GIAC Certified Firewall Analyst (GCFW) Free Practice Test
Question 1
Which of the following is known as DNS spoofing?
Correct Answer: D
Question 2
Which of the following applications cannot proactively detect anomalies related to a computer?
Correct Answer: C
Question 3
A scenario involves a pool of users with private IP addresses who need to access the Internet; however, the company has a limited number of IP addresses and needs to ensure users occupy only one public IP address.
Which technology is used to allow a pool of users to share one global IP address for Internet access?
Which technology is used to allow a pool of users to share one global IP address for Internet access?
Correct Answer: C
Question 4
You are the Network Administrator for a college. Wireless access is widely used at the college. You want the most secure wireless connections you can have. Which of the following would you use?
Correct Answer: C
Question 5
You work as a Network Administrator for NetTech Inc. Your manager needs to access a particular server on the network from outside the company network. You have a registered IP address assigned to a router on the company network. Which of the following will be useful for accessing the server from outside the network?
Correct Answer: C
Question 6
Which of the following can be used in an extended access list to filter traffic?
Each correct answer represents a part of the solution. Choose all that apply.
Each correct answer represents a part of the solution. Choose all that apply.
Correct Answer: A,B,D,E
Question 7
Which of the following attacks can be mitigated by providing proper training to the employees in an organization?
Correct Answer: B
Question 8
You are the Network Administrator for a large corporate network. You want to monitor all network traffic on your local network for suspicious activities and receive a notification when a possible attack is in process. Which of the following actions will you take for this?
Correct Answer: B
Question 9
Which of the following programs can be used to detect stealth port scans performed by a malicious hacker?
Each correct answer represents a complete solution. Choose all that apply.
Each correct answer represents a complete solution. Choose all that apply.
Correct Answer: A,B,C
Question 10
Which of the following can be configured so that when an alarm is activated, all doors lock and the suspect or intruder is caught between the doors in the dead-space?
Correct Answer: C
Question 11
The general form of the Cisco IOS is a.b.c.de. Which of the following indicates the major version number of the Cisco IOS?
Correct Answer: D
Question 12
Audit trail or audit log is a chronological sequence of audit records, each of which contains evidence directly pertaining to and resulting from the execution of a business process or system function. Under which of the following controls does audit control come?
Correct Answer: B
Question 13
Which of the following ports cannot be used to access the router from a computer?
Correct Answer: A