GCFA Practice Test

GCFA Practice Test practice questions, page 5 of 13, with answer review and explanations.

Question 21

Which of the following is the correct order of loading system files into the main memory of the system, when the computer is running on Microsoft's Windows XP operating system?

  1. NTLDR, BOOT.ini, HAL.dll, NTDETECT.com, NTOSKRNL.exe
  2. NTLDR, BOOT.ini, NTDETECT.com, HAL.dll, NTOSKRNL.exe
  3. NTLDR, BOOT.ini, HAL.dll, NTDETECT.com, NTOSKRNL.exe
  4. BOOT.ini, HAL.dll, NTDETECT.com, NTLDR, NTOSKRNL.exe

Question 22

Which of the following file systems provides file-level security?

  1. CDFS
  2. FAT
  3. FAT32
  4. NTFS

Question 23

Adam works as an Incident Handler for Umbrella Inc. He is informed by the senior authorities that the server of the marketing department has been affected by a malicious hacking attack. Supervisors are also claiming that some sensitive data are also stolen. Adam immediately arrived to the server room of the marketing department and identified the event as an incident. He isolated the infected network from the remaining part of the network and started preparing to image the entire system. He captures volatile data, such as running process, ram, and network connections. Which of the following steps of the incident handling process is being performed by Adam?

  1. Recovery
  2. Eradication
  3. Identification
  4. Containment

Question 24

Which of the following is the process of overwriting all addressable locations on a disk?

  1. Drive wiping
  2. Spoofing
  3. Sanitization
  4. Authentication

Question 25

An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior started shortly after accepting an e-business card from an unknown person. What type of attack is this?

  1. Session Hijacking
  2. Bluesnarfing
  3. PDA Hijacking
  4. Privilege Escalation