GIAC GCFW - GIAC Certified Firewall Analyst Exam
Page: 3 / 79
Total 391 questions
Question #11 (Topic: Topic 1)
You work as a Security Manger for Tech Perfect Inc. The company has a Windows-based
network.
You want to scroll real-time network traffic to a command console in a readable format.
Which of the following command line utilities will you use to accomplish the task?
network.
You want to scroll real-time network traffic to a command console in a readable format.
Which of the following command line utilities will you use to accomplish the task?
A. WinPcap
B. WinDump
C. iptables
D. libpcap
Answer: B
Question #12 (Topic: Topic 1)
A. 25
B. 21
C. 80
D. 110
Answer: D
Question #13 (Topic: Topic 1)
A scenario involves a pool of users with private IP addresses who need to access the
Internet; however, the company has a limited number of IP addresses and needs to ensure
users occupy only one public IP address.
Which technology is used to allow a pool of users to share one global IP address for
Internet access?
Internet; however, the company has a limited number of IP addresses and needs to ensure
users occupy only one public IP address.
Which technology is used to allow a pool of users to share one global IP address for
Internet access?
A. Port Address Translation
B. Per-user Address Translation
C. Pool Address Translation
D. Private Address Translation
Answer: A
Question #14 (Topic: Topic 1)
Which of the following protocols does IPsec use to perform various security functions in the
network?
Each correct answer represents a complete solution. Choose all that apply.
network?
Each correct answer represents a complete solution. Choose all that apply.
A. Skinny Client Control Protocol
B. Authentication Header
C. Encapsulating Security Payload
D. Internet Key Exchange
Answer: B,C,D
Question #15 (Topic: Topic 1)
Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison
Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP
spoofing may allow an attacker to sniff data frames on a local area network (LAN), modify
the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake ARP
messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP
spoofing may allow an attacker to sniff data frames on a local area network (LAN), modify
the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake ARP
messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
Answer: A,C,D,E
