L'avènement de la certification GIAC pratique d'examen GCPM questions et réponses

Le test GIAC GCPM est test certification très répandu dans l'industrie IT. Vous pourriez à améliorer votre niveau de vie, l'état dans l'industrie IT, etc. C'est aussi un test très rentable, mais très difficile à réussir.

Choisissez le Pass4Test, choisissez le succès. Le produit offert par Pass4Test vous permet à réussir le test GIAC GCPM. C'est necessaire de prendre un test simulation avant participer le test réel. C'est une façon bien effective. Choisir Pass4Test vous permet à réussir 100% le test.

Code d'Examen: GCPM
Nom d'Examen: GIAC (GIAC Certified Project Manager Certification Practice Test)
Questions et réponses: 397 Q&As

Pass4Test est un site de vous ramener au succès. Pass4Test peut vous aider à promouvoir les connaissances essentielles pour le test GIAC GCPM et passer le test à la première fois.

La population de la Certification GIAC GCPM est très claire dans l'Industrie IT. Pass4Test se contribue à vous aider à réussir le test, de plus, un an de la mise à jour gratuite pendant est gratuite pour vous. Pass4Test sera le catalyseur de la réalisation de votre rêve. Pour le succès demain, Pass4Test est votre von choix. Vous serez le prochain talent de l'Indutrie IT sous l'aide de Pass4Test.

Pass4Test provide non seulement le produit de qualité, mais aussi le bon service. Si malheureusement vous ne pouvez pas réussir le test, votre argent sera tout rendu. Le service de la mise à jour gratuite est aussi pour vous bien que vous passiez le test Certification.

La Q&A lancée par Pass4Test est bien poupulaire. Pass4Test peut non seulement vous permettre à appendre les connaissances professionnelles, et aussi les expériences importantes résumées par les spécialistes dans l'Industrie IT. Pass4Test est un bon fournisseur qui peut répondre une grande demande des candidats. Avec l'aide de Pass4Test, vous aurez la confiance pour réussir le test. Vous n'aurez pas aucune raison à refuser le Pass4Test.

GCPM Démo gratuit à télécharger: http://www.pass4test.fr/GCPM.html

NO.1 You work as a project manager for Xxxx Inc. You have to subdivide project
deliverables and project work into smaller, more manageable components. Which of the following
processes will you use to perform the above task?
A. Create WBS
B. Verify scope
C. Control scope
D. Define activities
Answer: A

GIAC examen   certification GCPM   GCPM   certification GCPM

NO.2 James works as the project manager for a software project. He and his team are on the Direct and
Manage Project Execution process. All of the following are inputs of this process except for which one?
A. Project charter
B. Organizational process assets
C. Enterprise environmental factors
D. Approved environmental requests
E. Project management plan
Answer: A

GIAC examen   certification GCPM   GCPM

NO.3 Which of the following techniques is described in the statement below?
"It evaluates the abstract early start and finish dates and late start and finish dates for all activities devoid
of any resource limitations by performing a forward and backward pass analysis through the schedule
network."
A. Resource utilization
B. Critical path method
C. Critical Chain method
D. Resource leveling heuristic
Answer: B

GIAC   GCPM examen   certification GCPM   certification GCPM   certification GCPM

NO.4 You work as a project manager for BlueWell Inc. Which of the following techniques will you use to
determine whether particular work can best be accomplished by the project team or must be purchased
from the outside sources?
A. Expert Judgment
B. Make-or-Buy Analysis
C. Contract Types
D. Procurement Negotiations
Answer: B

GIAC   certification GCPM   GCPM   GCPM   GCPM examen   certification GCPM

NO.5 Which of the following processes describes the statement below?
"It consists of the processes required to ensure that the project contains all the work required to complete
the project effectively."
A. Project communications management
B. Project scope management
C. Risk management
D. Project human resource management
Answer: B

certification GIAC   GCPM   GCPM   GCPM   GCPM examen

NO.6 You work as a project manager for Xxxx Inc. Which of the following processes will you use to formalize
the acceptance of the completed project deliverables?
A. Verify scope
B. Report performance
C. Expert judgment
D. Perform quality control
Answer: A

certification GIAC   GCPM examen   GCPM   GCPM   GCPM

NO.7 Which of the following are the characteristics of a project?
Each correct answer represents a complete solution. Choose all that apply.
A. Its success is measured by evaluating whether it meets or exceeds expectations of the stakeholders.
B. It is temporary in nature and has a definite beginning and ending date.
C. It is completed when the project goals are achieved.
D. It is common in nature.
Answer: A,B,C

GIAC   GCPM   GCPM

NO.8 You work as a project manager for Xxxx Inc. You are performing a task to generate a hierarchical list of
resources related by function and resource type that is used to facilitate planning and controlling of project
work. Which of the following components of project management will you use to accomplish the above
task?
A. PERT chart
B. RBS
C. Gantt chart
D. WBS
Answer: B

GIAC   GCPM   GCPM   GCPM examen   GCPM

NO.9 You are the project manager for your organization. Marcy, a project stakeholder, is demanding that you
add some deliverables to your project scope for free. You explain to Marcy that it's too late in the project
execution to consider adding these deliverables, as most of the software your project team is creating is
nearly done. Marcy and you escalate the issue to management.
Management decides that you will add the deliverables to the project scope if Marcy pays a significant fee
and allows you additional time to complete the project. What conflict resolution method has management
offered?
A. Issue management
B. Compromising
C. Forcing
D. Confronting
Answer: B

certification GIAC   GCPM examen   certification GCPM

NO.10 Which of the following components of EVA is described in the statement below?
"It is a measure of how much of the project value has been earned so far through completed work, that is,
the budgeted cost of the work that has been performed through the project status date."
A. PV
B. AC
C. SV
D. EV
Answer: D

GIAC   GCPM   certification GCPM   certification GCPM   GCPM

NO.11 You are in a project to create a Website. Your project team has met a few times and you're working
with them to develop the project's WBS. Jan, a marketing expert, is in disagreement with Larry over how
the Website should function. Gary and Gina are in disagreement over who'll take the lead on the design of
the software for the Website. Mark, Mary, and Martha are all bickering about the photo management
approach for the Website's pictures. What stage of team development is your project team currently in?
A. Forming
B. Storming
C. Performing
D. Norming
Answer: B

certification GIAC   certification GCPM   GCPM

NO.12 You work as a project manager for Xxxx Inc. You are working on several projects. Your projects vary in
size and budget. You have to calculate the ratios of schedule and cost compared to plan, so that you can
compare relative schedule and cost performance of each project. Which of the following components of
EVM provide measures of schedule and cost performance that are not affected by the size of the project?
A. BAC and EAC
B. CPI and SPI
C. CV and SV
D. PV and EV
Answer: B

GIAC   GCPM   certification GCPM   GCPM   GCPM   GCPM examen

NO.13 You are the project manager of the NHT Project. This project has 12,345 office doors to install
throughout a campus. Each of the doors costs the project $456 and requires special hardware to
electronically lock and open the doors. You've gathered the project team before they begin the installation
for a hands-on training. As a group you and the project team install 50 doors following a checklist of
instructions so that every door will be installed exactly the same throughout the campus and with minimal
waste. This is an example of what project execution technique?
A. Preventive action
B. Implemented corrective action
C. Quality control
D. Defect repair validation
Answer: A

certification GIAC   certification GCPM   GCPM examen

NO.14 You are a Project Manager in your organization who is managing a considerably huge budget project
to develop new software. Considering the varied nature of your stakeholder group, you would like to put
together a plan as to what information the stakeholders need, and how to provide that information. What
is the document that you would need, and as part of which process group would you achieve this?
A. Communications Management Plan, Execution Process group
B. Project Management Plan, Planning Process Group
C. Communications Management Plan, Planning Process Group
D. Project Management Plan, Initiating Process Group
Answer: C

certification GIAC   GCPM   GCPM   GCPM

NO.15 You are a new Project Manager that has been entrusted with a software development project that is in
progress. A sub-contracting company has been awarded a cost reimbursable contract to do the
development work on this project, and the project has been completed. While trying to close this
procurement, you discover that still there are some unresolved claims. However, the sub contract
company does not accept that these claims are unresolved. Which of the following is the best method for
reaching the final equitable settlement?
A. Litigation
B. Mediation
C. Direct negotiation
D. Alternative dispute resolution
Answer: C

GIAC examen   certification GCPM   GCPM examen

NO.16 Which of the following processes formally permits the initiation of a project and marks the kickoff for all
consequent development activities to begin?
A. Develop project scope statement
B. Develop project management plan
C. Develop project charter
D. Develop project team
Answer: C

certification GIAC   GCPM   GCPM   GCPM   GCPM   GCPM

NO.17 You work as a project manager for Xxxx Inc. You report the project details directly to the vice president
and the administrator of your organization. In which of the following types of organization structures are
you working?
A. Functional
B. Matrix
C. Jury
D. Projectized
Answer: B

certification GIAC   certification GCPM   certification GCPM   GCPM

NO.18 You work as a project manager for Xxxx Inc. You are working on a project that has a budget of
$805,000 and you have completed 45 percent of the project work. Due to some errors, however, you have
actually spent $430,000 of the budget. Management wants to know the project's cost performance index.
Which of the following values will you report?
A. 0.87
B. 0.80
C. 0.84
D. 0.86
Answer: C

GIAC   GCPM examen   GCPM examen   certification GCPM   GCPM

NO.19 Which of the following are the characteristics of the project life cycle?
Each correct answer represents a complete solution. Choose all that apply.
A. Cost and staffing are low at the start, are high as the work is carried out, and decrease as the project
comes towards the end.
B. Stakeholders influences, risk, and uncertainty are at peak in the beginning of the project.
C. Skills to influence the final characteristics of the project's product, without much impact on cost, is at
peak in the beginning of the project and reduces as the project progresses towards completion.
D. It is limited by constraints, including resource constraints.
Answer: A,B,C

GIAC examen   certification GCPM   GCPM   GCPM   GCPM examen

NO.20 Diane is the project manager of the HGF Project. A risk that has been identified and analyzed in the
project planning processes is now coming into fruition. What individual should respond to the risk with the
preplanned risk response?
A. Diane
B. Risk owner
C. Subject matter expert
D. Project sponsor
Answer: B

certification GIAC   GCPM   GCPM examen   GCPM examen

NO.21 You work as a project manager for Xxxx Inc. Which of the following stages of the process group, if not
performed well by you, is unlikely that the project will be successful in meeting the business needs?
A. Monitoring and controlling
B. Initiation
C. Executing
D. Planning and design
Answer: B

GIAC examen   GCPM   GCPM   GCPM   GCPM

NO.22 You work as a project manager for Xxxx Inc. You are in the project kickoff meeting. Which of the
following documents are reviewed during the project kickoff meeting?
Each correct answer represents a complete solution. Choose all that apply.
A. Project budget
B. Project WBS
C. Project charter
D. Project scope
Answer: A,C,D

certification GIAC   GCPM examen   certification GCPM

NO.23 You are using the PDCA model to determine, implement, monitor, control, and maintain Information
Security Management System or ISMS. You have to evaluate the new processes and match up to the
results against the probable results to determine the differences. In which of the following phases of the
PDCA are you working?
A. Do
B. Act
C. Plan
D. Check
Answer: D

GIAC   GCPM   certification GCPM   GCPM   GCPM examen

NO.24 Which of the following processes formally permits the initiation of a project and marks the kickoff for all
consequent development activities to begin?
A. Develop project charter
B. Develop project management plan
C. Develop project scope statement
D. Develop project team
Answer: A

GIAC examen   GCPM   GCPM examen   certification GCPM   GCPM   certification GCPM

NO.25 Charlie has just completed the project according to the terms of the contract. She and the customer
are completing a walk through of the project deliverables, and the customer is asking for changes to the
deliverables before she'll accept the product. What project management process should manage the
documented change request that may come from scope verification?
A. Scope management
B. Perform integrated change control
C. Control Scope
D. Control change control
Answer: B

certification GIAC   GCPM   GCPM examen   GCPM

NO.26 Which of the following is described in the statement below?
"It is a tool that defines a project and groups the project's discrete work elements in a way that helps
organize and define the total work scope of the project."
A. WBS
B. RBS
C. Gantt chart
D. Critical path
Answer: A

GIAC examen   GCPM   certification GCPM   GCPM

NO.27 Which of the following is described in the statement below.?
"It is a group of sequential and related project phases that are defined by the organization and control
needs of the management or organizations concerned with the project, the nature of the project itself, and
the application area."
A. Verify scope
B. Project charter
C. Activity list
D. Project life cycle
Answer: D

GIAC examen   certification GCPM   certification GCPM

NO.28 You work as a project manager for Xxxx Inc. A new project has been proposed to change all keyboards
of every computer in your organization. There are 1,600 keyboards that will need to be removed and
replaced with wireless keyboards. What document will you first need to start this project?
A. Project risk statement
B. Risk register
C. Project charter
D. Contract for new keyboards
Answer: C

GIAC   GCPM   GCPM

NO.29 You work as a project manager for Xxxx Inc. You are performing steps to carry out and finish the
project according to the measures drawn through the planning stage. Which of the following stages of the
project are you working on?
A. Monitoring and controlling
B. Closing
C. Initiation
D. Execution
Answer: D

GIAC examen   GCPM   certification GCPM

NO.30 You are the program manager for your project. You are working with the project managers regarding
the procurement processes for their projects. You have ruled out one particular contract type because it is
considered too risky for the program. Which one of the following contract types is usually considered to be
the most dangerous for the buyer?
A. Cost plus incentive fee
B. Time and materials
C. Cost plus percentage of costs
D. Fixed fee
Answer: C

GIAC   GCPM examen   GCPM examen   GCPM

Dans cette Industrie IT intense, le succès de test GIAC GCPM peut augmenter le salaire. Les gens d'obtenir le Certificat GIAC GCPM peuvent gagner beaucoup plus que les gens sans Certificat GIAC GCPM. Le problème est comment on peut réussir le test plus facile?

Le dernier examen GIAC GSSP-NET-CSHARP gratuit Télécharger

On peut télécharger quelques parties de Q&A gratuites dans le site Pass4Test à propos de test Certification GIAC GSSP-NET-CSHARP. Vous pouvez tester notre fiabilité via le démo. Choisir Pass4Test, c'est-à-dire que vous êtes proche d'un pic ensuite de l'Industrie IT.

En quelques années, le test de certification de GIAC GSSP-NET-CSHARP faisait un grand impact sur la vie quotidienne pour pas mal de gens. Voilà le problème, comme on peut réussir facilement le test de GIAC GSSP-NET-CSHARP? Notre Pass4Test peut vous aider à tout moment à résourdre ce problème rapidement. Pass4Test peut vous offrir une bonne formation particulière à propos du test de certification GSSP-NET-CSHARP. Notre outil de test formation est apporté par les IT experts. Chez Pass4Test, vous pouvez toujours trouver une formations à propos du test Certification GSSP-NET-CSHARP, plus nouvelle et plus proche d'un test réel. Tu choisis le Pass4Test aujourd'hui, tu choisis le succès de test Certification demain.

Vous avez aussi la possibilité à réussir le test GIAC GSSP-NET-CSHARP. Pass4Test offre la service de la mise à jour gratuite pendant un an. Si vous échouez le test, votre argent sera tout rendu. Maintenant, vous pouvez télécharger la partie gratuite prendre examinser la qualité des produits de Pass4Test.

Aujoud'hui, dans cette indutrie IT de plus en plus concurrentiel, le Certificat de GIAC GSSP-NET-CSHARP peut bien prouver que vous avez une bonne concurrence et une space professionnelle plus grande à atteindre. Dans le site Pass4Test, vous pouvez trouver un outil de se former très pratique. Nos IT experts vous offrent les Q&As précises et détaillées pour faciliter votre cours de préparer le test GIAC GSSP-NET-CSHARP qui vous amenera le succès du test GIAC GSSP-NET-CSHARP, au lieu de traivailler avec peine et sans résultat.

Dans cette société de l'information technologies, c'est bien populaire que l'on prenne la formation en Internet, Pass4Test est l'un des sites d'offrir la formation particulère pour le test GIAC GSSP-NET-CSHARP. Pass4Test a une expérience riche pour répondre les demandes des candidats.

Code d'Examen: GSSP-NET-CSHARP
Nom d'Examen: GIAC (GIAC Secure Software Programmer - C#.NET)
Questions et réponses: 550 Q&As

GSSP-NET-CSHARP Démo gratuit à télécharger: http://www.pass4test.fr/GSSP-NET-CSHARP.html

NO.1 You work as a Software Developer for ManSoft Inc. The company uses Visual Studio.NET 2005 as its
application development platform. You have recently created an application that includes the code shown
below.
string str1 = "ABC";
string str2 = "u";
str2 += "Certify";
Console.WriteLine(str1 == str2);
Console.WriteLine((Object) str1 == (Object) str2);
Console.WriteLine(str1.Equals(str2));
What will be the output of the above code?
A. False False False
B. False True False
C. True True True
D. True False True
Answer: D

GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP examen

NO.2 Session variables can be any valid __________.
A. .NET Framework type
B. Integer type
C. SessionStateItemCollection object
D. Object type
Answer: A

GIAC examen   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

NO.3 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You have recently finished development of an ASP.NET Web
application using the .NET Framework 3.5. You host the application on a Web farm that consists of three
Web servers. You should configure the ASP.NET application for session state to meet the following
requirements:
l Session state data should not be lost if a server fails.
l Session state must be maintained across browser requests by the same user.
You are required to configure the Web.config file to meet these requirements. Which of the following
configurations will you use?
A. <sessionState mode="StateServer"/>
B. <sessionState mode="InProc"/>
C. <sessionState mode="Custom"/>
D. <sessionState mode="SQLServer"/>
Answer: D

GIAC   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP

NO.4 You work as a Software Developer for ABC Inc. The company has several branches worldwide. The
company uses Visual Studio.NET 2005 as its application development platform. You have recently
finished the development of an application using .NET Framework 2.0. The application can be used only
for cryptography. Therefore, you have implemented the application on a computer. What will you call the
computer that implemented cryptography?
A. Cryptographic toolkit
B. Cryptosystem
C. Cryptographer
D. Cryptanalyst
Answer: B

certification GIAC   certification GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   certification GSSP-NET-CSHARP

NO.5 You work as a Software Developer for ABC Inc. The company has several branches worldwide. The
company uses Visual Studio .NET 2005 as its application development platform. You are creating an
application using .NET Framework 2.0. The application will be used by all the branches of the company.
You are using the CompareInfo class for culture-sensitive string comparisons. You write the following
code in the application:
String s1 = "C rtify";
String s2 = "c rtify";
String s3 = "c rtify";
You need to compare the s1 string with the s2 string and ensure that the string comparison must ignore
case. Which of the following code segments will you use to accomplish the task?
A. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.IgnoreCase));
B. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.None));
C. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.Ordinal));
D. CompareInfo cmp = CultureInfo.InvariantCulture.CompareInfo; Console.WriteLine(cmp.Compare(s1,
s2, CompareOptions.OrdinalIgnoreCase));
Answer: A

GIAC examen   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.6 Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server
that hosts the company's Web site. Andrew wants to enhance the security of the Web site by
implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use?
Each correct answer represents a complete solution. Choose two.
A. Symmetric
B. Secret
C. IPSec
D. Asymmetric
Answer: A,D

certification GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.7 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You create an ASP.NET Web application using the .NET
Framework 3.5. You want to use a HTTP module called on each and every request made by the
application. It is called as part of the ASP.NET request pipeline. It has right to access life-cycle events
throughout the request. You also want to ensure that the HTTP module allows a user to inspect incoming
and outgoing requests and take appropriate action based on the request. What will be the correct order to
create the HTTP module?
A.
Answer: A

certification GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP

NO.8 You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its
application development platform. You create an ASP.NET Web application using the .NET Framework
3.5. The application contains two HTML pages named Error.htm and
PageNotFound.htm. You want to make sure that the following requirements are met:
l When any user requests a page that does not exist, the PageNotFound.htm page is
displayed.
l When any other error occurs, the Error.htm page is displayed. Which of the following code segments will
you add to the Web.config file to accomplish this task?
A. <customErrors mode="On" defaultRedirect="Error.htm">
<error statusCode="404" redirect="PageNotFound.htm"/>
</customErrors>
B. <customErrors mode="Off">
<error statusCode="400" redirect="Error.htm"/>
<error statusCode="404" redirect="PageNotFound.htm"/>
</customErrors>
C. <customErrors mode="On">
<error statusCode="400" redirect="Error.htm"/>
<error statusCode="404" redirect="PageNotFound.htm"/> </customErrors>
D. <customErrors mode="Off" defaultRedirect="Error.htm"> <error statusCode="404"
redirect="PageNotFound.htm"/> </customErrors>
Answer: A

GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

NO.9 You can use LINQ in an ASP.NET application through the LinqDataSource control, the __________
control, or by creating LINQ queries.
A. ADO.NET DataSet
B. ObjectDataSource
C. SqlDataSource
D. XmlDataSource
Answer: B

certification GIAC   GSSP-NET-CSHARP examen   certification GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.10 You work as an Application Developer for ABC Inc. You are assigned with developing a Web site that
will handle information related to monthly sales of the company. You wish to secure the Web site so that
only employees of the Accounts department can view the Web pages. You need to create roles for the
employees of this department. The user account information will be stored in a SQL Server database
named Database. You decide to do all this by using the Web Site Administration Tool. Which of the
following types of security will you use to accomplish the task?
A. Forms-based authentication
B. Integrated Microsoft Windows authentication
C. Basic authentication
D. Digest authentication
Answer: A

GIAC   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.11 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its
application development platform. You create an ASP.NET Web application using .NET Framework 3.5.
You create a Web form in the application that permits users to provide personal information. You add a
DropDownList control to the Web form to retrieve the residential status of users. The default item that the
DropDownList control displays is the "Select Country" option. You have to ensure that users select a
country other than the default option. Which of the following validation controls should you use to
accomplish this task?
A. RangeValidator
B. RequiredFieldValidator
C. CustomValidator
D. RegularExpressionValidator
Answer: B

GIAC   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

NO.12 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET as its application
development platform. You create a class library using the .NET Framework. The library will be used to
open the NSCs of computers. Later, you will set up the class library to the GAC and provide it Full Trust
permission. You write down the following code segments for the socket connections:
SocketPermission permission = new SocketPermission(PermissionState.Unrestricted);
permission.Assert();
A number of the applications that use the class library may not have the necessary permissions to open
the network socket connections. Therefore, you are required to withdraw the assertion. Which of the
following code segments will you use to accomplish the task?
A. permission.PermitOnly();
B. CodeAccessPermission.RevertDeny();
C. permission.Deny();
D. CodeAccessPermission.RevertAssert();
E. permission.Demand();
Answer: D

GIAC examen   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.13 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its
application development platform. You have recently finished development of a Windows application
using .NET Framework. Users report that the application is not running properly. When the users try to
complete a particular action, the following error message comes out:
Unable to find assembly 'myservices, Version=1.0.0.0, Culture=neutral,
PublicKeyToken=29b5ad26c9de9b95'.
You notice that the error occurs as soon as the application tries to call functionality in a serviced
component that was registered by using the following command:
regsvcs.exe myservices.dll
You must make sure that the application can call the functionality in the serviced component with no
exceptions being thrown. What will you do to accomplish this task?
A. Run the command line tool: regasm.exe myservices.dll.
B. Copy the serviced component assembly into the C:\Program Files\ComPlus Applications fold er.
C. Run the command line tool: gacutil.exe /i myservices.dll.
D. Copy the serviced component assembly into the C:\WINDOWS\system32\Com folder.
Answer: C

GIAC   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

NO.14 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its
application development platform. You create an application for the company. You need to validate the
phone number passed to a class as a parameter in the application. Which of the following is the most
effective way to verify that the format of the data matches a phone number.?
A. Regular expressions
B. Nested If statements
C. Use the String.Length property
D. A try/catch block
Answer: A

certification GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.15 In .NET Framework 3.5, you can create and access values that persist from one application session to
another. What are these values called?
A. Objects
B. Settings
C. Properties
D. Attributes
Answer: B

GIAC   GSSP-NET-CSHARP   GSSP-NET-CSHARP

NO.16 Which of the following techniques is used to transmit passwords during authentication?
A. Asymmetric encryption
B. Hashing
C. Salted Hash
D. Symmetric encryption
Answer: C

GIAC examen   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

NO.17 You work as a Software Developer for Mansoft Inc. You create an application and use it to create code
access security policies. Which of the following tools will you use to examine and modify code access
security policies from a batch file?
A. Tlbimp.exe
B. GacUtil.exe
C. Sn.exe
D. Caspol.exe
E. StoreAdm.exe
Answer: D

GIAC examen   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP examen   GSSP-NET-CSHARP

NO.18 You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its
application development platform. You are creating an ASP.NET Web application using .NET Framework
3.5. The application will be used to share any type of photos on Internet. All the photos should be
accessible in various sizes and formats. You need to add a download feature that can be easily
maintained. You also need to make sure that only a single version of all photos is stored on a SQL server
database. What will you do?
A. Create an HttpModule class to determine the request for the photo download. Process the photo
according to the given format and size, and after that return the processed photo in the response.
B. Create a user control that converts the photo to the required format and size.
C. Create an HttpHandler class to determine the request for the photo download. Process the photo
according to the given format and size, and after that return the processed photo in the response.
D. Create an ActiveX control that converts the photo to the required format and size.
Answer: C

certification GIAC   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP

NO.19 Allen works as a Software Developer for ABC Inc. The company uses Visual Studio.NET as its
application development platform. He creates an application using .NET Framework. He wants to encrypt
all his e-mails that he sends to anyone. Which of the following will he use to accomplish the task?
A. PPP
B. FTP
C. PPTP
D. PGP
Answer: D

GIAC   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP

NO.20 Which of the following session and instancing modes will you set if you require a sessionfull binding
and want to create a new instance object for each client request?
A. Set SessionMode to Allowed and IntsanceMode to PerSession.
B. Set SessionMode to Required and IntsanceMode to Single.
C. Set SessionMode to Required and IntsanceMode to PerCall.
D. Set SessionMode to Allowed and IntsanceMode to PerCall.
Answer: C

GIAC examen   GSSP-NET-CSHARP   GSSP-NET-CSHARP   certification GSSP-NET-CSHARP   GSSP-NET-CSHARP   GSSP-NET-CSHARP examen

Pass4Test est un bon site d'offrir la facilité aux candidats de test GIAC GSSP-NET-CSHARP. Selon les anciens test, l'outil de formation GIAC GSSP-NET-CSHARP est bien proche de test réel.

Les meilleures GIAC GCIA examen pratique questions et réponses

Aujoud'hui, dans cette indutrie IT de plus en plus concurrentiel, le Certificat de GIAC GCIA peut bien prouver que vous avez une bonne concurrence et une space professionnelle plus grande à atteindre. Dans le site Pass4Test, vous pouvez trouver un outil de se former très pratique. Nos IT experts vous offrent les Q&As précises et détaillées pour faciliter votre cours de préparer le test GIAC GCIA qui vous amenera le succès du test GIAC GCIA, au lieu de traivailler avec peine et sans résultat.

Après une longue attente, les documentations de test GIAC GCIA qui combinent tous les efforts des experts de Pas4Test sont finalement sorties. Les documentations de Pass4Test sont bien répandues pendant les candidats. L'outil de formation est réputée par sa haute précision et grade couverture des questions, d'ailleurs, il est bien proche que test réel. Vous pouvez réussir le test GIAC GCIA à la première fois.

Code d'Examen: GCIA
Nom d'Examen: GIAC (GIAC Certified Intrusion Analyst)
Questions et réponses: 508 Q&As

Le test simulation offert par Pass4Test est bien proche du test réel. Vous pouvez apprendre tous essences d'un test réel à courte terme avec l'aide de Pass4Test. Pass4Test peut vous assurer le succès 100% de test GIAC GCIA.

Généralement, les experts n'arrêtent pas de rechercher les Q&As plus proches que test Certification. Les documentations offertes par les experts de Pass4Test peuvent vous aider à passer le test Certification. Les réponses de nos Q&As ont une précision 100%. C'est facile à obtenir le Certificat de GIAC après d'utiliser la Q&A de Pass4Test. Vous aurez une space plus grande dans l'industrie IT.

Nous croyons que pas mal de candidats voient les autres site web qui offrent les ressources de Q&A GIAC GCIA. En fait, le Pass4Test est le seul site qui puisse offrir la Q&A recherchée par les experts réputés dans l'Industrie IT. Grâce à la Q&A de Pass4Test impressionée par la bonne qualité, vous pouvez réussir le test GIAC GCIA sans aucune doute.

Choisir le Pass4Test vous permet non seulement à réussir le test GIAC GCIA, mais encore à enjouir le service en ligne 24h et la mise à jour gratuite pendant un an. Nous allons lancer au premier temps la Q&A GIAC GCIA plus nouvelle. Si vous ne passez pas le test, votre argent sera tout rendu.

Pass4Test est un site web qui vous donne plus de chances à passer le test de Certification GIAC GCIA. Le résultat de recherche sortis par les experts de Pass4Test peut assurer que ce sera vous ensuite qui réussirez le test GIAC GCIA. Choisissez Pass4Test, choisissez le succès. L'outil de se former de Pass4Test est bien efficace. Parmi les gens qui ont déjà passé le test, la majorité a préparé le test avec la Q&A de Pass4Test.

GCIA Démo gratuit à télécharger: http://www.pass4test.fr/GCIA.html

NO.1 Which of the following statements about a host-based intrusion prevention system (HIPS) are true?
Each correct answer represents a complete solution. Choose two.
A. It can detect events scattered over the network.
B. It can handle encrypted and unencrypted traffic equally.
C. It cannot detect events scattered over the network.
D. It is a technique that allows multiple computers to share one or more IP addresses.
Answer: B,C

certification GIAC   GCIA examen   certification GCIA   GCIA examen   GCIA

NO.2 You work as a Network Administrator for Tech Perfect Inc. Your company has a Windows 2000based
network. You want to verify the connectivity of a host in the network. Which of the following utilities will you
use?
A. PING
B. TELNET
C. NETSTAT
D. TRACERT
Answer: A

GIAC examen   GCIA   GCIA   GCIA   GCIA   GCIA

NO.3 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
B. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
C. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: B

GIAC examen   GCIA   GCIA   GCIA   GCIA

NO.4 Which of the following tools performs comprehensive tests against web servers for multiple items,
including over 6100 potentially dangerous files/CGIs?
A. Dsniff
B. Snort
C. Nikto
D. Sniffer
Answer: C

certification GIAC   GCIA examen   GCIA examen   GCIA examen   GCIA

NO.5 Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned
to him to investigate a multimedia enabled mobile phone, which is suspected to be used in a cyber crime.
Adam uses a tool, with the help of which he can recover deleted text messages, photos, and call logs of
the mobile phone. Which of the following tools is Adam using?
A. FAU
B. FTK Imager
C. Galleta
D. Device Seizure
Answer: D

certification GIAC   GCIA   GCIA examen   GCIA examen   GCIA examen

NO.6 Which of the following methods is a behavior-based IDS detection method?
A. Knowledge-based detection
B. Protocol detection
C. Statistical anomaly detection
D. Pattern matching detection
Answer: C

GIAC examen   GCIA examen   GCIA   certification GCIA   GCIA examen   GCIA

NO.7 Which of the following tools are used to determine the hop counts of an IP packet?
Each correct answer represents a complete solution. Choose two.
A. TRACERT
B. Ping
C. IPCONFIG
D. Netstat
Answer: A,B

GIAC examen   GCIA examen   GCIA   GCIA   GCIA

NO.8 You work as a Network Administrator for Tech Perfect Inc. The office network is configured as an IPv6
network. You have to configure a computer with the IPv6 address, which is equivalent to an IPv4 publicly
routable address. Which of the following types of addresses will you choose?
A. Site-local
B. Global unicast
C. Local-link
D. Loopback
Answer: B

certification GIAC   GCIA examen   GCIA examen   GCIA   GCIA examen

NO.9 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the
Internet. Adam is still worried about programs like Hping2 that can get into a network through covert
channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block all outgoing traffic on port 21
C. Block all outgoing traffic on port 53
D. Block ICMP type 3 messages
Answer: A

GIAC examen   GCIA   GCIA

NO.10 Mark works as a Network Security Administrator for BlueWells Inc. The company has a
Windowsbased network. Mark is giving a presentation on Network security threats to the newly recruited
employees of the company. His presentation is about the External threats that the company recently faced
in the past. Which of the following statements are true about external threats?
Each correct answer represents a complete solution. Choose three.
A. These are the threats that originate from outside an organization in which the attacker attempts to gain
unauthorized access.
B. These are the threats that originate from within the organization.
C. These are the threats intended to flood a network with large volumes of access requests.
D. These threats can be countered by implementing security controls on the perimeters of the network,
such as firewalls, which limit user access to the Internet.
Answer: A,C,D

GIAC examen   certification GCIA   GCIA examen   GCIA examen   GCIA   GCIA

NO.11 This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a,
802.11b, and 802.11g standards. The main features of these tools are as follows: -It displays the signal
strength of a wireless network, MAC address, SSID, channel details, etc. -It is commonly used for the
following purposes:
A. War driving
B. Detecting unauthorized access points
C. Detecting causes of interference on a WLAN
D. WEP ICV error tracking
E. Making Graphs and Alarms on 802.11 Data, including Signal Strength
Answer: D

GIAC   GCIA examen   certification GCIA   GCIA

NO.12 Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a
suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review
to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.
A. Checkpoint files
B. EDB and STM database files
C. Temporary files
D. cookie files
Answer: A,B,C

GIAC   GCIA   GCIA   GCIA

NO.13 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc.
Which of the following types of Cross-Site Scripting attack Ryan intends to do?
A. Document Object Model (DOM)
B. Non persistent
C. SAX
D. Persistent
Answer: D

certification GIAC   GCIA examen   GCIA

NO.14 John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite
fruit. John's password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Dictionary attack
B. Hybrid attack
C. Brute Force attack
D. Rule based attack
Answer: A,B,C

certification GIAC   GCIA examen   GCIA   certification GCIA

NO.15 Which of the following file systems is designed by Sun Microsystems?
A. NTFS
B. CIFS
C. ZFS
D. ext2
Answer: C

certification GIAC   GCIA   GCIA examen   certification GCIA

NO.16 SSH is a network protocol that allows data to be exchanged between two networks using a secure
channel. Which of the following encryption algorithms can be used by the SSH protocol?
Each correct answer represents a complete solution. Choose all that apply.
A. Blowfish
B. IDEA
C. DES
D. RC4
Answer: A,B,C

GIAC   GCIA examen   GCIA examen   GCIA   certification GCIA

NO.17 Adam works as a Computer Hacking Forensic Investigator in a law firm. He has been assigned with
his first project. Adam collected all required evidences and clues. He is now required to write an
investigative report to present before court for further prosecution of the case. He needs guidelines to
write an investigative report for expressing an opinion. Which of the following are the guidelines to write
an investigative report in an efficient way?
Each correct answer represents a complete solution. Choose all that apply.
A. All ideas present in the investigative report should flow logically from facts to conclusions.
B. Opinion of a lay witness should be included in the investigative report.
C. The investigative report should be understandable by any reader.
D. There should not be any assumptions made about any facts while writing the investigative report.
Answer: A,C,D

GIAC   certification GCIA   GCIA examen

NO.18 You are the Network Administrator for a large corporate network. You want to monitor all network traffic
on your local network for suspicious activities and receive a notification when a possible attack is in
process. Which of the following actions will you take for this?
A. Enable verbose logging on the firewall
B. Install a network-based IDS
C. Install a DMZ firewall
D. Install a host-based IDS
Answer: B

certification GIAC   GCIA   GCIA   GCIA

NO.19 Sasha wants to add an entry to your DNS database for your mail server. Which of the following types of
resource records will she use to accomplish this.?
A. ANAME
B. SOA
C. MX
D. CNAME
Answer: C

certification GIAC   GCIA   GCIA   GCIA

NO.20 Which of the following Web attacks is performed by manipulating codes of programming languages
such as SQL, Perl, Java present in the Web pages?
A. Command injection attack
B. Code injection attack
C. Cross-Site Request Forgery
D. Cross-Site Scripting attack
Answer: B

GIAC   GCIA   certification GCIA   GCIA

NO.21 Which of the following is known as a message digest?
A. Hash function
B. Hashing algorithm
C. Spider
D. Message authentication code
Answer: A

GIAC examen   GCIA examen   GCIA examen   certification GCIA   GCIA   GCIA

NO.22 Adam works as a Security Analyst for Umbrella Inc. He is performing real-time traffic analysis on IP
networks using Snort. Adam is facing problems in analyzing intrusion data. Which of the following
software combined with Snort can Adam use to get a visual representation of intrusion data?
Each correct answer represents a complete solution. Choose all that apply.
A. Basic Analysis and Security Engine (BASE)
B. sguil
C. KFSensor
D. OSSIM
Answer: A,B,D

GIAC   GCIA   GCIA examen   certification GCIA   GCIA

NO.23 Which of the following is the default port for Simple Network Management Protocol (SNMP)?
A. TCP port 110
B. TCP port 25
C. TCP port 80
D. UDP port 161
Answer: D

certification GIAC   GCIA   GCIA

NO.24 Which of the following can be applied as countermeasures against DDoS attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Limiting the amount of network bandwidth.
B. Blocking IP address.
C. Using LM hashes for passwords.
D. Using Intrusion detection systems.
E. Using the network-ingress filtering.
Answer: A,B,D,E

GIAC examen   GCIA examen   GCIA

NO.25 You work as a Network Administrator for McNeil Inc. The company's Windows 2000-based network is
configured with Internet Security and Acceleration (ISA) Server 2000. You want to configure intrusion
detection on the server. You find that the different types of attacks on the Intrusion Detection tab page of
the IP Packet Filters Properties dialog box are disabled. What is the most likely cause?
A. The PPTP through ISA firewall check box on the PPTP tab page of the IP Packet Filters
Properties dialog box is not enabled.
B. The Enable IP routing check box on the General tab page of the IP Packet Filters Properties dialog box
is not selected.
C. The Log packets from Allow filters check box on the Packet Filters tab page of the IP Packet Filters
Properties dialog box is not enabled.
D. The Enable Intrusion detection check box on the General tab page of the IP Packet Filters Properties
dialog box is not selected.
Answer: D

certification GIAC   GCIA examen   GCIA   GCIA   GCIA

NO.26 Which of the following statements are true about snort?
Each correct answer represents a complete solution. Choose all that apply.
A. It develops a new signature to find vulnerabilities.
B. It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans,
CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors
and system vulnerabilities, and DDoS clients.
C. It encrypts the log file using the 256 bit AES encryption scheme algorithm.
D. It is used as a passive trap to record the presence of traffic that should not be found on a network, such
as NFS or Napster connections.
Answer: A,B,D

certification GIAC   GCIA   GCIA   certification GCIA

NO.27 Andrew works as a System Administrator for NetPerfect Inc. All client computers on the network run on
Mac OS X. The Sales Manager of the company complains that his MacBook is not able to boot. Andrew
wants to check the booting process. He suspects that an error persists in the bootloader of Mac OS X.
Which of the following is the default bootloader on Mac OS X that he should use to resolve the issue?
A. LILO
B. BootX
C. NT Loader
D. GRUB
Answer: B

GIAC   GCIA   GCIA examen   GCIA examen

NO.28 Allen works as a professional Computer Hacking Forensic Investigator. A project has been assigned to
him to investigate a computer, which is used by the suspect to sexually harass the victim using instant
messenger program. Suspect's computer runs on Windows operating system. Allen wants to recover
password from instant messenger program, which suspect is using, to collect the evidence of the crime.
Allen is using Helix Live for this purpose. Which of the following utilities of Helix will he use to accomplish
the task?
A. Asterisk Logger
B. Access PassView
C. Mail Pass View
D. MessenPass
Answer: D

certification GIAC   GCIA examen   GCIA   GCIA

NO.29 Victor works as a network administrator for DataSecu Inc. He uses a dual firewall Demilitarized
Zone (DMZ) to insulate the rest of the network from the portions that is available to the Internet.
Which of the following security threats may occur if DMZ protocol attacks are performed?
Each correct answer represents a complete solution. Choose all that apply.
A. Attacker can perform Zero Day attack by delivering a malicious payload that is not a part of the
intrusion detection/prevention systems guarding the network.
B. Attacker can gain access to the Web server in a DMZ and exploit the database.
C. Attacker managing to break the first firewall defense can access the internal network without breaking
the second firewall if it is different.
D. Attacker can exploit any protocol used to go into the internal network or intranet of the com pany
Answer: A,B,D

GIAC   GCIA   GCIA examen   GCIA

NO.30 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Tunneling proxy server
B. Reverse proxy server
C. Anonymous proxy server
D. Intercepting proxy server
Answer: D

GIAC   GCIA   certification GCIA

Vous serez impressionné par le service après vendre de Pass4Test, le service en ligne 24h et la mise à jour après vendre sont gratuit pour vous pendant un an, et aussi vous allez recevoir les informations plus nouvelles à propos de test Certification IT. Vous aurez un résultat imaginaire en coûtant un peu d'argent. D'ailleurs, vous pouvez économier beaucoup de temps et d'efforts avec l'aide de Pass4Test. C'est vraiment un bon marché de choisir le Pass4Test comme le guide de formation.

Pass4Test offre de GIAC GSNA matériaux d'essai

Le Certificat de GIAC GSNA signifie aussi un nouveau jalon de la carrière, le travail aura une space plus grande à augmenter, et tout le monde dans l'industrie IT sont désireux de l'obtenir. En face d'une grande passion pour le test Certification GIAC GSNA, le contrariété est le taux très faible à réussir. Bien sûr que l'on ne passe pas le test GSNA sans aucun éffort, en même temps, le test de GIAC GSNA demande les connaissances bien professionnelles. Le guide d'étude dans le site Pass4Test peut vous fournir un raccourci à réussir le test GIAC GSNA et à obtenir le Certificat de ce test. Choisissez le guide d'étude de Pass4Test, vous verrez moins de temps dépensés, moins d'efforts contribués, mais plus de chances à réussir le test. Ça c'est une solution bien rentable pour vous.

La grande couverture, la bonne qualité et la haute précision permettent le Pass4Test à avancer les autre sites web. Donc le Pass4Test est le meilleur choix et aussi l'assurance pour le succès de test GIAC GSNA.

Le Pass4Test est un site qui peut offrir les facilités aux candidats et aider les candidats à réaliser leurs rêve. Si vous êtes souci de votre test Certification, Pass4Test peut vous rendre heureux. La haute précision et la grande couverture de la Q&A de Pass4Test vous aidera pendant la préparation de test. Vous n'aurez aucune raison de regretter parce que Pass4Test réalisera votre rêve.

Code d'Examen: GSNA
Nom d'Examen: GIAC (GIAC Systems and Network Auditor)
Questions et réponses: 368 Q&As

Bien qu'il ne soit pas facile à réussir le test GIAC GSNA, c'est très improtant à choisir un bon outil de se former. Pass4Test a bien préparé les documentatinos et les exercices pour vous aider à réussir 100% le test. Pass4Test peut non seulement d'être une assurance du succès de votre test GIAC GSNA, mais encore à vous aider d'économiser votre temps.

Beaucoup de gens trouvent difficile à passer le test GIAC GSNA, c'est juste parce que ils n'ont pas bien choisi une bonne Q&A. Vous penserez que le test GIAC GSNA n'est pas du tout autant dur que l'imaginer. Le produit de Pass4Test non seulement comprend les Q&As qui sont impressionnées par sa grande couverture des Questions, mais aussi le service en ligne et le service après vendre.

Pass4Test provide non seulement le produit de qualité, mais aussi le bon service. Si malheureusement vous ne pouvez pas réussir le test, votre argent sera tout rendu. Le service de la mise à jour gratuite est aussi pour vous bien que vous passiez le test Certification.

GSNA Démo gratuit à télécharger: http://www.pass4test.fr/GSNA.html

NO.1 Which of the following statements are true about locating rogue access points using WLAN discovery
software such as NetStumbler, Kismet, or MacStumbler if you are using a Laptop integrated with Wi-Fi
compliant MiniPCI card? (Choose two)
A. These tools can determine the rogue access point even when it is attached to a wired network.
B. These tools can determine the authorization status of an access point.
C. These tools cannot detect rogue access points if the victim is using data encryption.
D. These tools detect rogue access points if the victim is using IEEE 802.11 frequency bands.
Answer: B,D

GIAC examen   GSNA   GSNA   GSNA

NO.2 Which of the following is a wireless auditing tool that is used to pinpoint the actual physical location of
wireless devices in the network?
A. KisMAC
B. Ekahau
C. Kismet
D. AirSnort
Answer: B

GIAC   certification GSNA   GSNA   certification GSNA   GSNA examen

NO.3 You work as a Network Administrator for XYZ CORP. The company has a Windows Active
Directory-based single domain single forest network. The functional level of the forest is Windows Server
2003. The company's management has decided to provide laptops to its sales team members. These
laptops are equipped with smart card readers. The laptops will be configured as wireless network clients.
You are required to accomplish the following tasks: The wireless network communication should be
secured. The laptop users should be able to use smart cards for getting authenticated. In order to
accomplish the tasks, you take the following steps: Configure 802.1x and WEP for the wireless
connections. Configure the PEAP-MS-CHAP v2 protocol for authentication. What will happen after you
have taken these steps?
A. Both tasks will be accomplished.
B. The laptop users will be able to use smart cards for getting authenticated.
C. The wireless network communication will be secured.
D. None of the tasks will be accomplished.
Answer: C

certification GIAC   GSNA   GSNA   certification GSNA   GSNA examen

NO.4 John works as a Security Professional. He is assigned a project to test the security of www.we-
are-secure.com. John wants to get the information of all network connections and listening ports in the
numerical form. Which of the following commands will he use?
A. netstat -e
B. netstat r
C. netstat -s
D. netstat an
Answer: D

GIAC examen   certification GSNA   certification GSNA   GSNA examen

NO.5 You run the wc -c file1.txt command. If this command displays any error message, you want to store the
error message in the error.txt file. Which of the following commands will you use to accomplish the task?
A. wc -c file1.txt >>error.txt
B. wc -c file1.txt 1>error.txt
C. wc -c file1.txt 2>error.txt
D. wc -c file1.txt >error.txt
Answer: C

GIAC   GSNA   GSNA   GSNA

NO.6 John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based
network. John is working as a root user on the Linux operating system. He wants to forward all the kernel
messages to the remote host having IP address 192.168.0.1. Which of the following changes will he
perform in the syslog.conf file to accomplish the task?
A. kern.* @192.168.0.1
B. !*.* @192.168.0.1
C. !kern.* @192.168.0.1
D. *.* @192.168.0.1
Answer: A

GIAC examen   certification GSNA   certification GSNA

NO.7 Sarah works as a Web Developer for XYZ CORP. She is creating a Web site for her company. Sarah
wants greater control over the appearance and presentation of Web pages. She wants the ability to
precisely specify the display attributes and the appearance of elements on the Web pages. How will she
accomplish this?
A. Use the Database Design wizard.
B. Make two templates, one for the index page and the other for all other pages.
C. Use Cascading Style Sheet (CSS).
D. Make a template and use it to create each Web page.
Answer: C

certification GIAC   GSNA examen   GSNA   GSNA   GSNA

NO.8 Which of the following is Microsoft's implementation of the file and application server for the Internet
and private intranets?
A. Internet Server Service (ISS)
B. Internet Server (IS)
C. WWW Server (WWWS)
D. Internet Information Server (IIS)
Answer: D

certification GIAC   GSNA   GSNA   GSNA   GSNA   GSNA

NO.9 You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You
want to print the super block and block the group information for the filesystem present on a system.
Which of the following Unix commands can you use to accomplish the task?
A. e2fsck
B. dump
C. dumpe2fs
D. e2label
Answer: C

GIAC   GSNA   GSNA examen   GSNA examen   certification GSNA

NO.10 George works as an office assistant in Soft Well Inc. The company uses the Windows Vista operating
system. He wants to disable a program running on a computer. Which of the following Windows Defender
tools will he use to accomplish the task?
A. Allowed items
B. Quarantined items
C. Options
D. Software Explorer
Answer: D

GIAC   GSNA   GSNA examen   GSNA   GSNA   GSNA examen

NO.11 You check performance logs and note that there has been a recent dramatic increase in the amount of
broadcast traffic. What is this most likely to be an indicator of?
A. Misconfigured router
B. DoS attack
C. Syn flood
D. Virus
Answer: B

GIAC examen   GSNA examen   GSNA   GSNA   GSNA   GSNA

NO.12 A Web developer with your company wants to have wireless access for contractors that come in to
work on various projects. The process of getting this approved takes time. So rather than wait, he has put
his own wireless router attached to one of the network ports in his department. What security risk does
this present?
A. None, adding a wireless access point is a common task and not a security risk.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. An unauthorized WAP is one way for hackers to get into a network.
Answer: D

GIAC   GSNA   GSNA   GSNA examen   GSNA

NO.13 John works as a professional Ethical Hacker. He has been assigned the project of testing the security of
www.we-are-secure.com. He wants to use Kismet as a wireless sniffer to sniff the Weare-secure network.
Which of the following IEEE-based traffic can be sniffed with Kismet?
A. 802.11g
B. 802.11n
C. 802.11b
D. 802.11a
Answer: A,B,C,D

GIAC   certification GSNA   GSNA   GSNA   GSNA

NO.14 Which of the following statements about the traceroute utility are true?
A. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
B. It records the time taken for a round trip for each packet at each router.
C. It is an online tool that performs polymorphic shell code attacks.
D. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
Answer: A,B

GIAC   GSNA   GSNA examen   GSNA examen

NO.15 You work as a Network Auditor for XYZ CORP. The company has a Windows-based network. While
auditing the company's network, you are facing problems in searching the faults and other entities that
belong to it. Which of the following risks may occur due to the existence of these problems?
A. Residual risk
B. Inherent risk
C. Secondary risk
D. Detection risk
Answer: D

GIAC   GSNA examen   GSNA   GSNA

NO.16 You work as a Network Administrator for XYZ CORP. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single forest single
domain network. You have installed a Windows Server 2008 computer. You have configured auditing on
this server. The client computers of the company use the Windows XP Professional operating system.
You want to audit each event that is related to a user managing an account in the user database on the
computer where the auditing is configured. To accomplish the task, you have enabled the Audit account
management option on the server. Which of the following events can be audited by enabling this audit
option.?
A. Access to an Active Directory object
B. Change of password for a user account
C. Addition of a user account to a group
D. Creation of a user account
Answer: B,C,D

GIAC examen   GSNA   GSNA

NO.17 You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You
want to set some terminal characteristics and environment variables. Which of the following Unix
configuration files can you use to accomplish the task?
A. /etc/sysconfig/routed
B. /proc/net
C. /etc/sysconfig/network-scripts/ifcfg-interface
D. /etc/sysconfig/init
Answer: D

GIAC   GSNA examen   certification GSNA

NO.18 John works as a contract Ethical Hacker. He has recently got a project to do security checking for
www.we-are-secure.com. He wants to find out the operating system of the we-are-secure server in the
information gathering step. Which of the following commands will he use to accomplish the task? (Choose
two)
A. nc 208.100.2.25 23
B. nmap -v -O www.we-are-secure.com
C. nc -v -n 208.100.2.25 80
D. nmap -v -O 208.100.2.25
Answer: B,D

GIAC   GSNA examen   GSNA

NO.19 Which of the following tools works both as an encryption-cracking tool and as a keylogger?
A. Magic Lantern
B. KeyGhost Keylogger
C. Alchemy Remote Executor
D. SocketShield
Answer: A

GIAC   GSNA   GSNA examen

NO.20 Which of the following allows the use of multiple virtual servers using different DNS names resolved by
the same IP address?
A. HTTP 1.1
B. JAVA
C. HTML
D. VPN
Answer: A

certification GIAC   GSNA   GSNA

Dans cette époque glorieuse, l'industrie IT est devenue bien intense. C'est raisonnable que le test GIAC GSNA soit un des tests plus populaires. Il y a de plus en plus de gens qui veulent participer ce test, et la réussite de test GIAC GSNA est le rêve pour les professionnels ambitieux.

Meilleur GIAC GPEN test formation guide

Dans cette Industrie IT intense, le succès de test GIAC GPEN peut augmenter le salaire. Les gens d'obtenir le Certificat GIAC GPEN peuvent gagner beaucoup plus que les gens sans Certificat GIAC GPEN. Le problème est comment on peut réussir le test plus facile?

Après une longue attente, les documentations de test GIAC GPEN qui combinent tous les efforts des experts de Pas4Test sont finalement sorties. Les documentations de Pass4Test sont bien répandues pendant les candidats. L'outil de formation est réputée par sa haute précision et grade couverture des questions, d'ailleurs, il est bien proche que test réel. Vous pouvez réussir le test GIAC GPEN à la première fois.

Nous sommes clairs que ce soit necessaire d'avoir quelques certificats IT dans cette industrie de plus en plus intense. Le Certificat IT est une bonne examination des connaissances démandées. Dans l'Industrie IT, le test GIAC GPEN est une bonne examination. Mais c'est difficile à passer le test GIAC GPEN. Pour améliorer le travail dans le future, c'est intélligent de prendre une bonne formation en coûtant un peu d'argent. Vous allez passer le test 100% en utilisant le Pass4Test. Votre argent sera tout rendu si votre test est raté.

Le produit de Pass4Test peut assurer les candidats à réussir le test GIAC GPEN à la première fois, mais aussi offrir la mise à jour gratuite pendant un an, les clients peuvent recevoir les ressources plus nouvelles. Pass4Test n'est pas seulement un site, mais aussi un bon centre de service.

Pass4Test a une équipe se composant des experts qui font la recherche particulièrement des exercices et des Q&As pour le test certification GIAC GPEN, d'ailleurs ils peuvent vous proposer à propos de choisir l'outil de se former en ligne. Si vous avez envie d'acheter une Q&A de Pass4Test, Pass4Test vous offrira de matériaux plus détailés et plus nouveaux pour vous aider à approcher au maximum le test réel. Assurez-vous de choisir le Pass4Test, vous réussirez 100% le test GIAC GPEN.

Il y a plusieurs de façons pour réussir le test GIAC GPEN, vous pouvez travailler dur et dépenser beaucoup d'argents, ou vous pouvez travailler plus efficacement avec moins temps dépensés.

Un bon choix de l'outil à se former est le point essentiel à passer le test GIAC GPEN, et les documentations à propos de rechercher le test GIAC GPEN est toujours une part plus importante pendant la préparation de test Certification. Les Q&As offertes par les experts de Pass4Test sont presque même que les tests réels. Pass4Test est un site web particulièrement en apportant les facilités aux gens qui veulent passer le test Certification.

Code d'Examen: GPEN

Nom d'Examen: GIAC (GIAC Certified Penetration Tester)

Questions et réponses: 384 Q&As

GPEN Démo gratuit à télécharger: http://www.pass4test.fr/GPEN.html

NO.1 You work as a professional Ethical Hacker. You are assigned a project to perform blackhat testing on
www.we-are-secure.com. You visit the office of we-are-secure.com as an air-condition mechanic. You
claim that someone from the office called you saying that there is some fault in the air-conditioner of the
server room. After some inquiries/arguments, the Security Administrator allows you to repair the
air-conditioner of the server room.
When you get into the room, you found the server is Linux-based. You press the reboot button of the
server after inserting knoppix Live CD in the CD drive of the server. Now, the server promptly boots
backup into Knoppix. You mount the root partition of the server after replacing the root password in the
/etc/shadow file with a known password hash and salt. Further, you copy the netcat tool on the server and
install its startup files to create a reverse tunnel and move a shell to a remote server whenever the server
is restarted. You simply restart the server, pull out the Knoppix Live CD from the server, and inform that
the air-conditioner is working properly.
After completing this attack process, you create a security auditing report in which you mention various
threats such as social engineering threat, boot from Live CD, etc. and suggest the countermeasures to
stop booting from the external media and retrieving sensitive data. Which of the following steps have you
suggested to stop booting from the external media and retrieving sensitive data with regard to the above
scenario?
Each correct answer represents a complete solution. Choose two.
A. Encrypting disk partitions
B. Using password protected hard drives
C. Placing BIOS password
D. Setting only the root level access for sensitive data
Answer: A,B

certification GIAC   GPEN   GPEN

NO.2 You work as a Network Administrator for Net World International. The company has a Windows Active
Directory-based single domain single forest network. The functional level of the forest is Windows Server
2003. There are ten Sales Managers in the company. The company has recently provided laptops to all its
Sales Managers. All the laptops run Windows XP Professional. These laptops will be connected to the
company's network through wireless connections. The company's management wants to implement
Shared Key authentication for these laptops. When you try to configure the network interface card of one
of the laptops for Shared Key authentication, you find no such option. What will you do to enable Shared
Key authentication?
A. Install PEAP-MS-CHAP v2
B. Install Service Pack 1
C. Enable WEP
D. Install EAP-TLS
Answer: C

GIAC   GPEN   GPEN examen   GPEN

NO.3 Which of the following is NOT an example of passive footprinting?
A. Scanning ports.
B. Analyzing job requirements.
C. Performing the whois query.
D. Querying the search engine.
Answer: A

GIAC   GPEN examen   certification GPEN   GPEN   certification GPEN

NO.4 A Web developer with your company wants to have wireless access for contractors that come in to work
on various projects. The process of getting this approved takes time. So rather than wait, he has put his
own wireless router attached to one of the network ports in his department. What security risk does this
present?
A. An unauthorized WAP is one way for hackers to get into a network.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. None, adding a wireless access point is a common task and not a security risk.
Answer: A

GIAC   certification GPEN   GPEN examen   GPEN

NO.5 Which of the following types of cyber stalking damage the reputation of their victim and turn other
people against them by setting up their own Websites, blogs or user pages for this purpose?
A. Encouraging others to harass the victim
B. False accusations
C. Attempts to gather information about the victim
D. False victimization
Answer: B

certification GIAC   certification GPEN   certification GPEN

NO.6 Which of the following tools can be used to read NetStumbler's collected data files and present street
maps showing the logged WAPs as icons, whose color and shape indicates WEP mode and signal
strength?
A. NetStumbler
B. StumbVerter
C. WEPcrack
D. Kismet
Answer: B

certification GIAC   GPEN examen   GPEN   GPEN

NO.7 You have inserted a Trojan on your friend's computer and you want to put it in the startup so that
whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry
entries will you edit to accomplish the task?
A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Answer: D

GIAC   certification GPEN   GPEN examen   GPEN examen   GPEN

NO.8 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the local disk
and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his
task?
A. TCP FTP proxy scanning
B. Eavesdropping
C. Web ripping
D. Fingerprinting
Answer: C

GIAC examen   GPEN   certification GPEN   certification GPEN

NO.9 Adam works on a Linux system. He is using Sendmail as the primary application to transmit emails.
Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files
contains e-mail information such as source and destination IP addresses, date and time stamps etc?
A. /log/var/logd
B. /var/log/logmail
C. /log/var/mailog
D. /var/log/mailog
Answer: D

GIAC   certification GPEN   GPEN   certification GPEN   GPEN

NO.10 You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will
you take to accomplish the task?
Each correct answer represents a complete solution. Choose two.
A. Restart nessusd service.
B. Place nikto.pl file in the /var/www directory.
C. Place nikto.pl file in the /etc/nessus directory.
D. Place the directory containing nikto.pl in root's PATH environment variable.
Answer: A,D

GIAC examen   GPEN   certification GPEN   certification GPEN

NO.11 Which of the following ports will you scan to search for SNMP enabled devices in the network?
A. 163
B. 123
C. 151
D. 161
Answer: D

certification GIAC   certification GPEN   GPEN   GPEN

NO.12 Which of the following enables an inventor to legally enforce his right to exclude others from using his
invention?
A. Patent
B. Spam
C. Phishing
D. Artistic license
Answer: A

GIAC examen   certification GPEN   GPEN   certification GPEN   certification GPEN

NO.13 Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.
A. WPA-PSK converts the passphrase into a 256-bit key.
B. WPA provides better security than WEP.
C. WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.
D. Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
Answer: A,B,C,D

certification GIAC   GPEN   certification GPEN   certification GPEN   GPEN examen

NO.14 Which of the following statements are true about SSIDs?
Each correct answer represents a complete solution. Choose all that apply.
A. SSIDs are case insensitive text strings and have a maximum length of 64 characters.
B. Configuring the same SSID as that of the other Wireless Access Points (WAPs) of other
networks will create a conflict.
C. SSID is used to identify a wireless network.
D. All wireless devices on a wireless network must have the same SSID in order to communicate with
each other.
Answer: B,C,D

GIAC examen   GPEN   GPEN   GPEN

NO.15 Which of the following statements are true about MS-CHAPv2?
Each correct answer represents a complete solution. Choose all that apply.
A. It is a connectionless protocol.
B. It can be replaced with EAP-TLS as the authentication mechanism for PPTP.
C. It provides an authenticator-controlled password change mechanism.
D. It is subject to offline dictionary attacks.
Answer: B,C,D

GIAC examen   GPEN   GPEN   GPEN examen

NO.16 TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the
target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker
and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port
will drop the packet. Which of the following operating systems can be easily identified with the help of TCP
FIN scanning.?
A. Solaris
B. Red Hat
C. Windows
D. Knoppix
Answer: C

GIAC   GPEN examen   GPEN examen

NO.17 Which of the following statements are true about KisMAC?
A. Data generated by KisMAC can also be saved in pcap format.
B. It cracks WEP and WPA keys by Rainbow attack or by dictionary attack.
C. It scans for networks passively on supported cards.
D. It is a wireless network discovery tool for Mac OS X.
Answer: A,C,D

GIAC examen   certification GPEN   GPEN

NO.18 Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or
stop the traffic altogether?
A. Man-in-the-middle
B. ARP spoofing
C. Port scanning
D. Session hijacking
Answer: B

GIAC examen   GPEN   GPEN   GPEN

NO.19 Which of the following are the scanning methods used in penetration testing?
Each correct answer represents a complete solution. Choose all that apply.
A. Vulnerability
B. Port
C. Network
D. Services
Answer: A,B,C

GIAC examen   certification GPEN   GPEN   certification GPEN   certification GPEN

NO.20 Which of the following attacks is a form of active eavesdropping in which the attacker makes
independent connections with the victims and relays messages between them, making them believe that
they are talking directly to each other over a private connection, when in fact the entire conversation is
controlled by the attacker?
A. DoS
B. Sniffing
C. Man-in-the-middle
D. Brute force
Answer: C

certification GIAC   GPEN examen   certification GPEN   certification GPEN   GPEN

NO.21 Which of the following tools is used to verify the network structure packets and confirm that the packets
are constructed according to specification?
A. EtherApe
B. Snort decoder
C. AirSnort
D. snort_inline
Answer: B

certification GIAC   GPEN   GPEN   GPEN examen   GPEN   certification GPEN

NO.22 You execute the following netcat command:
c:\target\nc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?
A. Capture data on port 53 and performing banner grabbing.
B. Listen the incoming traffic on port 53 and execute the remote shell.
C. Listen the incoming data and performing port scanning.
D. Capture data on port 53 and delete the remote shell.
Answer: B

certification GIAC   GPEN   GPEN   certification GPEN   GPEN examen

NO.23 Which of the following options holds the strongest password?
A. california
B. $#164aviD