L'avènement de la certification GIAC pratique d'examen GCPM GSSP-NET-CSHARP questions et réponses

La Q&A lancée par Pass4Test est bien poupulaire. Pass4Test peut non seulement vous permettre à appendre les connaissances professionnelles, et aussi les expériences importantes résumées par les spécialistes dans l'Industrie IT. Pass4Test est un bon fournisseur qui peut répondre une grande demande des candidats. Avec l'aide de Pass4Test, vous aurez la confiance pour réussir le test. Vous n'aurez pas aucune raison à refuser le Pass4Test.

Vous avez aussi la possibilité à réussir le test GIAC GSSP-NET-CSHARP. Pass4Test offre la service de la mise à jour gratuite pendant un an. Si vous échouez le test, votre argent sera tout rendu. Maintenant, vous pouvez télécharger la partie gratuite prendre examinser la qualité des produits de Pass4Test.

Pass4Test vous promet de vous aider à passer le test GIAC GSSP-NET-CSHARP, vous pouvez télécharger maintenant les Q&As partielles de test GIAC GSSP-NET-CSHARP en ligne. Il y a encore la mise à jour gratuite pendant un an pour vous. Si vous malheureusement rater le test, votre argent sera 100% rendu.

Code d'Examen: GCPM
Nom d'Examen: GIAC (GIAC Certified Project Manager Certification Practice Test)
Questions et réponses: 397 Q&As

Code d'Examen: GSSP-NET-CSHARP
Nom d'Examen: GIAC (GIAC Secure Software Programmer - C#.NET)
Questions et réponses: 550 Q&As

Pass4Test est un site à offrir les Q&As de tout les tests Certification IT. Chez Pass4Test, vous pouvez trouvez de meilleurs matériaux. Nos guides d'étude vous permettent de réussir le test Certification GIAC GCPM sans aucune doute, sinon nous allons rendre votre argent d'acheter la Q&A et la mettre à jour tout de suite, en fait, c'est une situation très rare. Bien que il existe plusieurs façons à améliorer votre concurrence de carrière, Pass4Test est lequel plus efficace : Moins d'argent et moins de temps dépensés, plus sûr à passer le test Certification. De plus, un an de service après vendre est gratuit pour vous.

Pass4Test a de formations plus nouvelles pour le test GIAC GSSP-NET-CSHARP. Les experts dans l'industrie IT de Pass4Test profitant leurs expériences et connaissances professionnelles à lancer les Q&As plus chaudes pour faciliter la préparation du test GIAC GSSP-NET-CSHARP à tous les candidats qui nous choisissent. L'importance de Certification GIAC GSSP-NET-CSHARP est de plus en plus claire, c'est aussi pourquoi il y a de plus en plus de gens qui ont envie de participer ce test. Parmi tous ces candidats, pas mal de gens ont réussi grâce à Pass4Test. Ces feedbacks peuvent bien prouver nos produits essentiels pour votre réussite de test Certification.

Pass4Test vous permet à réussir le test Certification sans beaucoup d'argents et de temps dépensés. La Q&A GIAC GSSP-NET-CSHARP est recherchée par Pass4Test selon les résumés de test réel auparavant, laquelle est bien liée avec le test réel.

Il demande les connaissances professionnelles pour passer le test GIAC GSSP-NET-CSHARP. Si vous manquez encore ces connaissances, vous avez besoin de Pass4Test comme une resourece de ces connaissances essentielles pour le test. Pass4Test et ses experts peuvent vous aider à renfocer ces connaissances et vous offrir les Q&As. Pass4Test fais tous efforts à vous aider à se renforcer les connaissances professionnelles et à passer le test. Choisir le Pass4Test peut non seulement à obtenir le Certificat GIAC GSSP-NET-CSHARP, et aussi vous offrir le service de la mise à jour gratuite pendant un an. Si malheureusement, vous ratez le test, votre argent sera 100% rendu.

GSSP-NET-CSHARP Démo gratuit à télécharger: http://www.pass4test.fr/GSSP-NET-CSHARP.html

NO.1 You work as a Software Developer for ABC Inc. The company has several branches worldwide. The
company uses Visual Studio.NET 2005 as its application development platform. You have recently
finished the development of an application using .NET Framework 2.0. The application can be used only
for cryptography. Therefore, you have implemented the application on a computer. What will you call the
computer that implemented cryptography?
A. Cryptographic toolkit
B. Cryptosystem
C. Cryptographer
D. Cryptanalyst
Answer: B

GIAC   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP

NO.2 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its
application development platform. You have recently finished development of a Windows application
using .NET Framework. Users report that the application is not running properly. When the users try to
complete a particular action, the following error message comes out:
Unable to find assembly 'myservices, Version=1.0.0.0, Culture=neutral,
PublicKeyToken=29b5ad26c9de9b95'.
You notice that the error occurs as soon as the application tries to call functionality in a serviced
component that was registered by using the following command:
regsvcs.exe myservices.dll
You must make sure that the application can call the functionality in the serviced component with no
exceptions being thrown. What will you do to accomplish this task?
A. Run the command line tool: regasm.exe myservices.dll.
B. Copy the serviced component assembly into the C:\Program Files\ComPlus Applications fold er.
C. Run the command line tool: gacutil.exe /i myservices.dll.
D. Copy the serviced component assembly into the C:\WINDOWS\system32\Com folder.
Answer: C

GIAC   certification GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP examen

NO.3 Allen works as a Software Developer for ABC Inc. The company uses Visual Studio.NET as its
application development platform. He creates an application using .NET Framework. He wants to encrypt
all his e-mails that he sends to anyone. Which of the following will he use to accomplish the task?
A. PPP
B. FTP
C. PPTP
D. PGP
Answer: D

GIAC   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP examen   certification GSSP-NET-CSHARP   certification GSSP-NET-CSHARP

NO.4 Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server
that hosts the company's Web site. Andrew wants to enhance the security of the Web site by
implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use?
Each correct answer represents a complete solution. Choose two.
A. Symmetric
B. Secret
C. IPSec
D. Asymmetric
Answer: A,D

GIAC examen   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP

NO.5 In .NET Framework 3.5, you can create and access values that persist from one application session to
another. What are these values called?
A. Objects
B. Settings
C. Properties
D. Attributes
Answer: B

GIAC   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

NO.6 You work as a Software Developer for ABC Inc. The company has several branches worldwide. The
company uses Visual Studio .NET 2005 as its application development platform. You are creating an
application using .NET Framework 2.0. The application will be used by all the branches of the company.
You are using the CompareInfo class for culture-sensitive string comparisons. You write the following
code in the application:
String s1 = "C rtify";
String s2 = "c rtify";
String s3 = "c rtify";
You need to compare the s1 string with the s2 string and ensure that the string comparison must ignore
case. Which of the following code segments will you use to accomplish the task?
A. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.IgnoreCase));
B. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.None));
C. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.Ordinal));
D. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.OrdinalIgnoreCase));
Answer: A

GIAC examen   GSSP-NET-CSHARP examen   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP

NO.7 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You create an ASP.NET Web application using the .NET
Framework 3.5. You want to use a HTTP module called on each and every request made by the
application. It is called as part of the ASP.NET request pipeline. It has right to access life-cycle events
throughout the request. You also want to ensure that the HTTP module allows a user to inspect incoming
and outgoing requests and take appropriate action based on the request. What will be the correct order to
create the HTTP module?
A.
Answer: A

certification GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP examen

NO.8 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its
application development platform. You create an ASP.NET Web application using .NET Framework 3.5.
You create a Web form in the application that permits users to provide personal information. You add a
DropDownList control to the Web form to retrieve the residential status of users. The default item that the
DropDownList control displays is the "Select Country" option. You have to ensure that users select a
country other than the default option. Which of the following validation controls should you use to
accomplish this task?
A. RangeValidator
B. RequiredFieldValidator
C. CustomValidator
D. RegularExpressionValidator
Answer: B

GIAC examen   GSSP-NET-CSHARP examen   certification GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

Le plus récent matériel de formation GIAC GCIA

Beaucoup de gens trouvent difficile à passer le test GIAC GCIA, c'est juste parce que ils n'ont pas bien choisi une bonne Q&A. Vous penserez que le test GIAC GCIA n'est pas du tout autant dur que l'imaginer. Le produit de Pass4Test non seulement comprend les Q&As qui sont impressionnées par sa grande couverture des Questions, mais aussi le service en ligne et le service après vendre.

Avec la version plus nouvelle de Q&A GIAC GCIA, réussir le test GIAC GCIA n'est plus un rêve très loin pour vous. Pass4Test peut vous aider à réaliser ce rêve. Le test simualtion de Pass4Test est bien proche du test réel. Vous aurez l'assurance à réussir le test avec le guide de Pass4Test. Voilà, le succès est juste près de vous.

Pass4Test est un fournisseur professionnel des documentations à propos du test Certification IT, avec lequel vous pouvez améliorer le future de votre carrière. Vous trouverez que nos Q&As seraient persuadantes d'après d'avoir essayer nos démos gratuits. Le démo de GIAC GCIA (même que les autres démos) est gratuit à télécharger. Vous n'aurez pas aucune hésitation après travailler avec notre démo.

Code d'Examen: GCIA
Nom d'Examen: GIAC (GIAC Certified Intrusion Analyst)
Questions et réponses: 508 Q&As

Pour vous laisser savoir mieux que la Q&A GIAC GCIA produit par Pass4Test est persuadante, le démo de Q&A GIAC GCIA est gratuit à télécharger. Sous l'aide de Pass4Test, vous pouvez non seulement passer le test à la première fois, mais aussi économiser vos temps et efforts. Vous allez trouver les questions presque même que lesquels dans le test réel. C'est pourquoi tous les candidats peuvent réussir le test GIAC GCIA sans aucune doute. C'est aussi un symbole d'un meilleur demain de votre carrière.

Maintenant, beaucoup de professionnels IT prennent un même point de vue que le test GIAC GCIA est le tremplin à surmonter la pointe de l'Industrie IT. Beaucoup de professionnels IT mettent les yeux au test Certification GIAC GCIA.

GCIA Démo gratuit à télécharger: http://www.pass4test.fr/GCIA.html

NO.1 Which of the following tools are used to determine the hop counts of an IP packet?
Each correct answer represents a complete solution. Choose two.
A. TRACERT
B. Ping
C. IPCONFIG
D. Netstat
Answer: A,B

certification GIAC   certification GCIA   GCIA

NO.2 Which of the following statements about a host-based intrusion prevention system (HIPS) are true?
Each correct answer represents a complete solution. Choose two.
A. It can detect events scattered over the network.
B. It can handle encrypted and unencrypted traffic equally.
C. It cannot detect events scattered over the network.
D. It is a technique that allows multiple computers to share one or more IP addresses.
Answer: B,C

GIAC   GCIA   GCIA examen   GCIA examen

NO.3 This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a,
802.11b, and 802.11g standards. The main features of these tools are as follows: -It displays the signal
strength of a wireless network, MAC address, SSID, channel details, etc. -It is commonly used for the
following purposes:
A. War driving
B. Detecting unauthorized access points
C. Detecting causes of interference on a WLAN
D. WEP ICV error tracking
E. Making Graphs and Alarms on 802.11 Data, including Signal Strength
Answer: D

GIAC examen   GCIA   GCIA examen   GCIA examen   certification GCIA   GCIA

NO.4 Which of the following is known as a message digest?
A. Hash function
B. Hashing algorithm
C. Spider
D. Message authentication code
Answer: A

GIAC   GCIA examen   GCIA   GCIA

NO.5 John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite
fruit. John's password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Dictionary attack
B. Hybrid attack
C. Brute Force attack
D. Rule based attack
Answer: A,B,C

certification GIAC   GCIA   GCIA   GCIA   GCIA examen

NO.6 Which of the following is the default port for Simple Network Management Protocol (SNMP)?
A. TCP port 110
B. TCP port 25
C. TCP port 80
D. UDP port 161
Answer: D

GIAC examen   GCIA examen   certification GCIA   certification GCIA

NO.7 Adam works as a Computer Hacking Forensic Investigator in a law firm. He has been assigned with
his first project. Adam collected all required evidences and clues. He is now required to write an
investigative report to present before court for further prosecution of the case. He needs guidelines to
write an investigative report for expressing an opinion. Which of the following are the guidelines to write
an investigative report in an efficient way?
Each correct answer represents a complete solution. Choose all that apply.
A. All ideas present in the investigative report should flow logically from facts to conclusions.
B. Opinion of a lay witness should be included in the investigative report.
C. The investigative report should be understandable by any reader.
D. There should not be any assumptions made about any facts while writing the investigative report.
Answer: A,C,D

GIAC   certification GCIA   GCIA   GCIA   GCIA

NO.8 Adam works as a Security Analyst for Umbrella Inc. He is performing real-time traffic analysis on IP
networks using Snort. Adam is facing problems in analyzing intrusion data. Which of the following
software combined with Snort can Adam use to get a visual representation of intrusion data?
Each correct answer represents a complete solution. Choose all that apply.
A. Basic Analysis and Security Engine (BASE)
B. sguil
C. KFSensor
D. OSSIM
Answer: A,B,D

GIAC   certification GCIA   GCIA examen

NO.9 Allen works as a professional Computer Hacking Forensic Investigator. A project has been assigned to
him to investigate a computer, which is used by the suspect to sexually harass the victim using instant
messenger program. Suspect's computer runs on Windows operating system. Allen wants to recover
password from instant messenger program, which suspect is using, to collect the evidence of the crime.
Allen is using Helix Live for this purpose. Which of the following utilities of Helix will he use to accomplish
the task?
A. Asterisk Logger
B. Access PassView
C. Mail Pass View
D. MessenPass
Answer: D

GIAC   GCIA   certification GCIA   GCIA

NO.10 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Tunneling proxy server
B. Reverse proxy server
C. Anonymous proxy server
D. Intercepting proxy server
Answer: D

certification GIAC   GCIA examen   GCIA examen   GCIA   certification GCIA

NO.11 Sasha wants to add an entry to your DNS database for your mail server. Which of the following types of
resource records will she use to accomplish this.?
A. ANAME
B. SOA
C. MX
D. CNAME
Answer: C

GIAC   certification GCIA   GCIA

NO.12 Which of the following file systems is designed by Sun Microsystems?
A. NTFS
B. CIFS
C. ZFS
D. ext2
Answer: C

GIAC   certification GCIA   certification GCIA   certification GCIA   GCIA examen

NO.13 Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned
to him to investigate a multimedia enabled mobile phone, which is suspected to be used in a cyber crime.
Adam uses a tool, with the help of which he can recover deleted text messages, photos, and call logs of
the mobile phone. Which of the following tools is Adam using?
A. FAU
B. FTK Imager
C. Galleta
D. Device Seizure
Answer: D

GIAC   GCIA   GCIA examen   GCIA   GCIA   GCIA

NO.14 Which of the following methods is a behavior-based IDS detection method?
A. Knowledge-based detection
B. Protocol detection
C. Statistical anomaly detection
D. Pattern matching detection
Answer: C

GIAC examen   GCIA   certification GCIA   GCIA examen

NO.15 Which of the following can be applied as countermeasures against DDoS attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Limiting the amount of network bandwidth.
B. Blocking IP address.
C. Using LM hashes for passwords.
D. Using Intrusion detection systems.
E. Using the network-ingress filtering.
Answer: A,B,D,E

certification GIAC   certification GCIA   certification GCIA   certification GCIA   GCIA

NO.16 Victor works as a network administrator for DataSecu Inc. He uses a dual firewall Demilitarized
Zone (DMZ) to insulate the rest of the network from the portions that is available to the Internet.
Which of the following security threats may occur if DMZ protocol attacks are performed?
Each correct answer represents a complete solution. Choose all that apply.
A. Attacker can perform Zero Day attack by delivering a malicious payload that is not a part of the
intrusion detection/prevention systems guarding the network.
B. Attacker can gain access to the Web server in a DMZ and exploit the database.
C. Attacker managing to break the first firewall defense can access the internal network without breaking
the second firewall if it is different.
D. Attacker can exploit any protocol used to go into the internal network or intranet of the com pany
Answer: A,B,D

GIAC examen   certification GCIA   GCIA examen   certification GCIA   GCIA   GCIA examen

NO.17 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc.
Which of the following types of Cross-Site Scripting attack Ryan intends to do?
A. Document Object Model (DOM)
B. Non persistent
C. SAX
D. Persistent
Answer: D

GIAC examen   GCIA   certification GCIA   GCIA examen   certification GCIA

NO.18 Which of the following Web attacks is performed by manipulating codes of programming languages
such as SQL, Perl, Java present in the Web pages?
A. Command injection attack
B. Code injection attack
C. Cross-Site Request Forgery
D. Cross-Site Scripting attack
Answer: B

GIAC examen   GCIA   GCIA examen

NO.19 Which of the following tools performs comprehensive tests against web servers for multiple items,
including over 6100 potentially dangerous files/CGIs?
A. Dsniff
B. Snort
C. Nikto
D. Sniffer
Answer: C

certification GIAC   GCIA   GCIA examen

NO.20 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the
Internet. Adam is still worried about programs like Hping2 that can get into a network through covert
channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block all outgoing traffic on port 21
C. Block all outgoing traffic on port 53
D. Block ICMP type 3 messages
Answer: A

GIAC   GCIA examen   GCIA examen   GCIA examen   GCIA

NO.21 You work as a Network Administrator for Tech Perfect Inc. Your company has a Windows 2000based
network. You want to verify the connectivity of a host in the network. Which of the following utilities will you
use?
A. PING
B. TELNET
C. NETSTAT
D. TRACERT
Answer: A

GIAC   GCIA   certification GCIA   GCIA

NO.22 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
B. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
C. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: B

GIAC   GCIA examen   GCIA examen

NO.23 You work as a Network Administrator for Tech Perfect Inc. The office network is configured as an IPv6
network. You have to configure a computer with the IPv6 address, which is equivalent to an IPv4 publicly
routable address. Which of the following types of addresses will you choose?
A. Site-local
B. Global unicast
C. Local-link
D. Loopback
Answer: B

GIAC   GCIA examen   certification GCIA

NO.24 You are the Network Administrator for a large corporate network. You want to monitor all network traffic
on your local network for suspicious activities and receive a notification when a possible attack is in
process. Which of the following actions will you take for this?
A. Enable verbose logging on the firewall
B. Install a network-based IDS
C. Install a DMZ firewall
D. Install a host-based IDS
Answer: B

GIAC   certification GCIA   certification GCIA   GCIA

NO.25 Mark works as a Network Security Administrator for BlueWells Inc. The company has a
Windowsbased network. Mark is giving a presentation on Network security threats to the newly recruited
employees of the company. His presentation is about the External threats that the company recently faced
in the past. Which of the following statements are true about external threats?
Each correct answer represents a complete solution. Choose three.
A. These are the threats that originate from outside an organization in which the attacker attempts to gain
unauthorized access.
B. These are the threats that originate from within the organization.
C. These are the threats intended to flood a network with large volumes of access requests.
D. These threats can be countered by implementing security controls on the perimeters of the network,
such as firewalls, which limit user access to the Internet.
Answer: A,C,D

certification GIAC   certification GCIA   GCIA   GCIA   certification GCIA

NO.26 Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a
suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review
to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.
A. Checkpoint files
B. EDB and STM database files
C. Temporary files
D. cookie files
Answer: A,B,C

GIAC   GCIA   certification GCIA   GCIA

NO.27 You work as a Network Administrator for McNeil Inc. The company's Windows 2000-based network is
configured with Internet Security and Acceleration (ISA) Server 2000. You want to configure intrusion
detection on the server. You find that the different types of attacks on the Intrusion Detection tab page of
the IP Packet Filters Properties dialog box are disabled. What is the most likely cause?
A. The PPTP through ISA firewall check box on the PPTP tab page of the IP Packet Filters
Properties dialog box is not enabled.
B. The Enable IP routing check box on the General tab page of the IP Packet Filters Properties dialog box
is not selected.
C. The Log packets from Allow filters check box on the Packet Filters tab page of the IP Packet Filters
Properties dialog box is not enabled.
D. The Enable Intrusion detection check box on the General tab page of the IP Packet Filters Properties
dialog box is not selected.
Answer: D

certification GIAC   GCIA examen   GCIA   certification GCIA   GCIA examen

NO.28 SSH is a network protocol that allows data to be exchanged between two networks using a secure
channel. Which of the following encryption algorithms can be used by the SSH protocol?
Each correct answer represents a complete solution. Choose all that apply.
A. Blowfish
B. IDEA
C. DES
D. RC4
Answer: A,B,C

GIAC examen   certification GCIA   GCIA examen   GCIA   GCIA

NO.29 Which of the following statements are true about snort?
Each correct answer represents a complete solution. Choose all that apply.
A. It develops a new signature to find vulnerabilities.
B. It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans,
CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors
and system vulnerabilities, and DDoS clients.
C. It encrypts the log file using the 256 bit AES encryption scheme algorithm.
D. It is used as a passive trap to record the presence of traffic that should not be found on a network, such
as NFS or Napster connections.
Answer: A,B,D

GIAC   GCIA   GCIA

NO.30 Andrew works as a System Administrator for NetPerfect Inc. All client computers on the network run on
Mac OS X. The Sales Manager of the company complains that his MacBook is not able to boot. Andrew
wants to check the booting process. He suspects that an error persists in the bootloader of Mac OS X.
Which of the following is the default bootloader on Mac OS X that he should use to resolve the issue?
A. LILO
B. BootX
C. NT Loader
D. GRUB
Answer: B

GIAC   certification GCIA   GCIA examen   certification GCIA   certification GCIA

Dans cette société de l'information technologies, c'est bien populaire que l'on prenne la formation en Internet, Pass4Test est l'un des sites d'offrir la formation particulère pour le test GIAC GCIA. Pass4Test a une expérience riche pour répondre les demandes des candidats.

Le dernier examen GIAC GSLC gratuit Télécharger

Le Certificat de GIAC GSLC peut vous aider à monter un autre degré de votre carrière, même que votre niveau de vie sera amélioré. Avoir un Certificat GIAC GSLC, c'est-à-dire avoir une grande fortune. Le Certificat GIAC GSLC peut bien tester des connaissances professionnelles IT. La Q&A GIAC GSLC plus nouvelle vient de sortir qui peut vous aider à faciilter le cours de test préparation. Notre Q&A comprend les meilleurs exercices, test simulation et les réponses.

Pass4Test est un bon catalyseur du succès pour les professionnels IT. Beaucoup de gens passer le test GIAC GSLC avec l'aide de l'outil formation. Les experts profitent leurs expériences riches et connaissances à faire sortir la Q&A GIAC GSLC plus nouvelle qui comprend les exercices de pratiquer et le test simulation. Vous pouvez passer le test GIAC GSLC plus facilement avec la Q&A de Pass4Test.

Code d'Examen: GSLC
Nom d'Examen: GIAC (GIAC Security Leadership Certification (GSLC))
Questions et réponses: 567 Q&As

Pass4Test vous permet à réussir le test Certification sans beaucoup d'argents et de temps dépensés. La Q&A GIAC GSLC est recherchée par Pass4Test selon les résumés de test réel auparavant, laquelle est bien liée avec le test réel.

Le succès n'est pas loin de vous si vous choisissez Pass4Test. Vous allez obtenir le Certificat de GIAC GSLC très tôt. Pass4Test peut vous permettre à réussir 100% le test GIAC GSLC, de plus, un an de service en ligne après vendre est aussi gratuit pour vous.

GSLC Démo gratuit à télécharger: http://www.pass4test.fr/GSLC.html

NO.1 Which of the following protocols is used as a transport protocol for Internet dial-up connections?
A. SMTP
B. SNMP
C. DHCP
D. PPP
Answer: D

certification GIAC   GSLC   GSLC examen

NO.2 Which of the following provides security by implementing authentication and encryption on Wireless
LAN (WLAN)?
A. WEP
B. WAP
C. L2TP
D. IPSec
Answer: A

GIAC   GSLC   GSLC   GSLC

NO.3 Which system is designed to analyze, detect, and report on security-related events.?
A. HIPS
B. NIPS
C. NIDS
D. HIDS
Answer: B

GIAC   GSLC   certification GSLC   GSLC

NO.4 John works as a Programmer for We-are-secure Inc. On one of his routine visits to the company, he
noted down the passwords of the employees while they were typing them on their computer screens.
Which of the following social engineering attacks did he just perform?
A. Shoulder surfing
B. Important user posing
C. Dumpster diving
D. Authorization by third party
Answer: A

certification GIAC   GSLC   certification GSLC   GSLC

NO.5 Rick, the Network Administrator of the Fimbry Hardware Inc., wants to design the initial test model for
Internet Access. He wants to fulfill the following goals:
No external traffic should be allowed into the network.
Administrators should be able to restrict the websites which can be accessed by the internal
users.
Which of the following technologies should he use to accomplish the above goals? (Click the Exhibit
button on the toolbar to see the case study.)
A. Internet Connection Sharing (ICS)
B. Network Address Translator (NAT)
C. Firewall
D. Proxy Server
E. Routing and Remote Access Service (RRAS)
Answer: D

GIAC   certification GSLC   GSLC examen   certification GSLC   GSLC

NO.6 You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Server 2008
Active Directory-based single domain single forest network. The functional level of the forest is Windows
Server 2008. The company's headquarters is located at Los Angeles. A branch office of the company is
located at Denver. You are about to send a message to Rick who is a Network Administrator at Denver.
You want to ensure that the message cannot be read by anyone but the recipient. Which of the following
keys will you use to encrypt the message?
A. Your public key
B. The recipient's private key
C. The recipient's public key
D. Your private key
Answer: C

GIAC   GSLC examen   GSLC examen

NO.7 Which of the following tools is based on Linux and used to carry out the Penetration Testing?
A. JPlag
B. BackTrack
C. Vedit
D. Ettercap
Answer: B

certification GIAC   GSLC   GSLC   GSLC   GSLC

NO.8 Fill in the blank with the appropriate type of router.
A ______ router performs packet-filtering and is used as a firewall.
A. screening
Answer: A

GIAC examen   GSLC   GSLC   certification GSLC

NO.9 Which of the following options is an approach to restricting system access to authorized users?
A. MIC
B. MAC
C. RBAC
D. DAC
Answer: C

GIAC   GSLC examen   GSLC   GSLC examen   GSLC examen

NO.10 Drag and Drop the layers of TCP/IP model according to their level of data encapsulation.
A.
Answer: A

GIAC examen   GSLC examen   GSLC

NO.11 A wireless network uses multiple modulation schemes to make the signal strong so that it can travel far.
These modulation schemes work with a certain IEEE standard. Choose and drop the correct standards in
the right pane according to the modulation scheme.
A.
Answer: A

certification GIAC   certification GSLC   certification GSLC   certification GSLC   GSLC

NO.12 You work as a Network Administrator for Net World International. The company has a Windows Server
2008 network environment. The network is configured as a Windows Active Directory-based single
domain single forest network. The functional level of the forest is Windows Server 2008. All client
computers on the network run Windows Vista Ultimate.
You are configuring a public key interface (PKI) to support domain users and computers. All users will use
smart cards for logon. You have configured a global group named SCIssuer that will issue smart cards for
all domain users. A file server named SecServer is configured on the network. The certificate-based
IPSec encryption is required for all communications to and from the SecServer server. A VPN server is
configured on the network to enable sales managers to connect to the network remotely using their
laptops which run Windows Vista Ultimate. The L2TP connection is required for the VPN server. Place the
users, computers, and groups to the certificate templates that are required for implementing the PKI
infrastructure.
A.
Answer: A

GIAC   GSLC   GSLC examen   GSLC

NO.13 You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008
domain-based network. The network has three Windows Server 2008 member servers and 150 Windows
Vista client computers. According to the company's security policy, you want to apply a firewall profile to
the network.Choose the firewall profiles supported by Windows Server 2008 and Windows Vista.
A.
Answer: A

certification GIAC   GSLC   certification GSLC   GSLC

NO.14 Which of the following applications would be considered a data warehousing application?
A. Golf score tracking
B. Badge reader
C. Fraud detection
D. eCommerce site
Answer: C

GIAC   GSLC examen   GSLC   certification GSLC   GSLC

NO.15 Fill in the blank with the appropriate word.
A_______ is a computer system on the Internet that is expressly set up to attract and trap people who
attempt to penetrate other people's computer systems.
A. honeypot
Answer: A

GIAC   certification GSLC   certification GSLC   GSLC examen   GSLC examen   certification GSLC

NO.16 Drop the appropriate value to complete the formula.
A.
Answer: A

GIAC   certification GSLC   certification GSLC   certification GSLC   GSLC

NO.17 Which of the following are the examples of administrative controls?
Each correct answer represents a complete solution. Choose all that apply.
A. Security policy
B. Auditing
C. Security awareness training
D. Data Backup
Answer: A, C

GIAC examen   GSLC examen   certification GSLC

NO.18 You are the project manager for your organization and are trying to determine which vendor your
organization will use. You have determined that any vendor that would like to bid on your project work will
need to have a Microsoft Certified System Engineer on staff, have eight years of Cisco experience, and
have at least two references from similar projects. What have you created in this scenario?
A. Screening system for the vendors
B. Weighting system for the vendors
C. Preferred vendors list
D. Bidders conference
Answer: A

certification GIAC   GSLC   GSLC   GSLC

NO.19 You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single forest single
domain network. The domain functional level is set to Windows Server 2003. You have configured an
Active Directory-integrated DNS zone on the network. A new security policy dictates that each incoming
DNS query should be recorded. Which of the following steps will you take to implement the new security
policy?
A. Create a GPO.
Configure Audit Object Access.
Attach the GPO to the domain.
B. Do nothing, each incoming DNS queries is recorded by default in DNS.LOG file.
C. Enable debug logging on the DNS server.
D. Create a new OU.
Move the DNS server account to the OU.
Create a GPO.
Configure Audit Logon events.
Attach the GPO to the OU.
Answer: C

GIAC   GSLC examen   GSLC   certification GSLC

NO.20 Which of the following encryption algorithms is applied in the PGP encryption system?
A. TDE
B. Triple DES
C. Blowfish
D. IDEA
Answer: D

GIAC examen   GSLC   certification GSLC

NO.21 Which of the following is used to describe the type of FTP access in which a user does not have
permissions to list the contents of directories, but can access the contents if he knows the path and file
name?
A. Secure FTP
B. Blind FTP
C. Passive FTP
D. Hidden FTP
Answer: B

GIAC examen   GSLC examen   GSLC   GSLC

NO.22 Which of the following viruses is designed to prevent antivirus researchers from examining its code by
using various methods that make tracing and disassembling difficult?
A. Armored virus
B. Stealth virus
C. Multipartite virus
D. Polymorphic virus
Answer: A

GIAC   certification GSLC   GSLC   GSLC examen   GSLC examen

NO.23 The promiscuous mode is a configuration of a network card that makes the card pass all traffic it
receives to the central processing unit rather than just packets addressed to it. Which of the following
tools works by placing the host system network card into the promiscuous mode?
A. Sniffer
B. THC-Scan
C. NetStumbler
D. Snort
Answer: A

GIAC   GSLC   certification GSLC   GSLC

NO.24 Which of the following programs can collect various types of personal information, such as Internet
surfing habits, and Web sites that the user has visited?
A. Spyware
B. Honeypot
C. Worm
D. Malware
Answer: A

GIAC   GSLC   GSLC   GSLC   certification GSLC

NO.25 Janet is the project manager of the NHQ Project for her company. Janet is nearly done leading the
project and there have been no cost or schedule overruns in the development of the new software for her
company. The project team has been completing their work on time and there is still $75,000 left in the
project budget. Janet decides to have the project team implement some extra features to the project
scope to use all of the $75,000 in the budget even though the customer didn't specifically ask for the
added features. This scenario is an example of which one of the following?
A. Scope creep
B. Gold plating
C. Change management
D. Value added change
Answer: B

GIAC   GSLC   GSLC examen   GSLC

NO.26 You work as a Network Administrator for Net World International. The company has a Windows Server
2008 network environment. The network is configured as a Windows Active Directory-based single
domain single forest network. The functional level of the forest is Windows Server 2008. All client
computers on the network run Windows Vista Ultimate. You configure a public key infrastructure (PKI) on
the network. You configure a root CA and a subordinate CA on the network. For security reasons, you
want to take the root CA offline. You are required to configure the CA servers to support for certificate
revocation.
Choose the steps you will take to accomplish the task.
A.
Answer: A

GIAC   GSLC   GSLC   GSLC

NO.27 Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active
Directory domain-based network. The domain contains one hundred Windows XP Professional client
computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired
Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client
computers must be able to automatically connect to the wireless LAN. However, the unauthorized
computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants
to configure all the wireless access points and client computers to act in accordance with the company's
security policy. What will he do to accomplish this?
Each correct answer represents a part of the solution. Choose three.
A. Configure the authentication type for the wireless LAN to Open system.
B. Install a firewall software on each wireless access point.
C. Configure the authentication type for the wireless LAN to Shared Key.
D. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
E. Broadcast SSID to connect to the access point (AP).
F. On each client computer, add the SSID for the wireless LAN as the preferred network.
Answer: C, D. F

NO.28 You work as a Network Administrator for Perfect Solutions Inc. The company has a Windows Active
Directory-based single domain single forest network. The company's network is connected to the Internet
through a T1 line. The firewall is configured on the network for securing the internal network from the
intruders on the Internet. The functional level of the forest is Windows Server 2003. You are designing a
public key infrastructure (PKI) for the network. The security policy of the company states that all users
should use smart cards for authentication. Select and place the type of certificate authority (CA) that is
required to be configured on the network to implement the security policy of the company.
A.
Answer: A

certification GIAC   certification GSLC   certification GSLC   GSLC examen   GSLC examen

NO.29 Which of the following are the goals of risk management?
Each correct answer represents a complete solution. Choose three.
A. Identifying the risk
B. Finding an economic balance between the impact of the risk and the cost of the countermeasure
C. Identifying the accused
D. Assessing the impact of potential threats
Answer: A, B, D

GIAC   GSLC   GSLC   GSLC examen

NO.30 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Automated penetration testing
B. Code review
C. Manual penetration testing
D. Vulnerability scanning
Answer: D

GIAC examen   certification GSLC   GSLC examen   certification GSLC

Vous avez aussi la possibilité à réussir le test GIAC GSLC. Pass4Test offre la service de la mise à jour gratuite pendant un an. Si vous échouez le test, votre argent sera tout rendu. Maintenant, vous pouvez télécharger la partie gratuite prendre examinser la qualité des produits de Pass4Test.

GIAC GCFW examen pratique questions et réponses

Est-ce que vous vous souciez encore pour passer le test GIAC GCFW? Pourquoi pas choisir la formation en Internet dans une société de l'informatique. Un bon choix de l'outil formation peut résoudre le problème de prendre grande quantité de connaissances demandées par le test GIAC GCFW, et vous permet de préparer mieux avant le test. Les experts de Pass4Test travaillent avec tous efforts à produire une bonne Q&A ciblée au test GIAC GCFW. La Q&A est un bon choix pour vous. Vous pouvez télécharger le démo grantuit tout d'abord en Internet.

Selon les feedbacks les professionnels bien réputés dans l'Industrie IT, Pass4Test est un bon catalyseur de leurs succès. L'outil de formation offert par Pass4Test leur aide d'économiser le temps et l'argent, le plus important est qu'ils aient passé le test GIAC GCFW avec succès. Pass4Test est un fournissur fiable. Vous allez réaliser votre rêve avec l'aide de Pass4Test.

Code d'Examen: GCFW
Nom d'Examen: GIAC (GIAC Certified Firewall Analyst)
Questions et réponses: 391 Q&As

Il y a nombreux façons à vous aider à réussir le test GIAC GCFW. Le bon choix est l'assurance du succès. Pass4Test peut vous offrir le bon outil de formation, lequel est une documentation de qualité. La Q&A de test GIAC GCFW est recherchée par les experts selon le résumé du test réel. Donc l'outil de formation est de qualité et aussi autorisé, votre succès du test GIAC GCFW peut bien assuré. Nous allons mettre le jour successivement juste pour répondre les demandes de tous candidats.

Pass4Test possède une grande équipe composée des experts IT qui travaillent dur avec leurs riches expériences et connaissances pour produire un bon outil de formation. Selon les anciens test, le test simulation de Pass4Test est bien lié avec le test réel. Pass4Test peut vous assurer à réussir le test. Maintenant vous ajoutez votre outil de formation au panier, et votre rêve réalisera bien tôt.

Aujoud'hui, c'est une société de l'informatique. Beaucoup d'organisations peut provider l'outil de se former pour le test Certification GIAC GCFW. Mais on doit admettre que ces site n'ont pas la capacité à offrir une bonne Q&A, elles sont généralement très vagues et sans les points. C'est loin d'attirer les attentions des candidats.

La population de la Certification GIAC GCFW est très claire dans l'Industrie IT. Pass4Test se contribue à vous aider à réussir le test, de plus, un an de la mise à jour gratuite pendant est gratuite pour vous. Pass4Test sera le catalyseur de la réalisation de votre rêve. Pour le succès demain, Pass4Test est votre von choix. Vous serez le prochain talent de l'Indutrie IT sous l'aide de Pass4Test.

GCFW Démo gratuit à télécharger: http://www.pass4test.fr/GCFW.html

NO.1 Which of the following IDs is used to reassemble the fragments of a datagram at the destination point?
A. IP identification number
B. SSID
C. MAK ID
D. IP address
Answer: A

GIAC examen   GCFW examen   GCFW   GCFW

NO.2 Choose the best explanation for the resulting error when entering the command below.
A. The command is attempting to create a standard access list with extended access list param eters.
B. The ACL commands should be entered from the (config-router) configuration mode.
C. The wildcard mask is not provided for the source and destination addresses.
D. The port number given does not correspond with the proper transport protocol.
Answer: A

certification GIAC   GCFW examen   GCFW examen   certification GCFW

NO.3 John works as a professional Ethical Hacker. He has been assigned a project for testing the security of
www.we-are-secure.com. He wants to corrupt an IDS signature database so that performing attacks on
the server is made easy and he can observe the flaws in the We-are-secure server. To perform his task,
he first of all sends a virus that continuously changes its signature to avoid detection from IDS. Since the
new signature of the virus does not match the old signature, which is entered in the IDS signature
database, IDS becomes unable to point out the malicious virus. Which of the following IDS evasion
attacks is John performing?
A. Session splicing attack
B. Evasion attack
C. Polymorphic shell code attack
D. Insertion attack
Answer: C

GIAC   GCFW   GCFW examen   GCFW

NO.4 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP network. You have
been assigned a task to configure security mechanisms for the network of the company. You have
decided to configure a packet filtering firewall. Which of the following may be the reasons that made you
choose a packet filtering firewall as a security mechanism?
Each correct answer represents a complete solution. Choose all that apply.
A. It makes security transparent to end-users which provide easy use of the client application s.
B. It prevents application-layer attacks.
C. It is easy to install packet filtering firewalls in comparison to the other network security sol utions.
D. It easily matches most of the fields in Layer 3 packets and Layer 4 segment headers, and thus,
provides a lot of flexibility in implementing security policies.
Answer: A,C,D

GIAC examen   GCFW   certification GCFW   certification GCFW

NO.5 Which of the following statements are true about an IDP rule base notification?
A. It can be defined as reusable logical entities that the user can apply to the rules.
B. When an action is performed, a notification defines how to log information.
C. It is used to specify the type of network traffic that has to be monitored for attacks.
D. It directs an IDP to drop or close the connection.
Answer: B

GIAC   certification GCFW   GCFW   GCFW   certification GCFW   GCFW

NO.6 Which of the following can be monitored by using the host intrusion detection system (HIDS)?
Each correct answer represents a complete solution. Choose two.
A. Computer performance
B. File system integrity
C. Storage space on computers
D. System files
Answer: B,D

GIAC   GCFW examen   GCFW   certification GCFW   GCFW examen   certification GCFW

NO.7 A packet filtering firewall inspects each packet passing through the network and accepts or rejects it
based on user-defined rules. Based on which of the following information are these rules set to filter the
packets?
Each correct answer represents a complete solution. Choose all that apply.
A. Layer 4 protocol information
B. Actual data in the packet
C. Interface of sent or received traffic
D. Source and destination Layer 3 address
Answer: A,C,D

GIAC   GCFW   GCFW

NO.8 Which of the following is an attack with IP fragments that cannot be reassembled?
A. Dictionary attack
B. Smurf attack
C. Teardrop attack
D. Password guessing attack
Answer: C

GIAC   certification GCFW   GCFW   certification GCFW

NO.9 Which of the following are the reasons that network administrators use Access Control Lists?
Each correct answer represents a complete solution. Choose two.
A. Encrypting data to be routed
B. Removing weak user password
C. Controlling VTY access into a router
D. Filtering traffic as it passes through a router
Answer: C,D

certification GIAC   GCFW   GCFW examen   GCFW examen   GCFW

NO.10 A scenario involves a pool of users with private IP addresses who need to access the Internet;
however, the company has a limited number of IP addresses and needs to ensure users occupy only one
public IP address.
Which technology is used to allow a pool of users to share one global IP address for Internet access?
A. Port Address Translation
B. Per-user Address Translation
C. Pool Address Translation
D. Private Address Translation
Answer: A

GIAC   certification GCFW   GCFW examen

NO.11 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
B. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
C. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: C

GIAC examen   GCFW   certification GCFW   certification GCFW

NO.12 WinDump, tcpdump, and Wireshark specify which fields of information libpcap should record.
Which of the following filters do they use in order to accomplish the task?
A. Berkeley Packet Filter
B. IM filter
C. Web filter
D. FIR filter
Answer: A

GIAC   GCFW   GCFW examen

NO.13 Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6?
A. Electronic Codebook (ECB) Mode
B. Cipher Block Chaining (CBC) Mode
C. Propagating Cipher Block Chaining (PCBC) Mode
D. Cipher Feedback (CFB) Mode
Answer: B

certification GIAC   GCFW examen   GCFW   certification GCFW

NO.14 Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing
(APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an
attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether.
The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
Answer: A,C,D,E

GIAC examen   GCFW   GCFW   GCFW examen   GCFW   certification GCFW

NO.15 Which of the following is the default port for POP3?
A. 25
B. 21
C. 80
D. 110
Answer: B

certification GIAC   GCFW   GCFW examen   GCFW   GCFW

NO.16 Which of the following devices is used to identify out-of-date software versions, applicable patches,
system upgrades, etc?
A. Retinal scanner
B. Fingerprint reader
C. Smart card reader
D. Vulnerability scanner
Answer: D

GIAC examen   GCFW   GCFW   GCFW   GCFW

NO.17 Which of the following components are usually found in an Intrusion detection system (IDS).?
Each correct answer represents a complete solution. Choose two.
A. Firewall
B. Console
C. Gateway
D. Modem
E. Sensor
Answer: B,E

GIAC   GCFW   GCFW

NO.18 Which of the following protocols does IPsec use to perform various security functions in the network?
Each correct answer represents a complete solution. Choose all that apply.
A. Skinny Client Control Protocol
B. Authentication Header
C. Encapsulating Security Payload
D. Internet Key Exchange
Answer: B,C,D

GIAC examen   certification GCFW   GCFW

NO.19 Which of the following number ranges is used for the IP Standard ACL?
A. 100-199
B. 1000-1099
C. 600-699
D. 1-99
Answer: D

GIAC   GCFW   GCFW examen

NO.20 Which of the following commands configures a router to encrypt all passwords entered after the
command has been executed, as well as all passwords already on the running configuration?
A. no service password-encryption
B. enable password-encryption
C. no enable password-encryption
D. service password-encryption
Answer: D

GIAC examen   certification GCFW   GCFW   GCFW   GCFW   GCFW

NO.21 You work as a Network Architect for Tech Perfect Inc. The company has a corporate LAN network. You
will have to perform the following tasks:
l Limit events that occur from security threats such as viruses, worms, and spyware.
l Restrict access to the network based on identity or security posture.
Which of the following services will you deploy in the network to accomplish the tasks?
A. NetFlow
B. Protocol-Independent Multicast
C. Network Admission Control
D. Firewall Service Module
Answer: C

GIAC   GCFW examen   certification GCFW   GCFW

NO.22 Which of the following are the countermeasures against a man-in-the-middle attack?
Each correct answer represents a complete solution. Choose all that apply.
A. Using Secret keys for authentication.
B. Using public key infrastructure authentication.
C. Using Off-channel verification.
D. Using basic authentication.
Answer: A,B,C

GIAC   certification GCFW   GCFW

NO.23 Which of the following ICMPv6 neighbor discovery messages is sent by hosts to request an immediate
router advertisement, instead of waiting for the next scheduled advertisement?
A. Router Advertisement
B. Neighbor Advertisement
C. Router Solicitation
D. Neighbor Solicitation
Answer: C

certification GIAC   GCFW   GCFW   GCFW

NO.24 You work as a Security Manger for Tech Perfect Inc. The company has a Windows-based network.
You want to scroll real-time network traffic to a command console in a readable format. Which of the
following command line utilities will you use to accomplish the task?
A. WinPcap
B. WinDump
C. iptables
D. libpcap
Answer: B

GIAC   certification GCFW   GCFW examen   GCFW   GCFW

NO.25 Which of the following statements about the traceroute utility are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
B. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
C. It records the time taken for a round trip for each packet at each router.
D. It is an online tool that performs polymorphic shell code attacks.
Answer: B,C

certification GIAC   certification GCFW   GCFW

NO.26 Which of the following proxy servers is placed anonymously between the client and remote server and
handles all of the traffic from the client?
A. Web proxy server
B. Open proxy server
C. Forced proxy server
D. Caching proxy server
Answer: C

certification GIAC   GCFW   GCFW

NO.27 Which of the following types of Intrusion Detection Systems consists of an agent on a host that identifies
intrusions by analyzing system calls, application logs, file-system modifications (binaries, password files,
capability/acl databases) and other host activities and state?
A. HIDS
B. NIDS
C. APIDS
D. PIDS
Answer: A

GIAC examen   GCFW   GCFW

NO.28 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except the ports that must be used. He does need to have
port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still
worried about the programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block ICMP type 3 messages
C. Block all outgoing traffic on port 21
D. Block all outgoing traffic on port 53
Answer: A

GIAC   GCFW   certification GCFW   GCFW

NO.29 Which of the following intrusion detection systems (IDS) monitors network traffic and compares it
against an established baseline?
A. Network-based
B. File-based
C. Signature-based
D. Anomaly-based
Answer: D

certification GIAC   GCFW   GCFW examen   GCFW examen   GCFW

NO.30 Which of the following limits the number of packets seen by tcpdump?
A. BPF-based filter
B. Recipient filtering
C. Sender filtering
D. IFilters
Answer: A

GIAC   GCFW   GCFW examen   GCFW examen   certification GCFW

Si vous choisissez notre l'outil formation, Pass4Test peut vous assurer le succès 100% du test GIAC GCFW. Votre argent sera tout rendu si vous échouez le test.

Guide de formation plus récente de GIAC GPEN

Généralement, les experts n'arrêtent pas de rechercher les Q&As plus proches que test Certification. Les documentations offertes par les experts de Pass4Test peuvent vous aider à passer le test Certification. Les réponses de nos Q&As ont une précision 100%. C'est facile à obtenir le Certificat de GIAC après d'utiliser la Q&A de Pass4Test. Vous aurez une space plus grande dans l'industrie IT.

Dans n'importe quelle industrie, tout le monde espère une meilleure occasion de se promouvoir, surtout dans l'industrie de IT. Les professionnelles dans l'industrie IT ont envie d'une plus grande space de se développer. Le Certificat GIAC GPEN peut réaliser ce rêve. Et Pass4Test peut vous aider à réussir le test GIAC GPEN.

Code d'Examen: GPEN
Nom d'Examen: GIAC (GIAC Certified Penetration Tester)
Questions et réponses: 384 Q&As

Beaucoup de gens trouvent difficile à passer le test GIAC GPEN, c'est juste parce que ils n'ont pas bien choisi une bonne Q&A. Vous penserez que le test GIAC GPEN n'est pas du tout autant dur que l'imaginer. Le produit de Pass4Test non seulement comprend les Q&As qui sont impressionnées par sa grande couverture des Questions, mais aussi le service en ligne et le service après vendre.

Si vous voulez se prouver une compétition et s'enraciner le statut dans l'industrie IT à travers de test Certification GIAC GPEN, c'est obligatoire que vous devez avior les connaissances professionnelles. Mais il demande pas mal de travaux à passer le test Certification GIAC GPEN. Peut-être d'obtenir le Certificat GIAC GPEN peut promouvoir le tremplin vers l'Industrie IT, mais vous n'avez pas besoin de travailler autant dur à préparer le test. Vous avez un autre choix à faire toutes les choses plus facile : prendre le produit de Pass4Test comme vos matériaux avec qui vous vous pratiquez avant le test réel. La Q&A de Pass4Test est recherchée particulièrement pour le test IT.

Bien qu'Il y ait plein de talentueux dans cette société, il manque beaucoup de professionnels dans les domaine en cours de développement, l'Industrie IT est l'un de ces domaines. Donc le test GIAC GPEN est un bon l'examination de technique informatique. Pass4Test est un site d'offrir la formation particulière au test GIAC GPEN.

Maintenant, beaucoup de professionnels IT prennent un même point de vue que le test GIAC GPEN est le tremplin à surmonter la pointe de l'Industrie IT. Beaucoup de professionnels IT mettent les yeux au test Certification GIAC GPEN.

Les produits de Pass4Test a une bonne qualité, et la fréquence de la mise à jour est bien impressionnée. Si vous avez déjà choisi la Q&A de Pass4Test, vous n'aurez pas le problème à réussir le test GIAC GPEN.

GPEN Démo gratuit à télécharger: http://www.pass4test.fr/GPEN.html

NO.1 You execute the following netcat command:
c:\target\nc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?
A. Capture data on port 53 and performing banner grabbing.
B. Listen the incoming traffic on port 53 and execute the remote shell.
C. Listen the incoming data and performing port scanning.
D. Capture data on port 53 and delete the remote shell.
Answer: B

certification GIAC   GPEN   certification GPEN   GPEN   GPEN examen

NO.2 Which of the following attacks allows an attacker to sniff data frames on a local area network
(LAN) or stop the traffic altogether?
A. Man-in-the-middle
B. ARP spoofing
C. Port scanning
D. Session hijacking
Answer: B

GIAC   GPEN   certification GPEN   GPEN examen   GPEN examen

NO.3 Which of the following is NOT an example of passive footprinting?
A. Scanning ports.
B. Analyzing job requirements.
C. Performing the whois query.
D. Querying the search engine.
Answer: A

GIAC   GPEN examen   GPEN   GPEN

NO.4 Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.
A. WPA-PSK converts the passphrase into a 256-bit key.
B. WPA provides better security than WEP .
C. WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.
D. Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
Answer: A,B,C,D

GIAC   GPEN examen   GPEN   GPEN

NO.5 Adam works on a Linux system. He is using Sendmail as the primary application to transmit
emails.
Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log
files contains e-mail information such as source and destination IP addresses, date and time stamps
etc?
A. /log/var/logd
B. /var/log/logmail
C. /log/var/mailog
D. /var/log/mailog
Answer: D

GIAC   GPEN   GPEN examen   GPEN examen

NO.6 An executive in your company reports odd behavior on her PDA. After investigation you
discover that a trusted device is actually copying data off the PDA. The executive tells you that the
behavior started shortly after accepting an e-business card from an unknown person. What type of
attack is this?
A. Session Hijacking
B. PDA Hijacking
C. Privilege Escalation
D. Bluesnarfing
Answer: D

GIAC   GPEN   GPEN   GPEN

NO.7 Which of the following encryption modes are possible in WEP?
Each correct answer represents a complete solution. Choose all that apply.
A. No encryption
B. 256 bit encryption
C. 128 bit encryption
D. 40 bit encryption
Answer: A,C,D

GIAC   certification GPEN   GPEN examen   GPEN   GPEN

NO.8 John works as a professional Ethical Hacker. He has been assigned a project to test the security
of www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the
local disk and obtains all the files on the Web site. Which of the following techniques is he using to
accomplish his task?
A. TCP FTP proxy scanning
B. Eavesdropping
C. Web ripping
D. Fingerprinting
Answer: C

GIAC   GPEN   GPEN   GPEN examen

NO.9 Which of the following statements is true about the Digest Authentication scheme?
A. In this authentication scheme, the username and password are passed with every request, not
just when the user first types them.
B. A valid response from the client contains a checksum of the username, the password, the given
random value, the HTTP method, and the requested URL.
C. The password is sent over the network in clear text format.
D. It uses the base64 encoding encryption scheme.
Answer: B

GIAC   GPEN   certification GPEN   certification GPEN   GPEN

NO.10 You work as a professional Ethical Hacker. You are assigned a project to perform blackhat
testing on www.we-are-secure.com. You visit the office of we-are-secure.com as an air-condition
mechanic. You claim that someone from the office called you saying that there is some fault in the
air-conditioner of the server room. After some inquiries/arguments, the Security Administrator
allows you to repair the air-conditioner of the server room.
When you get into the room, you found the server is Linux-based. You press the reboot button of
the server after inserting knoppix Live CD in the CD drive of the server. Now, the server promptly
boots backup into Knoppix. You mount the root partition of the server after replacing the root
password in the /etc/shadow file with a known password hash and salt. Further, you copy the netcat
tool on the server and install its startup files to create a reverse tunnel and move a shell to a remote
server whenever the server is restarted. You simply restart the server, pull out the Knoppix Live CD
from the server, and inform that the air-conditioner is working properly.
After completing this attack process, you create a security auditing report in which you mention
various threats such as social engineering threat, boot from Live CD, etc. and suggest the
countermeasures to stop booting from the external media and retrieving sensitive data. Which of
the following steps have you suggested to stop booting from the external media and retrieving
sensitive data with regard to the above scenario?
Each correct answer represents a complete solution. Choose two.
A. Encrypting disk partitions
B. Using password protected hard drives
C. Placing BIOS password
D. Setting only the root level access for sensitive data
Answer: A,B

GIAC   GPEN   GPEN examen   GPEN examen

NO.11 You have inserted a Trojan on your friend's computer and you want to put it in the startup so
that whenever the computer reboots the Trojan will start to run on the startup. Which of the
following registry entries will you edit to accomplish the task?
A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Answer: D

GIAC examen   GPEN   GPEN   certification GPEN   GPEN

NO.12 Which of the following tools is used to verify the network structure packets and confirm that
the packets are constructed according to specification?
A. EtherApe
B. Snort decoder
C. AirSnort
D. snort_inline
Answer: B

GIAC   certification GPEN   GPEN

NO.13 A Web developer with your company wants to have wireless access for contractors that come
in to work on various projects. The process of getting this approved takes time. So rather than wait,
he has put his own wireless router attached to one of the network ports in his department. What
security risk does this present?
A. An unauthorized WAP is one way for hackers to get into a network.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. None, adding a wireless access point is a common task and not a security risk.
Answer: A

certification GIAC   GPEN   GPEN   GPEN

NO.14 Which of the following statements are true about SSIDs?
Each correct answer represents a complete solution. Choose all that apply.
A. SSIDs are case insensitive text strings and have a maximum length of 64 characters.
B. Configuring the same SSID as that of the other Wireless Access Points (WAPs) of other networks
will create a conflict.
C. SSID is used to identify a wireless network.
D. All wireless devices on a wireless network must have the same SSID in order to communicate
with each other.
Answer: B,C,D

GIAC   GPEN   GPEN examen   GPEN

NO.15 Which of the following are the scanning methods used in penetration testing?
Each correct answer represents a complete solution. Choose all that apply.
A. Vulnerability
B. Port
C. Network
D. Services
Answer: A,B,C

GIAC   GPEN   GPEN   GPEN

NO.16 Which of the following tools can be used to perform brute force attack on a remote database?
Each correct answer represents a complete solution. Choose all that apply.
A. FindSA
B. SQLDict
C. nmap
D. SQLBF
Answer: A,B,D

GIAC examen   GPEN   GPEN   certification GPEN

NO.17 Which of the following statements are true about KisMAC?
A. Data generated by KisMAC can also be saved in pcap format.
B. It cracks WEP and WPA keys by Rainbow attack or by dictionary attack.
C. It scans for networks passively on supported cards.
D. It is a wireless network discovery tool for Mac OS X.
Answer: A,C,D

GIAC examen   certification GPEN   certification GPEN   certification GPEN   GPEN

NO.18 TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to
the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the
attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored
and the port will drop the packet. Which of the following operating systems can be easily identified
with the help of TCP FIN scanning?
A. Solaris
B. Red Hat
C. Windows
D. Knoppix
Answer: C

GIAC   GPEN   GPEN   certification GPEN   GPEN examen

NO.19 You work as a Network Administrator for Infosec Inc. Nowadays, you are facing an
unauthorized access in your Wi-Fi network. Therefore, you analyze a log that has been recorded by
your favorite sniffer, Ethereal. You are able to discover the cause of the unauthorized access after
noticing the following string in the log file:
(Wlan.fc.type_subtype eq 32 and llc.oui eq 0x00601d and llc.pid eq 0x0001)
When you find All your 802.11b are belong to us as the payload string, you are convinced about
which tool is being used for the unauthorized access. Which of the following tools have you
ascertained?
A. AirSnort
B. Kismet
C. AiroPeek
D. NetStumbler
Answer: D

GIAC examen   GPEN   GPEN examen

NO.20 Which of the following options holds the strongest password?
A. california
B. $#164aviD

GIAC GCPM examen pratique questions et réponses

Pass4Test est un site web de vous offrir particulièrement les infos plus chaudes à propos de test Certification GIAC GCPM. Pour vous assurer à nous choisir, vous pouvez télécharger les Q&As partielles gratuites. Pass4Test vous promet un succès 100% du test GIAC GCPM.

Pass4Test possède une grande équipe composée des experts IT qui travaillent dur avec leurs riches expériences et connaissances pour produire un bon outil de formation. Selon les anciens test, le test simulation de Pass4Test est bien lié avec le test réel. Pass4Test peut vous assurer à réussir le test. Maintenant vous ajoutez votre outil de formation au panier, et votre rêve réalisera bien tôt.

Aujourd'hui, c'est une société pleine de gens talentueux, la meilleure façon de suivre et assurer la place dans votre carrière est de s'améliorer sans arrêt. Si vous n'augmentez pas dans votre carrière, vous êtes juste sous-développé parce que les autres sont meilleurs que vous. Pour éviter ce cas, vous devez vous former successivement.

Code d'Examen: GCPM
Nom d'Examen: GIAC (GIAC Certified Project Manager Certification Practice Test)
Questions et réponses: 397 Q&As

Pass4Test est un site à offrir les Q&As de tout les tests Certification IT. Chez Pass4Test, vous pouvez trouvez de meilleurs matériaux. Nos guides d'étude vous permettent de réussir le test Certification GIAC GCPM sans aucune doute, sinon nous allons rendre votre argent d'acheter la Q&A et la mettre à jour tout de suite, en fait, c'est une situation très rare. Bien que il existe plusieurs façons à améliorer votre concurrence de carrière, Pass4Test est lequel plus efficace : Moins d'argent et moins de temps dépensés, plus sûr à passer le test Certification. De plus, un an de service après vendre est gratuit pour vous.

Différentes façons peuvent atteindre le même but, ça dépend laquelle que vous prenez. Beaucoup de gens choisissent le test GIAC GCPM pour améliorer la vie et la carrière. Mais tous les gens ont déjà participé le test GIAC GCPM, ils savent qu'il est difficile à réussir le test. Il y a quelques dépensent le temps et l'argent, mais ratent finalement.

Peut-être vous voyez les guides d'études similaires pour le test GIAC GCPM, mais nous avons la confiance que vous allez nous choisir finalement grâce à notre gravité d'état dans cette industrie et notre profession. Pass4Test se contribue à amérioler votre carrière. Vous saurez que vous êtes bien préparé à passer le test GIAC GCPM lorsque vous choisissez la Q&A de Pass4Test. De plus, un an de service gratuit en ligne après vendre est aussi disponible pour vous.

Un bon choix de l'outil à se former est le point essentiel à passer le test GIAC GCPM, et les documentations à propos de rechercher le test GIAC GCPM est toujours une part plus importante pendant la préparation de test Certification. Les Q&As offertes par les experts de Pass4Test sont presque même que les tests réels. Pass4Test est un site web particulièrement en apportant les facilités aux gens qui veulent passer le test Certification.

GCPM Démo gratuit à télécharger: http://www.pass4test.fr/GCPM.html

NO.1 You work as a project manager for Xxxx Inc. You report the project details directly to the vice president
and the administrator of your organization. In which of the following types of organization structures are
you working?
A. Functional
B. Matrix
C. Jury
D. Projectized
Answer: B

certification GIAC   certification GCPM   GCPM examen   GCPM   GCPM examen

NO.2 You work as a project manager for Xxxx Inc. You have to subdivide project
deliverables and project work into smaller, more manageable components. Which of the following
processes will you use to perform the above task?
A. Create WBS
B. Verify scope
C. Control scope
D. Define activities
Answer: A

GIAC   GCPM   GCPM

NO.3 James works as the project manager for a software project. He and his team are on the Direct and
Manage Project Execution process. All of the following are inputs of this process except for which one?
A. Project charter
B. Organizational process assets
C. Enterprise environmental factors
D. Approved environmental requests
E. Project management plan
Answer: A

GIAC   GCPM   GCPM

NO.4 You work as a project manager for Xxxx Inc. You are working on a project that has a budget of
$805,000 and you have completed 45 percent of the project work. Due to some errors, however, you have
actually spent $430,000 of the budget. Management wants to know the project's cost performance index.
Which of the following values will you report?
A. 0.87
B. 0.80
C. 0.84
D. 0.86
Answer: C

GIAC examen   GCPM   GCPM examen

NO.5 You are the program manager for your project. You are working with the project managers regarding
the procurement processes for their projects. You have ruled out one particular contract type because it is
considered too risky for the program. Which one of the following contract types is usually considered to be
the most dangerous for the buyer?
A. Cost plus incentive fee
B. Time and materials
C. Cost plus percentage of costs
D. Fixed fee
Answer: C

GIAC   GCPM   certification GCPM   GCPM   certification GCPM

NO.6 You are the project manager for your organization. Marcy, a project stakeholder, is demanding that you
add some deliverables to your project scope for free. You explain to Marcy that it's too late in the project
execution to consider adding these deliverables, as most of the software your project team is creating is
nearly done. Marcy and you escalate the issue to management.
Management decides that you will add the deliverables to the project scope if Marcy pays a significant fee
and allows you additional time to complete the project. What conflict resolution method has management
offered?
A. Issue management
B. Compromising
C. Forcing
D. Confronting
Answer: B

certification GIAC   GCPM examen   certification GCPM   certification GCPM   GCPM

NO.7 You are in a project to create a Website. Your project team has met a few times and you're working
with them to develop the project's WBS. Jan, a marketing expert, is in disagreement with Larry over how
the Website should function. Gary and Gina are in disagreement over who'll take the lead on the design of
the software for the Website. Mark, Mary, and Martha are all bickering about the photo management
approach for the Website's pictures. What stage of team development is your project team currently in?
A. Forming
B. Storming
C. Performing
D. Norming
Answer: B

GIAC   GCPM   GCPM examen   certification GCPM

NO.8 Diane is the project manager of the HGF Project. A risk that has been identified and analyzed in the
project planning processes is now coming into fruition. What individual should respond to the risk with the
preplanned risk response?
A. Diane
B. Risk owner
C. Subject matter expert
D. Project sponsor
Answer: B

GIAC examen   GCPM   GCPM   GCPM   certification GCPM

NO.9 You are a new Project Manager that has been entrusted with a software development project that is in
progress. A sub-contracting company has been awarded a cost reimbursable contract to do the
development work on this project, and the project has been completed. While trying to close this
procurement, you discover that still there are some unresolved claims. However, the sub contract
company does not accept that these claims are unresolved. Which of the following is the best method for
reaching the final equitable settlement?
A. Litigation
B. Mediation
C. Direct negotiation
D. Alternative dispute resolution
Answer: C

certification GIAC   certification GCPM   GCPM   GCPM examen

NO.10 You work as a project manager for Xxxx Inc. You are working on several projects. Your projects vary in
size and budget. You have to calculate the ratios of schedule and cost compared to plan, so that you can
compare relative schedule and cost performance of each project. Which of the following components of
EVM provide measures of schedule and cost performance that are not affected by the size of the project?
A. BAC and EAC
B. CPI and SPI
C. CV and SV
D. PV and EV
Answer: B

GIAC   certification GCPM   GCPM   GCPM

NO.11 Which of the following processes formally permits the initiation of a project and marks the kickoff for all
consequent development activities to begin?
A. Develop project charter
B. Develop project management plan
C. Develop project scope statement
D. Develop project team
Answer: A

GIAC   GCPM examen   GCPM

NO.12 Which of the following is described in the statement below?
"It is a tool that defines a project and groups the project's discrete work elements in a way that helps
organize and define the total work scope of the project."
A. WBS
B. RBS
C. Gantt chart
D. Critical path
Answer: A

certification GIAC   certification GCPM   GCPM

NO.13 Which of the following processes formally permits the initiation of a project and marks the kickoff for all
consequent development activities to begin?
A. Develop project scope statement
B. Develop project management plan
C. Develop project charter
D. Develop project team
Answer: C

GIAC   GCPM   GCPM   GCPM

NO.14 Which of the following techniques is described in the statement below?
"It evaluates the abstract early start and finish dates and late start and finish dates for all activities devoid
of any resource limitations by performing a forward and backward pass analysis through the schedule
network."
A. Resource utilization
B. Critical path method
C. Critical Chain method
D. Resource leveling heuristic
Answer: B

GIAC   GCPM examen   GCPM

NO.15 You work as a project manager for Xxxx Inc. You are performing a task to generate a hierarchical list of
resources related by function and resource type that is used to facilitate planning and controlling of project
work. Which of the following components of project management will you use to accomplish the above
task?
A. PERT chart
B. RBS
C. Gantt chart
D. WBS
Answer: B

GIAC   GCPM examen   GCPM   certification GCPM

NO.16 You work as a project manager for BlueWell Inc. Which of the following techniques will you use to
determine whether particular work can best be accomplished by the project team or must be purchased
from the outside sources?
A. Expert Judgment
B. Make-or-Buy Analysis
C. Contract Types
D. Procurement Negotiations
Answer: B

GIAC   GCPM examen   GCPM   GCPM

NO.17 You are a Project Manager in your organization who is managing a considerably huge budget project
to develop new software. Considering the varied nature of your stakeholder group, you would like to put
together a plan as to what information the stakeholders need, and how to provide that information. What
is the document that you would need, and as part of which process group would you achieve this?
A. Communications Management Plan, Execution Process group
B. Project Management Plan, Planning Process Group
C. Communications Management Plan, Planning Process Group
D. Project Management Plan, Initiating Process Group
Answer: C

GIAC   certification GCPM   GCPM   GCPM examen   GCPM   GCPM

NO.18 Which of the following components of EVA is described in the statement below?
"It is a measure of how much of the project value has been earned so far through completed work, that is,
the budgeted cost of the work that has been performed through the project status date."
A. PV
B. AC
C. SV
D. EV
Answer: D

certification GIAC   GCPM examen   GCPM   GCPM   GCPM

NO.19 Which of the following are the characteristics of the project life cycle?
Each correct answer represents a complete solution. Choose all that apply.
A. Cost and staffing are low at the start, are high as the work is carried out, and decrease as the project
comes towards the end.
B. Stakeholders influences, risk, and uncertainty are at peak in the beginning of the project.
C. Skills to influence the final characteristics of the project's product, without much impact on cost, is at
peak in the beginning of the project and reduces as the project progresses towards completion.
D. It is limited by constraints, including resource constraints.
Answer: A,B,C

GIAC   certification GCPM   GCPM

NO.20 You are using the PDCA model to determine, implement, monitor, control, and maintain Information
Security Management System or ISMS. You have to evaluate the new processes and match up to the
results against the probable results to determine the differences. In which of the following phases of the
PDCA are you working?
A. Do
B. Act
C. Plan
D. Check
Answer: D

GIAC   GCPM   GCPM examen   certification GCPM   GCPM

NO.21 Which of the following is described in the statement below.?
"It is a group of sequential and related project phases that are defined by the organization and control
needs of the management or organizations concerned with the project, the nature of the project itself, and
the application area."
A. Verify scope
B. Project charter
C. Activity list
D. Project life cycle
Answer: D

GIAC   GCPM   GCPM   certification GCPM   GCPM examen

NO.22 Which of the following processes describes the statement below?
"It consists of the processes required to ensure that the project contains all the work required to complete
the project effectively."
A. Project communications management
B. Project scope management
C. Risk management
D. Project human resource management
Answer: B

GIAC examen   GCPM examen   GCPM   GCPM   GCPM

NO.23 You work as a project manager for Xxxx Inc. You are performing steps to carry out and finish the
project according to the measures drawn through the planning stage. Which of the following stages of the
project are you working on?
A. Monitoring and controlling
B. Closing
C. Initiation
D. Execution
Answer: D

GIAC examen   GCPM   certification GCPM   GCPM   GCPM examen

NO.24 Charlie has just completed the project according to the terms of the contract. She and the customer
are completing a walk through of the project deliverables, and the customer is asking for changes to the
deliverables before she'll accept the product. What project management process should manage the
documented change request that may come from scope verification?
A. Scope management
B. Perform integrated change control
C. Control Scope
D. Control change control
Answer: B

GIAC examen   GCPM   GCPM

NO.25 You are the project manager of the NHT Project. This project has 12,345 office doors to install
throughout a campus. Each of the doors costs the project $456 and requires special hardware to
electronically lock and open the doors. You've gathered the project team before they begin the installation
for a hands-on training. As a group you and the project team install 50 doors following a checklist of
instructions so that every door will be installed exactly the same throughout the campus and with minimal
waste. This is an example of what project execution technique?
A. Preventive action
B. Implemented corrective action
C. Quality control
D. Defect repair validation
Answer: A

GIAC examen   GCPM   certification GCPM   GCPM   GCPM examen

NO.26 You work as a project manager for Xxxx Inc. Which of the following processes will you use to formalize
the acceptance of the completed project deliverables?
A. Verify scope
B. Report performance
C. Expert judgment
D. Perform quality control
Answer: A

GIAC   GCPM   GCPM

NO.27 You work as a project manager for Xxxx Inc. You are in the project kickoff meeting. Which of the
following documents are reviewed during the project kickoff meeting?
Each correct answer represents a complete solution. Choose all that apply.
A. Project budget
B. Project WBS
C. Project charter
D. Project scope
Answer: A,C,D

GIAC examen   certification GCPM   certification GCPM   GCPM examen   certification GCPM   GCPM examen

NO.28 You work as a project manager for Xxxx Inc. A new project has been proposed to change all keyboards
of every computer in your organization. There are 1,600 keyboards that will need to be removed and
replaced with wireless keyboards. What document will you first need to start this project?
A. Project risk statement
B. Risk register
C. Project charter
D. Contract for new keyboards
Answer: C

GIAC   GCPM   GCPM   GCPM examen

NO.29 Which of the following are the characteristics of a project?
Each correct answer represents a complete solution. Choose all that apply.
A. Its success is measured by evaluating whether it meets or exceeds expectations of the stakeholders.
B. It is temporary in nature and has a definite beginning and ending date.
C. It is completed when the project goals are achieved.
D. It is common in nature.
Answer: A,B,C

certification GIAC   certification GCPM   certification GCPM   certification GCPM

NO.30 You work as a project manager for Xxxx Inc. Which of the following stages of the process group, if not
performed well by you, is unlikely that the project will be successful in meeting the business needs?
A. Monitoring and controlling
B. Initiation
C. Executing
D. Planning and design
Answer: B

GIAC   GCPM   certification GCPM   GCPM

On peut voir que beaucoup de candidats ratent le test GIAC GCPM quand même avec l'effort et beaucoup de temps dépensés. Cest une bonne preuve que le test GIAC GCPM est difficile à réussir. Pass4Test offre le guide d'étude bien fiable. Sauf le test GIAC GCPM, Pass4Test peut offrir les Q&As des autres test Certification IT.