← Back to exam page

GCFW – GIAC Certified Firewall Analyst

Loading demo links...

Showing 7–9 of 15 questions

Question 7 (Volume B)

You run the tcpdump command line utility and get a report produced by tcpdump. What information does this report include?

Each correct answer represents a complete solution. Choose three.

Select all that apply, then click Submit answer.

  • ○

    Packets dropped by kernel

  • ○

    Packets discarded

  • ○

    Packets captured

  • ○

    Packets received by filter


Question 8 (Volume B)

You are the Administrator for a corporate network. You are concerned about denial of service attacks.

Which of the following would be most helpful against Denial of Service (DOS) attacks?

Select an option, then click Submit answer.

  • ○

    Stateful Packet Inspection (SPI) firewall

  • ○

    Packet filtering firewall

  • ○

    Network surveys.

  • ○

    Honey pot


Question 9 (Volume B)

Sam works as a Security Manager for GenTech Inc. He has been assigned a project to detect reconnoitering activities. For this purpose, he has deployed a system in the network that attractsthe attention of an attacker. Which of the following rulebases will he use to accomplish the task?

Select an option, then click Submit answer.

  • ○

    Network Honeypot rulebase

  • ○

    Exempt rulebase

  • ○

    Backdoor rulebase

  • ○

    SYN Protector rulebase