GCFA Practice Test

GCFA Practice Test practice questions, page 6 of 13, with answer review and explanations.

Question 26

You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest single domain network. The network is configured on IP version 6 protocol. All the computers on the network are connected to a switch device. One day, users complain that they are unable to connect to a file server. You try to ping the client computers from the server, but the pinging fails. You try to ping the server's own loopback address, but it fails to ping. You restart the server, but the problem persists. What is the most likely cause?

  1. The cable that connects the server to the switch is broken.
  2. Automatic IP addressing is not working.
  3. The switch device is not working.
  4. The server is configured with unspecified IP address.
  5. The server's NIC is not working.

Question 27

You want to upgrade a partition in your computer's hard disk drive from FAT to NTFS. Which of the following DOS commands will you use to accomplish this?

  1. FORMAT C: /s
  2. CONVERT C: /fs:ntfs
  3. SYS C:
  4. FDISK /mbr

Question 28

A firewall is a combination of hardware and software, used to provide security to a network. It is used to protect an internal network or intranet against unauthorized access from the Internet or other outside networks. It restricts inbound and outbound access and can analyze all traffic between an internal network and the Internet. Users can configure a firewall to pass or block packets from specific IP addresses and ports. Which of the following tools works as a firewall for the Linux 2.4 kernel?

  1. OpenSSH
  2. IPTables
  3. IPChains
  4. Stunnel

Question 29

You work as a Web developer for ABC Inc. You want to investigate the Cross-Site Scripting attack on your company's Web site. Which of the following methods of investigation can you use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

  1. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
  2. Look at the Web server's logs and normal traffic logging.
  3. Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
  4. Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.

Question 30

Adam works as a professional Penetration tester. A project has been assigned to him to employ penetration testing on the network of Umbrella Inc. He is running the test from home and had downloaded every security scanner from the Internet. Despite knowing the IP range of all of the systems, and the exact network configuration, Adam is unable to get any useful results. Which of the following is the most like cause of this problem? Each correct answer represents a complete solution. Choose all that apply.

  1. Security scanners are only as smart as their database and cannot find unpublished vulnerabilities.
  2. Security scanners cannot perform vulnerability linkage.
  3. Security scanners are smart as their database and can find unpublished vulnerabilities.
  4. Security scanners are not designed to do testing through a firewall.