GIAC certification GCFW best exam questions and answers

Now there are many IT training institutions which can provide you with GIAC certification GCFW exam related training material, but usually through these website examinees do not gain detailed material. Because the materials they provide are specialized for GIAC certification GCFW exam, so they didn't attract the examinee's attention.

There are a lot of sites provide the GIAC GCFW exam certification and other training materials for you . DumpLeader is only website which can provide you GIAC GCFW exam certification with high quality. In the guidance and help of DumpLeader, you can through your GIAC GCFW exam the first time. The questions and the answer provided by DumpLeader are IT experts use their extensive knowledge and experience manufacturing out . It can help your future in the IT industry to the next level.

DumpLeader can provide a shortcut for you and save you a lot of time and effort. DumpLeader will provide good training tools for your GIAC certification GCFW exam and help you pass GIAC certification GCFW exam. If you see other websites provide relevant information to the website, you can continue to look down and you will find that in fact the information is mainly derived from our DumpLeader. Our DumpLeader provide the most comprehensive information and update fastest.

Exam Code: GCFW
Exam Name: GIAC (GIAC Certified Firewall Analyst)
One year free update, No help, Full refund!
Total Q&A: 391 Questions and Answers
Last Update: 2014-01-29

DumpLeader IT Certification has years of training experience. DumpLeader GIAC GCFW exam training materials is a reliable product. IT elite team continue to provide our candidates with the latest version of the GCFW exam training materials. Our staff made ​​great efforts to ensure that you always get good grades in examinations. To be sure, DumpLeader GIAC GCFW exam materials can provide you with the most practical IT certification material.

GIAC GCFW exam is very popular in IT field. Having GCFW certificate is the best for those people who want to be promoted and is also a valid selection. And with the aid of GCFW certification test, you can improve your skills and master some useful techniques in your job so that you can finish your work better and demonstrate your great ability before other people. Only in this way can you get more development opportunities.

DumpLeader GIAC GCFW Training Kit is designed and ready by DumpLeader IT experts. Its design is closely linked to today's rapidly changing IT market. . DumpLeader training to help you take advantage of the continuous development of technology to improve the ability to solve problems, and improve your job satisfaction. The coverage DumpLeader GIAC GCFW questions can reach 100% , as long as you use our questions and answers, we guarantee you pass the exam the first time!

To pass GIAC GCFW certification exam seems to be a very difficult task. Having registered GCFW test, are you worrying about how to prepare for the exam? If so, please see the following content, I now tell you a shortcut through the GCFW exam. The certification training dumps that can let you pass the test first time have appeared and it is DumpLeader GIAC GCFW exam dumps. If you would like to sail through the test, come on and try it.

GCFW Free Demo Download: http://www.dumpleader.com/GCFW_exam.html

NO.1 Which of the following can be monitored by using the host intrusion detection system (HIDS)?
Each correct answer represents a complete solution. Choose two.
A. Computer performance
B. File system integrity
C. Storage space on computers
D. System files
Answer: B,D

GIAC   GCFW test questions   GCFW   GCFW study guide

NO.2 Which of the following are the reasons that network administrators use Access Control Lists?
Each correct answer represents a complete solution. Choose two.
A. Encrypting data to be routed
B. Removing weak user password
C. Controlling VTY access into a router
D. Filtering traffic as it passes through a router
Answer: C,D

GIAC braindump   GCFW   GCFW certification training   GCFW exam prep

NO.3 John works as a professional Ethical Hacker. He has been assigned a project for testing the security of
www.we-are-secure.com. He wants to corrupt an IDS signature database so that performing attacks on
the server is made easy and he can observe the flaws in the We-are-secure server. To perform his task,
he first of all sends a virus that continuously changes its signature to avoid detection from IDS. Since the
new signature of the virus does not match the old signature, which is entered in the IDS signature
database, IDS becomes unable to point out the malicious virus. Which of the following IDS evasion
attacks is John performing?
A. Session splicing attack
B. Evasion attack
C. Polymorphic shell code attack
D. Insertion attack
Answer: C

GIAC   GCFW demo   GCFW Bootcamp   GCFW questions   GCFW dumps

NO.4 Which of the following is the default port for POP3?
A. 25
B. 21
C. 80
D. 110
Answer: B

GIAC   GCFW exam   GCFW   GCFW dumps

NO.5 Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6?
A. Electronic Codebook (ECB) Mode
B. Cipher Block Chaining (CBC) Mode
C. Propagating Cipher Block Chaining (PCBC) Mode
D. Cipher Feedback (CFB) Mode
Answer: B

GIAC   GCFW Bootcamp   GCFW   GCFW   GCFW demo   GCFW certification training

NO.6 You work as a Security Manger for Tech Perfect Inc. The company has a Windows-based network.
You want to scroll real-time network traffic to a command console in a readable format. Which of the
following command line utilities will you use to accomplish the task?
A. WinPcap
B. WinDump
C. iptables
D. libpcap
Answer: B

GIAC   GCFW   GCFW

NO.7 WinDump, tcpdump, and Wireshark specify which fields of information libpcap should record.
Which of the following filters do they use in order to accomplish the task?
A. Berkeley Packet Filter
B. IM filter
C. Web filter
D. FIR filter
Answer: A

GIAC   GCFW   GCFW

NO.8 Which of the following proxy servers is placed anonymously between the client and remote server and
handles all of the traffic from the client?
A. Web proxy server
B. Open proxy server
C. Forced proxy server
D. Caching proxy server
Answer: C

GIAC   GCFW   GCFW original questions   GCFW certification   GCFW   GCFW exam

NO.9 A scenario involves a pool of users with private IP addresses who need to access the Internet;
however, the company has a limited number of IP addresses and needs to ensure users occupy only one
public IP address.
Which technology is used to allow a pool of users to share one global IP address for Internet access?
A. Port Address Translation
B. Per-user Address Translation
C. Pool Address Translation
D. Private Address Translation
Answer: A

GIAC   GCFW test answers   GCFW   GCFW   GCFW

NO.10 Which of the following statements are true about an IDP rule base notification?
A. It can be defined as reusable logical entities that the user can apply to the rules.
B. When an action is performed, a notification defines how to log information.
C. It is used to specify the type of network traffic that has to be monitored for attacks.
D. It directs an IDP to drop or close the connection.
Answer: B

GIAC exam dumps   GCFW test   GCFW   GCFW pdf

NO.11 A packet filtering firewall inspects each packet passing through the network and accepts or rejects it
based on user-defined rules. Based on which of the following information are these rules set to filter the
packets?
Each correct answer represents a complete solution. Choose all that apply.
A. Layer 4 protocol information
B. Actual data in the packet
C. Interface of sent or received traffic
D. Source and destination Layer 3 address
Answer: A,C,D

GIAC   GCFW   GCFW   GCFW dumps   GCFW exam simulations

NO.12 Which of the following number ranges is used for the IP Standard ACL?
A. 100-199
B. 1000-1099
C. 600-699
D. 1-99
Answer: D

GIAC   GCFW   GCFW study guide

NO.13 Which of the following commands configures a router to encrypt all passwords entered after the
command has been executed, as well as all passwords already on the running configuration?
A. no service password-encryption
B. enable password-encryption
C. no enable password-encryption
D. service password-encryption
Answer: D

GIAC test answers   GCFW   GCFW questions   GCFW exam prep   GCFW exam

NO.14 Which of the following IDs is used to reassemble the fragments of a datagram at the destination point?
A. IP identification number
B. SSID
C. MAK ID
D. IP address
Answer: A

GIAC   GCFW   GCFW   GCFW   GCFW test questions

NO.15 Which of the following devices is used to identify out-of-date software versions, applicable patches,
system upgrades, etc?
A. Retinal scanner
B. Fingerprint reader
C. Smart card reader
D. Vulnerability scanner
Answer: D

GIAC   GCFW test   GCFW   GCFW questions

NO.16 Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer
runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He
knows that in Windows operating system, the data is searched in pre-defined steps for proper and
efficient analysis. Which of the following is the correct order for searching data on a Windows based
system?
A. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
B. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
C. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
D. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
Answer: C

GIAC   GCFW test answers   GCFW   GCFW

NO.17 Which of the following are the countermeasures against a man-in-the-middle attack?
Each correct answer represents a complete solution. Choose all that apply.
A. Using Secret keys for authentication.
B. Using public key infrastructure authentication.
C. Using Off-channel verification.
D. Using basic authentication.
Answer: A,B,C

GIAC test questions   GCFW exam   GCFW practice test

NO.18 Which of the following protocols does IPsec use to perform various security functions in the network?
Each correct answer represents a complete solution. Choose all that apply.
A. Skinny Client Control Protocol
B. Authentication Header
C. Encapsulating Security Payload
D. Internet Key Exchange
Answer: B,C,D

GIAC questions   GCFW study guide   GCFW exam   GCFW

NO.19 Which of the following ICMPv6 neighbor discovery messages is sent by hosts to request an immediate
router advertisement, instead of waiting for the next scheduled advertisement?
A. Router Advertisement
B. Neighbor Advertisement
C. Router Solicitation
D. Neighbor Solicitation
Answer: C

GIAC answers real questions   GCFW   GCFW exam simulations   GCFW exam simulations   GCFW

NO.20 Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to
secure access to the network of the company from all possible entry points. He segmented the network
into several subnets and installed firewalls all over the network. He has placed very stringent rules on all
the firewalls, blocking everything in and out except the ports that must be used. He does need to have
port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still
worried about the programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker
using Hping2 to scan his internal network?
A. Block ICMP type 13 messages
B. Block ICMP type 3 messages
C. Block all outgoing traffic on port 21
D. Block all outgoing traffic on port 53
Answer: A

GIAC   GCFW   GCFW study guide   GCFW questions

NO.21 Which of the following is an attack with IP fragments that cannot be reassembled?
A. Dictionary attack
B. Smurf attack
C. Teardrop attack
D. Password guessing attack
Answer: C

GIAC   GCFW   Braindumps GCFW   GCFW pdf   GCFW study guide

NO.22 Choose the best explanation for the resulting error when entering the command below.
A. The command is attempting to create a standard access list with extended access list param eters.
B. The ACL commands should be entered from the (config-router) configuration mode.
C. The wildcard mask is not provided for the source and destination addresses.
D. The port number given does not correspond with the proper transport protocol.
Answer: A

GIAC certification training   GCFW   GCFW answers real questions

NO.23 Which of the following limits the number of packets seen by tcpdump?
A. BPF-based filter
B. Recipient filtering
C. Sender filtering
D. IFilters
Answer: A

GIAC answers real questions   GCFW test questions   GCFW

NO.24 You work as a Network Architect for Tech Perfect Inc. The company has a corporate LAN network. You
will have to perform the following tasks:
l Limit events that occur from security threats such as viruses, worms, and spyware.
l Restrict access to the network based on identity or security posture.
Which of the following services will you deploy in the network to accomplish the tasks?
A. NetFlow
B. Protocol-Independent Multicast
C. Network Admission Control
D. Firewall Service Module
Answer: C

GIAC   GCFW   GCFW   GCFW exam dumps   GCFW certification training

NO.25 Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing
(APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an
attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether.
The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN.
What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
Answer: A,C,D,E

GIAC   GCFW test questions   GCFW   GCFW questions

NO.26 Which of the following statements about the traceroute utility are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It generates a buffer overflow exploit by transforming an attack shell code so that the new attack shell
code cannot be recognized by any Intrusion Detection Systems.
B. It uses ICMP echo packets to display the Fully Qualified Domain Name (FQDN) and the IP address of
each gateway along the route to the remote host.
C. It records the time taken for a round trip for each packet at each router.
D. It is an online tool that performs polymorphic shell code attacks.
Answer: B,C

GIAC   GCFW exam prep   GCFW

NO.27 Which of the following components are usually found in an Intrusion detection system (IDS).?
Each correct answer represents a complete solution. Choose two.
A. Firewall
B. Console
C. Gateway
D. Modem
E. Sensor
Answer: B,E

GIAC test   GCFW exam prep   GCFW Bootcamp   GCFW

NO.28 Which of the following intrusion detection systems (IDS) monitors network traffic and compares it
against an established baseline?
A. Network-based
B. File-based
C. Signature-based
D. Anomaly-based
Answer: D

GIAC   GCFW   Braindumps GCFW

NO.29 You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP network. You have
been assigned a task to configure security mechanisms for the network of the company. You have
decided to configure a packet filtering firewall. Which of the following may be the reasons that made you
choose a packet filtering firewall as a security mechanism?
Each correct answer represents a complete solution. Choose all that apply.
A. It makes security transparent to end-users which provide easy use of the client application s.
B. It prevents application-layer attacks.
C. It is easy to install packet filtering firewalls in comparison to the other network security sol utions.
D. It easily matches most of the fields in Layer 3 packets and Layer 4 segment headers, and thus,
provides a lot of flexibility in implementing security policies.
Answer: A,C,D

GIAC original questions   GCFW   GCFW   GCFW study guide

NO.30 Which of the following types of Intrusion Detection Systems consists of an agent on a host that identifies
intrusions by analyzing system calls, application logs, file-system modifications (binaries, password files,
capability/acl databases) and other host activities and state?
A. HIDS
B. NIDS
C. APIDS
D. PIDS
Answer: A

GIAC questions   GCFW   GCFW   GCFW   GCFW test

DumpLeader offer the latest 700-501 exam material and high-quality MB5-700 pdf questions & answers. Our 70-341 VCE testing engine and 70-464 study guide can help you pass the real exam. High-quality 642-242 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.dumpleader.com/GCFW_exam.html

The best GIAC certification G2700 exam training mode released

Are you one of them? Are you still worried and confused because of the the various exam materials and fancy training courses exam? DumpLeader is the right choice for you. Because we can provide you with a comprehensive exam, including questions and answers. All of these will help you to acquire a better knowledge, we are confident that you will through DumpLeader the GIAC G2700 certification exam. This is our guarantee to all customers.

Our latest training material about GIAC certification G2700 exam is developed by DumpLeader's professional team's constantly study the outline. It can help a lot of people achieve their dream. In today's competitive IT profession, if you want to stabilize your own position, you will have to prove your professional knowledge and technology level. GIAC certification G2700 exam is a very good test to prove your ability. If you have a GIAC G2700 certification, your work will have a lot of change that wages and work position will increase quickly.

GIAC G2700 certification exam is a very difficult test. Even if the exam is very hard, many people still choose to sign up for the exam. As to the cause, G2700 exam is a very important test. For IT staff, not having got the certificate has a bad effect on their job. GIAC G2700 certificate will bring you many good helps and also help you get promoted. In a word, this is a test that will bring great influence on your career. Such important exam, you also want to attend the exam.

Exam Code: G2700
Exam Name: GIAC (GIAC Certified ISO-2700 Specialist Practice Test)
One year free update, No help, Full refund!
Total Q&A: 453 Questions and Answers
Last Update: 2014-01-29

Take advantage of the DumpLeader's GIAC training materials to prepare for the exam, let me feel that the exam have never so easy to pass. This is someone who passed the examination said to us. With DumpLeader GIAC G2700 exam certification training, you can sort out your messy thoughts, and no longer twitchy for the exam. DumpLeader have some questions and answers provided free of charge as a trial. If I just said, you may be not believe that. But as long as you use the trial version, you will believe what I say. You will know the effect of this exam materials.

G2700 Free Demo Download: http://www.dumpleader.com/G2700_exam.html

NO.1 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC   G2700 Bootcamp   G2700 exam   G2700

NO.2 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC questions   G2700   G2700   G2700

NO.3 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC   G2700 study guide   G2700 test questions

NO.4 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC   G2700 practice test   G2700 exam prep   G2700   G2700 pdf   G2700 original questions

NO.5 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC test   G2700 test answers   G2700

NO.6 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC practice test   G2700 Bootcamp   G2700

NO.7 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC pdf   G2700 exam prep   G2700 test   G2700 exam simulations   G2700

NO.8 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC practice questions   G2700   G2700 exam   G2700 practice test   G2700 test answers

NO.9 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC   G2700   G2700

NO.10 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC   G2700   G2700 demo

NO.11 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC   G2700   Braindumps G2700

NO.12 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC   G2700   G2700 demo   G2700   G2700 exam

NO.13 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC exam   G2700   G2700

NO.14 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC   G2700 original questions   G2700   G2700 certification training   G2700

NO.15 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC test   G2700 answers real questions   G2700 certification training   G2700 test   G2700

NO.16 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC exam prep   G2700 pdf   G2700

NO.17 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC   G2700   G2700

NO.18 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC   G2700 test   Braindumps G2700

NO.19 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC   G2700 original questions   G2700   G2700   G2700 braindump

NO.20 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC   G2700   G2700 certification   Braindumps G2700   G2700

NO.21 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC exam dumps   Braindumps G2700   G2700   G2700 original questions

NO.22 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700   G2700 pdf   G2700 questions   G2700   G2700

NO.23 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC certification   G2700   G2700   G2700 Bootcamp

NO.24 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC Bootcamp   G2700 exam dumps   G2700

NO.25 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC   G2700   G2700 exam simulations

NO.26 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC test questions   G2700   G2700   G2700 original questions

NO.27 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC   G2700   G2700 original questions   G2700

NO.28 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC dumps   G2700 study guide   G2700 demo   G2700 test answers

NO.29 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC   G2700 exam dumps   G2700 questions   G2700 test questions

NO.30 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC   G2700 certification training   G2700   G2700 exam prep

DumpLeader offer the latest ECP-102 exam material and high-quality C-HANATEC131 pdf questions & answers. Our 000-N52 VCE testing engine and HP2-Z25 study guide can help you pass the real exam. High-quality 1z0-457 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.dumpleader.com/G2700_exam.html

DumpLeader GIAC GCIH exam practice questions and answers

If you are still hesitating whether to select DumpLeader, you can free download part of our exam practice questions and answers from DumpLeader website to determine our reliability. If you choose to download all of our providing exam practice questions and answers, DumpLeader dare 100% guarantee that you can pass GIAC certification GCIH exam disposably with a high score.

In this era, everything is on the rise. Do not you want to break you own? Double your salary, which is not impossible. Through the GIAC GCIH exam, you will get what you want. DumpLeader will provide you with the best training materials, and make you pass the exam and get the certification. It's a marvel that the pass rate can achieve 100%. This is indeed true, no doubt, do not consider, act now.

Exam Code: GCIH
Exam Name: GIAC (GIAC Certified Incident Handler)
One year free update, No help, Full refund!
Total Q&A: 335 Questions and Answers
Last Update: 2013-11-26

There are many ways to help you pass GIAC certification GCIH exam and selecting a good pathway is a good protection. DumpLeader can provide you a good training tool and high-quality reference information for you to participate in the GIAC certification GCIH exam. DumpLeader's practice questions and answers are based on the research of GIAC certification GCIH examination Outline. Therefore, the high quality and high authoritative information provided by DumpLeader can definitely do our best to help you pass GIAC certification GCIH exam. DumpLeader will continue to update the information about GIAC certification GCIH exam to meet your need.

DumpLeader is a professional website. It can give each candidate to provide high-quality services, including pre-sales service and after-sales service. If you need DumpLeader's GIAC GCIH exam training materials, you can use part of our free questions and answers as a trial to sure that it is suitable for you. So you can personally check the quality of the DumpLeader GIAC GCIH exam training materials, and then decide to buy it. If you did not pass the exam unfortunately, we will refund the full cost of your purchase. Moreover, we can give you a year of free updates until you pass the exam.

If you are still struggling to get the GIAC GCIH exam certification, DumpLeader will help you achieve your dream. DumpLeader's GIAC GCIH exam training materials is the best training materials. We can provide you with a good learning platform. How do you prepare for this exam to ensure you pass the exam successfully? The answer is very simple. If you have the appropriate time to learn, then select DumpLeader's GIAC GCIH exam training materials. With it, you will be happy and relaxed to prepare for the exam.

You just need to get DumpLeader's GIAC certification GCIH exam exercises and answers to do simulation test, you can pass the GIAC certification GCIH exam successfully. If you have a GIAC GCIH the authentication certificate, your professional level will be higher than many people, and you can get a good opportunity of promoting job. Add DumpLeader's products to cart right now! DumpLeader can provide you with 24 hours online customer service.

GCIH Free Demo Download: http://www.dumpleader.com/GCIH_exam.html

NO.1 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The
output of the scanning test is as follows:
C:\whisker.pl -h target_IP_address
-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv
John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server.
Which of the following statements about 'Printenv' vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.
A. This vulnerability helps in a cross site scripting attack.
B. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the
attacker.
C. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
D. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other
malicious scripts.
Answer: A, C, D

GIAC   GCIH   GCIH dumps   GCIH exam prep   GCIH   GCIH

NO.2 John works as a Professional Penetration Tester. He has been assigned a project to test the Website
security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a
username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure
Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve
the security of the we-are-secure Website login page from the SQL injection attack?
A. Use the escapeshellarg() function
B. Use the session_regenerate_id() function
C. Use the mysql_real_escape_string() function for escaping input
D. Use the escapeshellcmd() function
Answer: C

GIAC   GCIH   GCIH   GCIH exam simulations

NO.3 Which of the following is a technique of using a modem to automatically scan a list of telephone
numbers, usually dialing every number in a local area code to search for computers, Bulletin board
systems, and fax machines?
A. Demon dialing
B. Warkitting
C. War driving
D. Wardialing
Answer: D

GIAC   GCIH   GCIH practice questions

NO.4 Which of the following statements about Denial-of-Service (DoS) attack are true?
Each correct answer represents a complete solution. Choose three.
A. It disrupts services to a specific computer.
B. It changes the configuration of the TCP/IP protocol.
C. It saturates network resources.
D. It disrupts connections between two computers, preventing communications between services.
Answer: A, C, D

GIAC   GCIH   Braindumps GCIH

NO.5 Network mapping provides a security testing team with a blueprint of the organization. Which of the
following steps is NOT a part of manual network mapping?
A. Gathering private and public IP addresses
B. Collecting employees information
C. Banner grabbing
D. Performing Neotracerouting
Answer: D

GIAC demo   GCIH   GCIH answers real questions   GCIH   GCIH   GCIH

NO.6 Fill in the blank with the appropriate word.
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use
______ defense against buffer overflow attacks.
A. canary
Answer: A

GIAC   GCIH questions   GCIH exam simulations   GCIH   GCIH

NO.7 Choose and reorder the steps of an incident handling process in their correct order.
A.
Answer: A

GIAC   GCIH   GCIH   GCIH

NO.8 Which of the following applications is an example of a data-sending Trojan?
A. SubSeven
B. Senna Spy Generator
C. Firekiller 2000
D. eBlaster
Answer: D

GIAC   GCIH   GCIH   GCIH   GCIH

NO.9 Which of the following commands is used to access Windows resources from Linux workstation?
A. mutt
B. scp
C. rsync
D. smbclient
Answer: D

GIAC   GCIH   GCIH study guide   GCIH practice test   GCIH

NO.10 Adam has installed and configured his wireless network. He has enabled numerous security features
such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless
router. Adam notices that when he uses his wireless connection, the speed is sometimes 16 Mbps and
sometimes it is only 8 Mbps or less. Adam connects to the management utility wireless router and finds
out that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the
router's logs and notices that the unfamiliar machine has the same MAC address as his laptop.
Which of the following attacks has been occurred on the wireless network of Adam?
A. NAT spoofing
B. DNS cache poisoning
C. MAC spoofing
D. ARP spoofing
Answer: C

GIAC test   GCIH exam   GCIH test   GCIH

NO.11 You see the career section of a company's Web site and analyze the job profile requirements. You
conclude that the company wants professionals who have a sharp knowledge of Windows server 2003
and Windows active directory installation and placement. Which of the following steps are you using to
perform hacking?
A. Scanning
B. Covering tracks
C. Reconnaissance
D. Gaining access
Answer: C

GIAC dumps   GCIH   GCIH   GCIH

NO.12 Adam, a novice computer user, works primarily from home as a medical professional. He just bought a
brand new Dual Core Pentium computer with over 3 GB of RAM. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Adam uses antivirus software,
anti-spyware software, and keeps the computer up-to-date with Microsoft patches. After another month of
working on the computer, Adam finds that his computer is even more noticeably slow. He also notices a
window or two pop-up on his screen, but they quickly disappear. He has seen these windows show up,
even when he has not been on the Internet. Adam notices that his computer only has about 10 GB of free
space available. Since his hard drive is a 200 GB hard drive, Adam thinks this is very odd.
Which of the following is the mostly likely the cause of the problem.?
A. Computer is infected with the stealth kernel level rootkit.
B. Computer is infected with stealth virus.
C. Computer is infected with the Stealth Trojan Virus.
D. Computer is infected with the Self-Replication Worm.
Answer: A

GIAC practice test   GCIH demo   GCIH   GCIH

NO.13 Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.
A. tcp wrapper provides access control, host address spoofing, client username lookups, etc.
B. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running
the server program directly.
C. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as
tokens to filter for access control purposes.
D. tcp wrapper protects a Linux server from IP address spoofing.
Answer: A, B, C

GIAC braindump   GCIH   GCIH   GCIH original questions

NO.14 Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer
overflow occurs when a particular operation/function writes more data into a variable than the variable
was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.
A. Dynamic buffer overflows
B. Stack based buffer overflow
C. Heap based buffer overflow
D. Static buffer overflows
Answer: B, C

GIAC Bootcamp   GCIH study guide   GCIH   GCIH   GCIH braindump

NO.15 Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All
computers run on Windows XP. Manager of the Sales department complains Adam about the unusual
behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his
computer overnight. Adam suspects that some malicious software or Trojans have been installed on the
computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346,
and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one
application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?
A. Cheops-ng is installed on the computer.
B. Elsave is installed on the computer.
C. NetBus is installed on the computer.
D. NetStumbler is installed on the computer.
Answer: C

GIAC test   GCIH demo   GCIH exam simulations   GCIH practice test

NO.16 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and
successfully logs in to the user page of the Web site. The We-are-secure login page is vulnerable to a
__________.
A. Dictionary attack
B. SQL injection attack
C. Replay attack
D. Land attack
Answer: B

GIAC questions   GCIH test questions   GCIH practice test   GCIH Bootcamp   GCIH

NO.17 Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not
concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
A. UDP sacn
B. TCP Connect scan
C. ACK scan
D. Fin scan
Answer: B

GIAC   GCIH   GCIH

NO.18 Which of the following statements are true about worms?
Each correct answer represents a complete solution. Choose all that apply.
A. Worms cause harm to the network by consuming bandwidth, whereas viruses almost always corrupt or
modify files on a targeted computer.
B. Worms can exist inside files such as Word or Excel documents.
C. One feature of worms is keystroke logging.
D. Worms replicate themselves from one system to another without using a host file.
Answer: A, B, D

GIAC Bootcamp   GCIH   GCIH test   Braindumps GCIH   GCIH

NO.19 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of
Cross-Site Scripting attack Ryan intends to do?
A. Non persistent
B. Document Object Model (DOM)
C. SAX
D. Persistent
Answer: D

GIAC exam   GCIH   GCIH dumps   GCIH   GCIH certification training

NO.20 Which of the following are the primary goals of the incident handling team?
Each correct answer represents a complete solution. Choose all that apply.
A. Freeze the scene.
B. Repair any damage caused by an incident.
C. Prevent any further damage.
D. Inform higher authorities.
Answer: A, B, C

GIAC   GCIH exam   GCIH certification training   GCIH test   GCIH   GCIH

NO.21 In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to
the target system?
A. Ping of death
B. Jolt
C. Fraggle
D. Teardrop
Answer: A

GIAC   GCIH test answers   GCIH

NO.22 Which of the following statements are true about a keylogger?
Each correct answer represents a complete solution. Choose all that apply.
A. It records all keystrokes on the victim's computer in a predefined log file.
B. It can be remotely installed on a computer system.
C. It is a software tool used to trace all or specific activities of a user on a computer.
D. It uses hidden code to destroy or scramble data on the hard disk.
Answer: A, B, C

GIAC pdf   GCIH practice test   GCIH

NO.23 You have configured a virtualized Internet browser on your Windows XP professional computer. Using
the virtualized Internet browser, you can protect your operating system from which of the following?
A. Brute force attack
B. Mail bombing
C. Distributed denial of service (DDOS) attack
D. Malware installation from unknown Web sites
Answer: D

GIAC practice questions   GCIH study guide   Braindumps GCIH   GCIH certification

NO.24 Which of the following types of attack can guess a hashed password?
A. Brute force attack
B. Evasion attack
C. Denial of Service attack
D. Teardrop attack
Answer: A

GIAC   GCIH braindump   GCIH Bootcamp   GCIH dumps

NO.25 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a
countermeasure, he suggests that the Network Administrator should remove the IPP printing capability
from the server. He is suggesting this as a countermeasure against __________.
A. IIS buffer overflow
B. NetBIOS NULL session
C. SNMP enumeration
D. DNS zone transfer
Answer: A

GIAC dumps   GCIH   GCIH braindump   GCIH demo

NO.26 Adam works as an Incident Handler for Umbrella Inc. He has been sent to the California unit to train the
members of the incident response team. As a demo project he asked members of the incident response
team to perform the following actions:
Remove the network cable wires.
Isolate the system on a separate VLAN.
Use a firewall or access lists to prevent communication into or out of the system.
Change DNS entries to direct traffic away from compromised system.
Which of the following steps of the incident handling process includes the above actions?
A. Identification
B. Containment
C. Eradication
D. Recovery
Answer: B

GIAC   GCIH practice test   GCIH test questions   GCIH test   Braindumps GCIH

NO.27 Which of the following types of attacks is the result of vulnerabilities in a program due to poor
programming techniques?
A. Evasion attack
B. Denial-of-Service (DoS) attack
C. Ping of death attack
D. Buffer overflow attack
Answer: D

GIAC   GCIH   GCIH certification

NO.28 Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary
attack?
A. Whishker
B. Nessus
C. SARA
D. Nmap
Answer: B

GIAC   GCIH certification training   GCIH   GCIH   GCIH exam   GCIH questions

NO.29 Which of the following types of attacks is only intended to make a computer resource unavailable to its
users?
A. Denial of Service attack
B. Replay attack
C. Teardrop attack
D. Land attack
Answer: A

GIAC exam simulations   Braindumps GCIH   GCIH   GCIH practice questions   GCIH exam simulations   GCIH exam

NO.30 Which of the following statements about buffer overflow is true?
A. It manages security credentials and public keys for message encryption.
B. It is a collection of files used by Microsoft for software updates released between major service pack
releases.
C. It is a condition in which an application receives more data than it is configured to accept.
D. It is a false warning about a virus.
Answer: C

GIAC   Braindumps GCIH   GCIH demo   GCIH

DumpLeader offer the latest 70-465 exam material and high-quality IIA-CCSA pdf questions & answers. Our 200-101 VCE testing engine and JN0-360 study guide can help you pass the real exam. High-quality HP2-E56 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.dumpleader.com/GCIH_exam.html

GIAC certification GSSP-JaVa exam best training materials

If you choose the help of DumpLeader, we will spare no effort to help you pass the exam. Moreover, we also provide you with a year of free after-sales service to update the exam practice questions and answers. Do not hesitate! Please select DumpLeader, it will be the best guarantee for you to pass GSSP-JaVa certification exam. Now please add DumpLeader to your shopping cart.

It's better to hand-lit own light than look up to someone else's glory. DumpLeader GIAC GSSP-JaVa exam training materials will be the first step of your achievements. With it, you will be pass the GIAC GSSP-JaVa exam certification which is considered difficult by a lot of people. With this certification, you can light up your heart light in your life. Start your new journey, and have a successful life.

If you think you can face unique challenges in your career, you should pass the GIAC GSSP-JaVa exam. DumpLeader is a site that comprehensively understand the GIAC GSSP-JaVa exam. Using our exclusive online GIAC GSSP-JaVa exam questions and answers, will become very easy to pass the exam. DumpLeader guarantee 100% success. DumpLeader is recognized as the leader of a professional certification exam, it provides the most comprehensive certification standard industry training methods. You will find that DumpLeader GIAC GSSP-JaVa exam questions and answers are most thorough and the most accurate questions on the market and up-to-date practice test. When you have DumpLeader GIAC GSSP-JaVa questions and answers, it will allow you to have confidence in passing the exam the first time.

In order to protect the vital interests of each IT certification exams candidate, DumpLeader provides high-quality GIAC GSSP-JaVa exam training materials. This exam material is specially developed according to the needs of the candidates. It is researched by the IT experts of DumpLeader. Their struggle is not just to help you pass the exam, but also in order to let you have a better tomorrow.

Exam Code: GSSP-JaVa
Exam Name: GIAC (GIAC Secure Software Programmer – Java)
One year free update, No help, Full refund!
Total Q&A: 275 Questions and Answers
Last Update: 2013-11-26

Using DumpLeader you can pass the GIAC GSSP-JaVa exam easily. The first time you try to participate in GIAC GSSP-JaVa exam, selecting DumpLeader's GIAC GSSP-JaVa training tools and downloading GIAC GSSP-JaVa practice questions and answers will increase your confidence of passing the exam and will effectively help you pass the exam. Other online websites also provide training tools about GIAC certification GSSP-JaVa exam, but the quality of our products is very good. Our practice questions and answers have high accuracy. Our training materials have wide coverage of the content of the examination and constantly update and compile. DumpLeader can provide you with a very high accuracy of exam preparation. Selecting DumpLeader can save you a lot of time, so that you can get the GIAC GSSP-JaVa certification earlier to allow you to become a GIAC IT professionals.

GSSP-JaVa Free Demo Download: http://www.dumpleader.com/GSSP-JaVa_exam.html

NO.1 Which of the following functions are performed by methods of the
HttpSessionActivationListener interface?
Each correct answer represents a complete solution. Choose all that apply.
A. Notifying the object when it is bound to a session.
B. Notifying an attribute that a session has just migrated from one JVM to another.
C. Notifying the object when it is unbound from a session.
D. Notifying an attribute that a session is about to migrate from one JVM to another.
Answer: B,D

GIAC   GSSP-JaVa practice questions   GSSP-JaVa test questions

NO.2 Which of the following elements are the subelements of the mime-mapping element in a
deployment descriptor file?
Each correct answer represents a complete solution. Choose all that apply.
A. exception-type
B. error-code
C. extension
D. mime-type
E. servlet-class
Answer: C,D

Braindumps GIAC   GSSP-JaVa answers real questions   Braindumps GSSP-JaVa   GSSP-JaVa practice test   GSSP-JaVa test questions

NO.3 John works as a Software Developer for VenTech Inc. He writes the following code using Java.
public class vClass extends Thread
{
public static void main(String args[])
{
vClass vc=new vClass();
vc.run();
}
public void start()
{
for(int k=0;k<20;k++)
{
System.out.println("The value of k = "+k);
}
}
}
What will happen when he attempts to compile and execute the application.?
A. The application will compile successfully and the values from 0 to 19 will be displayed as the output.
B. A compile-time error will occur indicating that no run() method is defined for the Thread class.
C. A runtime error will occur indicating that no run() method is defined for the Thread class.
D. The application will compile successfully but will not display anything as the output.
Answer: D

GIAC   GSSP-JaVa   GSSP-JaVa   GSSP-JaVa   GSSP-JaVa

NO.4 Mark works as a Programmer for InfoTech Inc. He develops a Website that uses HTML and processes
HTML validation. Which of the following are the advantages of the HTML application?
Each correct answer represents a complete solution. Choose all that apply.
A. It provides password protection for a Web page or directory
B. It can be accessed by more visitors.
C. It provides faster loading.
D. It is easier to update and maintain the site.
E. It protects the source or images of a HTML Web page.
F. It puts less load on the server.
Answer: B,C,D,F

GIAC questions   GSSP-JaVa   GSSP-JaVa study guide   GSSP-JaVa

NO.5 Which of the following statements correctly describe the features of the singleton pattern?
Each correct answer represents a complete solution. Choose all that apply.
A. Singletons are used to control object creation by limiting the number to one but allowing the flexibility to
create more objects if the situation changes.
B. Singletons can only be stateless, providing utility functions that need no more information than their
parameters.
C. A singleton class may disappear if no object holds a reference to the Singleton object, and it will be
reloaded later when the singleton is needed again.
D. The behavior of a singleton can be obtained by static fields and methods such as
java.lang.Math.sin(double).
Answer: A,C,D

GIAC exam   GSSP-JaVa   GSSP-JaVa

NO.6 Which of the following statements about a JAR file are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It cannot be accessed through a class path, nor they can be used by java and javac.
B. It is used to compress and archive data.
C. It can be moved from one computer to another.
D. It is created by using the jar command.
Answer: B,C,D

GIAC practice questions   GSSP-JaVa   GSSP-JaVa   GSSP-JaVa exam simulations

NO.7 Which of the following statements about programmatic security are true?
Each correct answer represents a complete solution. Choose all that apply.
A. The bean provider is responsible for writing code for programmatic security.
B. It is also called as instance level security.
C. It is implemented using methods of the EJBContext interface.
D. It is implemented using the methods of the UserTransaction interface.
Answer: A,B,C

GIAC   GSSP-JaVa certification training   GSSP-JaVa braindump

NO.8 Which of the following statements are true?
Each correct answer represents a complete solution. Choose all that apply.
A. An inner class cannot be defined as private.
B. An inner class cannot be defined as protected.
C. An inner class can be defined as private.
D. An inner class can extend another class.
Answer: C,D

GIAC   GSSP-JaVa   GSSP-JaVa dumps   GSSP-JaVa practice test

NO.9 Which of the following classes is an engine class that provides an opaque representation of
cryptographic parameters?
A. DSAPublicKeySpec
B. AlgorithmParameterGenerator
C. DSAParameterSpec
D. AlgorithmParameters
Answer: D

GIAC   GSSP-JaVa questions   GSSP-JaVa   GSSP-JaVa test   GSSP-JaVa

NO.10 You work as a programmer for PassGuide.Inc. You have a session object named session1 with an
attribute named Attribute1, and an HttpSessionBindingEvent object binding1 bound to session1.
Which of the following will be used to retrieve Attribute1?
Each correct answer represents a complete solution. Choose all that apply.
A. Object obj=binding1.getSession().getAttribute("Attribute1");
B. Object obj=binding1.getAttribute("Attribute1");
C. Long MyAttribute=session1.getAttribute("Attribute1");
D. String str1=session1.getAttribute("Attribute1");
E. Object obj=session1.getAttribute("Attribute1");
Answer: A,E

GIAC   Braindumps GSSP-JaVa   GSSP-JaVa dumps   GSSP-JaVa

NO.11 You work as a Software Developer for UcTech Inc. You create a session using the HttpSession
interface. You want the attributes to be informed when the session is moved from one JVM to another and
also when an attribute is added or removed from the session. Which of the following interfaces can you
use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
A. HttpSessionBindingListener
B. HttpSessionListener
C. HttpSessionActivationListener
D. HttpSessionAttributeListener
Answer: C,D

GIAC pdf   GSSP-JaVa exam dumps   GSSP-JaVa exam dumps   GSSP-JaVa original questions   GSSP-JaVa exam simulations   GSSP-JaVa braindump

NO.12 You have written the following code snippet.
1. public class Read {
2. protected int ReadText(int x) { return 0; }
3. }
4. class Text extends Read {
5. /*insert code here*/
6. }
Which of the following methods, inserted independently at line 5, will compile?
Each correct answer represents a complete solution. Choose all that apply.
A. private int ReadText(long x) { return 0; }
B. protected long ReadText(int x, int y) { return 0; }
C. protected long ReadText(long x) { return 0; }
D. protected int ReadText(long x) { return 0; }
E. private int ReadText(int x) { return 0; }
F. public int ReadText(int x) { return 0; }
G. protected long ReadText(int x) { return 0; }
Answer: A,B,C,D,F

GIAC questions   GSSP-JaVa   GSSP-JaVa   GSSP-JaVa exam simulations   GSSP-JaVa

NO.13 John works as a Programmer for Technostar Inc. He writes the following code using Java.
1. class WrapperClass{
2. public static void main(String[] argv){
3. String str2 = Double.toString(12);
4. String str1 = Double.toHexString(12);
5. System.out.println(str1+str2);
6. }
7. }
What will happen when John attempts to compile and execute the code?
A. It will not compile because the Double class does not contain the toHexString() method.
B. It will compile and execute successfully and will display 8p312 as the output.
C. It will compile and execute successfully and will display 0x1.8p312.0 as the output.
D. It will not compile because the Double class does not contain the toString() method.
Answer: C

GIAC   GSSP-JaVa original questions   GSSP-JaVa   GSSP-JaVa

NO.14 Mark works as a Programmer for InfoTech Inc. He develops a deployment descriptor code that contains
three valid
<security-constraint> elements.
All of them constraining a Web resource Res1, the
<auth-constraint> sub-element of the <security-constraint>
elements are as follows.
<auth-constraint>Admin</auth-constraint>
<auth-constraint>Manager</auth-constraint>
<auth-constraint/>
Which of the following can access the resource Res1?
A. Only Manager can access the resource.
B. No one can access the resource.
C. Everyone can access the resource.
D. Only Admin can access the resource.
Answer: B

GIAC   GSSP-JaVa test   GSSP-JaVa exam   GSSP-JaVa   GSSP-JaVa

NO.15 Which of the following deployment descriptor elements must contain the <transport-guarantee>
element as its mandatory sub-element?
A. <user-data-constraint>
B. <web-resource-collection>
C. <auth-constraint>
D. <login-config>
Answer: A

GIAC test questions   GSSP-JaVa   GSSP-JaVa dumps   GSSP-JaVa

NO.16 Mark works as a Programmer for InfoTech Inc. He develops the following deployment descriptor code.
<web-app . . . .
>
<display-name>A Secure Application</display-name><servlet>
..
.
<security-role-ref
>
<role-name>Manager</role-name>
<role-link>Admin</role-link>
</security-role-ref>
</servlet>
<security-role>
<role-name>Programmer</role-name>
</security-role>
<security-role>
<role-name>Admin</role-name>
</security-role>
<security-role>
<role-name>Employee</role-name>
</security-role>
</web-app>
Which of the following is a valid isUserInRole() method call that can be made if request is the
HttpServletRequest request?
A. request.isUserInRole("Programmer");
B. request.isUserInRole("Manager");
C. request.isUserInRole("Admin");
D. request.isUserInRole("Employee");
Answer: B

GIAC   GSSP-JaVa braindump   GSSP-JaVa   GSSP-JaVa test answers

NO.17 Which of the following methods of the EJBContext interface can be called by both the BMT and CMT
beans?
Each correct answer represents a complete solution. Choose all that apply.
A. getCallerPrincipal()
B. getRollbackOnly()
C. getUserTransaction()
D. isCallerInRole()
Answer: A,D

GIAC   GSSP-JaVa braindump   GSSP-JaVa   GSSP-JaVa answers real questions   GSSP-JaVa

NO.18 Mark writes a class Practice.java. This class needs to access the com.bar.Test class that is stored in
the Test.jar file in the directory /practice. How would you compile your code?
A. javac -classpath /practice/Test.jar Practice.java
B. javac -classpath /practice/ Practice.java
C. javac -classpath /practice/Test.jar/com/bar Practice.java
D. javac -classpath /practice Practice.java
Answer: A

GIAC certification training   GSSP-JaVa   GSSP-JaVa   GSSP-JaVa practice questions

NO.19 Given a code of a class named PrintString that prints a string.
1. public class PrintString{
2. public static void main(String args[]){
3. /*insert code here */
4. /* insert code here */
5. System.out.println(str);
6. }
7. }
Which of the following code fragments can be inserted in the class PrintString to print the output
"4247"?
Each correct answer represents a complete solution. Choose all that apply.
A. StringBuilder str= new StringBuilder("123456789");
str.delete(0,3).replace(1,3,"24").delete(4,6);
B. StringBuffer str= new StringBuffer("123456789");
str.delete(0,3).replace(1,3,"24").delete(4,6);
C. StringBuffer str=new StringBuffer("123456789");
str.substring(3,6).delete(1,2).insert(1,"24");
D. StringBuilder str= new StringBuilder("123456789");
str.deleteCharAt(6).replace(1,3,"24").delete(0,3);
E. String str="123456789";
str=(str-"123").replace(1,3,"24")-"89";
Answer: A,B

GIAC   GSSP-JaVa exam simulations   GSSP-JaVa   GSSP-JaVa pdf   GSSP-JaVa study guide

NO.20 Which of the following statements is true?
A. All UTF characters are eight bits long.
B. All UTF characters are all sixteen bits long.
C. All UTF characters are twenty four bits long.
D. All bytecode characters are sixteen bits long.
E. All unicode characters are sixteen bits long.
Answer: E

GIAC   GSSP-JaVa test   GSSP-JaVa Bootcamp   GSSP-JaVa   GSSP-JaVa   Braindumps GSSP-JaVa

DumpLeader offer the latest E20-891 exam material and high-quality 000-455 pdf questions & answers. Our HP2-B101 VCE testing engine and JN0-730 study guide can help you pass the real exam. High-quality 000-588 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.dumpleader.com/GSSP-JaVa_exam.html