Choice defines this era of information technology, and GuideTorrent is the choice that spares GCIA candidates the tedium of paper-based prep and the nerves of time-constrained study: 508+ Q&As covering the GIAC Certified Intrusion Analyst objectives, on every device you own.
GIAC GCIA Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Intrusion Detection Systems (IDS) | - IDS architecture and deployment
|
| Topic 2: Network Security Monitoring | - Monitoring methodologies
|
| Topic 3: Protocol and Attack Analysis | - Common attack traffic patterns
|
| Topic 4: Network Traffic Analysis | - Packet capture and inspection fundamentals
|
Studying for GCIA Without Paper and Without Borders
- Intrusion Detection Systems (IDS) ()
- Protocol and Attack Analysis ()
- Network Security Monitoring ()
GIAC Certified Intrusion Analyst Sample Questions:
In which of the following attacks does a hacker imitate a DNS server and obtain the entire DNS database?
- A. DNS transfer attack
- B. Illicit poisoning attack
- C. DNS poisoning attack
- D. Illicit zone transfer attack
Correct Answer: D 🗳️
You work as a desktop administrator for BlueSkwer.com. You are logged on to a Windows 7 computer with administrator rights. You have run the 'netsh interface IPv6 show interface' command which displays the following: What is the first interface index used for?
- A. Loopback
- B. MAC address
- C. 6to4 tunneling
- D. Intra-Site Automatic Tunnel Addressing Protocol
Correct Answer: A 🗳️
Which of the following is a form of cheating or copying someone else's work or idea without acknowledging the source?
- A. Copyright
- B. Patent
- C. Plagiarism
- D. Turnitin
Correct Answer: C 🗳️
Explanation: Only visible for GuideTorrent members. You can sign-up / login (it's free).
Which of the following attacks is based on the concept that IDSs cannot recognize Unicode encoded malicious data?
- A. DoS attack
- B. Fragmentation overlap attack
- C. Obfuscating attack payload
- D. Polymorphic shell code attack
Correct Answer: C 🗳️
You work as a Network Administrator for McNeil Inc. The company's Windows 2000-based network is configured with Internet Security and Acceleration (ISA) Server 2000. You configure intrusion detection on the server. Which of the following alerts notifies that repeated attempts to a destination computer are being made and no corresponding ACK (acknowledge) packet is being communicated?
- A. IP half scan attack
- B. Ping of death attack
- C. Land attack
- D. UDP bomb attack
Correct Answer: A 🗳️
Viewing page 1 out of 102 pages.
Viewing questions 1-5 out of 508 questions.


