GIAC Certified Firewall Analyst Sample Questions:

1. You are tasked with configuring your routers with a minimum security standard that includes the following:
l A local Username and Password configured on the router
l A strong privilege mode password
l Encryption of user passwords
l Configuring telnet and ssh to authenticate against the router user database
Choose the configuration that best meets these requirements.

A) RouterA(config)#service password-encryption RouterA(config)#username cisco password PaS$w0Rd RouterA(config)#enable password n56e&$te RouterA(config)#line vty 0 4 RouterA(config-line)#login local
B) RouterA(config)#service password-encryption RouterA(config)#username cisco password PaS$w0Rd RouterA(config)#enable secret n56e&$te RouterA(config)#line vty 0 4 RouterA(config-line)#login local
C) RouterA(config)#service enable-password-encryption RouterA(config)#username cisco password PaS$w0Rd RouterA(config)#enable secret n56e&$te RouterA(config)#line vty 0 4 RouterA(config-line)#login user
D) RouterA(config)#service password-encryption RouterA(config)#username cisco password PaS$w0Rd RouterA(config)#enable secret n56e&$te RouterA(config)#line vty 0 4 RouterA(config-line)#login

2. You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. A Cisco switch is configured on the network. You change the original host name of the switch through the hostname command. The prompt displays the changed host name. After some time, power of the switch went off due to some reason. When power restored, you find that the prompt is displaying the old host name. What is the most likely cause?

A) The running-config file got corrupted.
B) The startup-config file got corrupted.
C) Host name cannot be changed permanently once switch is configured.
D) The changes were saved in running-config file.

3. Which of the following is a valid IPv6 address?

A) 45CF. 6D53: 12CD. AFC7: E654: BB32: 54AT: FACE
B) 45CF. 6D53: 12C AFC7: E654: BB32: 543C. FACE
C) 45CF. 6D53: 12KP: AFC7: E654: BB32: 543C. FACE
D) 123.111.243.123

4. Which of the following programs can be used to detect stealth port scans performed by a malicious hacker?
Each correct answer represents a complete solution. Choose all that apply.

A) libnids
B) nmap
C) scanlogd
D) portsentry

5. This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. The main features of these tools are as follows: l It displays the signal strength of a wireless network, MAC address, SSID, channel details, etc. l It is commonly used for the following purposes:
a.War driving
b.Detecting unauthorized access points
c.Detecting causes of interference on a WLAN
d.WEP ICV error tracking
e.Making Graphs and Alarms on 802.11 Data, including Signal Strength This tool is known as __________.

A) Kismet
B) Absinthe
C) NetStumbler
D) THC-Scan

Solutions: