Free GIAC GCFA Exam Dumps Questions & Answers

Peter works as a Computer Hacking Forensic Investigator for SecureEnet Inc. He has been assigned with a project of investigating a disloyal employee who is accused of stealing secret data from the company and selling it to the competitor company. Peter is required to collect proper evidences and information to present before the court for prosecution. Which of the following parameters is necessary for successful prosecution of this corporate espionage?

• A.To prove that the information has a value.
• B.To submit investigative report to senior officials.
• C.To prove that the data belongs to the company.
• D.To present the evidences before the court.

Which of the following fsck commands will you use to check all filesystems listed in /etc/fstab?

• A.fsck -P
• B.fsck -y
• C.fsck -f
• D.fsck -A

Which of the following type of files is NOT deleted by Disk Cleanup program of Windows XP?

• A.Offline Files
• B.Temporary Internet Files
• C.Old data files
• D.Temporary Setup Files

You work as a Network Administrator for Net World International. Rick, a Sales Manager, complains that his Windows 98 computer is not displaying the taskbar. You reboot his computer and find that the taskbar is still missing. How will you resolve the issue?

• A.Reinstall Windows 98 on Rick's computer.
• B.Replace WIN.INI from backup.
• C.Use Registry Editor to delete the following registry key: HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerStuckRects
• D.Copy the registry from backup.

You work as a Web developer for ABC Inc. You want to investigate the Cross-Site Scripting attack on your company's Web site. Which of the following methods of investigation can you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

• A.Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
• B.Look at the Web server's logs and normal traffic logging.
• C.Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
• D.Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.