
B. FAT16 does not support file-level security.
C. FAT16 file system supports Linux operating system.
D. FAT16 file system supports file-level compression.

正解：A、D

質問 # 41
Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

A. Information security representative
B. Lead investigator
C. Legal representative
D. Technical representative

正解：D

質問 # 42
Which of the following laws enacted in United States makes it illegal for an Internet Service Provider (ISP) to allow child pornography to exist on Web sites?

A. Sexual Predators Act
B. Child Pornography Prevention Act (CPPA)
C. USA PATRIOT Act
D. Prosecutorial Remedies and Tools Against the Exploitation of Children Today Act (PROTECT Act)

正解：A

質問 # 43
Which of the following file attributes are not available on a FAT32 partition?
Each correct answer represents a complete solution. Choose two.

A. Archive
B. Read Only
C. Encryption
D. Hidden
E. Compression

正解：C、E

解説：
Section: Volume C

質問 # 44
Sandra wants to create a full system state backup of her computer, which is running on Microsoft Windows XP operating system. Which of the following is saved in full state system backup?
Each correct answer represents a complete solution. Choose all that apply.

A. Registry
B. file system information
C. Active Directory (NTDS)
D. Windows boot files

正解：A、C、D

解説：
Section: Volume B

質問 # 45
Which of the following methods is used by forensic investigators to acquire an image over the network in a secure manner?

A. Secure Authentication for EnCase (SAFE)
B. DOS boot disk
C. Linux Live CD
D. EnCase with a hardware write blocker

正解：A

質問 # 46
Which of the following file systems is used by both CD and DVD?

A. Compact Disk File System (CDFS)
B. New Technology File System (NTFS)
C. Universal Disk Format (UDF)
D. Network File System (NFS)

正解：C

質問 # 47
Adam works as a professional Computer Hacking Forensic Investigator. He works with the local police. A project has been assigned to him to investigate an iPod, which was seized from a student of the high school. It is suspected that the explicit child pornography contents are stored in the iPod. Adam wants to investigate the iPod extensively. Which of the following operating systems will Adam use to carry out his investigations in more extensive and elaborate manner?

A. Windows XP
B. Linux
C. Mac OS
D. MINIX 3

正解：C

質問 # 48
You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. You are creating a user account by using the USERADD command. Which of the following entries cannot be used for specifying a user ID?
Each correct answer represents a complete solution. Choose all that apply.

A. 0
B. 1
C. 2
D. 3

正解：A、B、C

解説：
Section: Volume C

質問 # 49
Nathan works as a professional Ethical Hacker. He wants to see all open TCP/IP and UDP ports of his computer. Nathan uses the netstat command for this purpose but he is still unable to map open ports to the running process with PID, process name, and path. Which of the following commands will Nathan use to accomplish the task?

A. ping
B. Psloggedon
C. Pslist
D. fport

正解：D

質問 # 50
Which of the following types of computers is used for attracting potential intruders?

A. Honey pot
B. Files pot
C. Bastion host
D. Data pot

正解：A

質問 # 51
Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

A. Direct
B. Incontrovertible
C. Corroborating
D. Circumstantial

正解：D

質問 # 52
Which of the following file systems contains hardware settings of a Linux computer?

A. /home
B. /proc
C. /etc
D. /var

正解：B

質問 # 53
John works as a professional Ethical Hacker. He has been assigned the task of testing the security of www.we-are-secure.com. He has performed the footprinting step and now he has enough information to begin scanning in order to detect active computers. He sends a ping request to a computer using ICMP type 13. What kind of ICMP message is John using to send the ICMP ping request message?