GIAC Certified Forensic Analyst (GCFA) Free Practice Exam Questions

43 real GIAC Certified Forensic Analyst (GCFA) exam questions with answers and AI explanations. GIAC certification prep — page 3 of 5.

1. Question 23: You work as a Network Administrator for Blue Bell Inc. You want to install Windows XP Professional on your computer, which already has Windows Me installed. Yo…
2. Question 24: Mark works as a security manager for SofTech Inc. He is using a technique for monitoring what the employees are doing with corporate resources. Which of the fo…
3. Question 25: Which of the following attacks saturates network resources and disrupts services to a specific computer?
4. Question 26: Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to investigate the computer of an employee, who is suspected for cl…
5. Question 27: The MBR of a hard disk is a collection of boot records that contain disk information such as disk architecture, cluster size, and so on. The main work of the M…
6. Question 28: Which of the following methods is used by forensic investigators to acquire an image over the network in a secure manner?
7. Question 29: You company suspects an employee of sending unauthorized emails to competitors. These emails are alleged to contain confidential company data. Which of the fol…
8. Question 30: Which of the following is the correct order of loading system files into the main memory of the system, when the computer is running on Microsoft's Windows XP…
9. Question 31: An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The…
10. Question 32: Which of the following two cryptography methods are used by NTFS Encrypting File System (EFS) to encrypt the data stored on a disk on a file-by-file basis?