GFACT CERTIFICATION EXAM WITH
ACTUAL QUESTIONS AND CORRECT
VERIFIED ANSWERS/A LREADY GRADED
A+ 100% GUARANTEED T O PASS
CONCEPTS(ALL WHAT YO U NEED)
LATEST EDITION
QUESTION 1: What does it mean when a computer
program is "multi-threaded"?
- It calls multiple external libraries
- It has multiple serial number for different users
- It can run multiple chunks of code concurrently
- It has multiple functions defined in the program
CORRECT ANSWER: It can run multiple chunks of
code concurrently
QUESTION 2: Which of the following is a common
result of a reflected cross-site scripting attack?
- Tricking a user into making an authenticated
- Sending a website user's session cookie to an attacker
transaction
- Embedding the attacker's malware in web application
- Stealing password hashes from a website's back end
source code
database
CORRECT ANSWER: Sending a website user's session
cookie to an attacker
QUESTION 3: What tool can be used to fingerprint the
operating system of a host?
- netstat
- dig
- nslookup
- nmap
CORRECT ANSWER: Nmap
QUESTION 4: What type of vulnerability is illustrated
where there is code in the web page?
- File Inclusion
- Clickjacking
- Cross-Site Scripting
- SQL injection
CORRECT ANSWER: File Inclusion
QUESTION 5: An alert indicates that a compromised
host was used by an attacker to run the command below.What was the attacker attempting to do?$ nmap -sS 192.168.10.0/24
- Map a network drive to a remote host
- Identify services running on network hosts
- Execute a script on a remote host
- Send Spoofed packets to network hosts
CORRECT ANSWER: Identify services running on
network hosts
QUESTION 6: What type of artifact can a blue team
member use to identify the name that is associated to the file?
- Metadata
- Windows security logs
- Prefetch
- File Ownership
CORRECT ANSWER: Metadata
QUESTION 7: What is
HKEY_LOCAL_MACHINE \Software\Microsoft\Windo ws\CurrentVersion\Run considered to be?
- Domain Name
- Log File Path
- Registry Key
- Yo Mama's Number
CORRECT ANSWER: A Registry Key
QUESTION 8: If a user agent is used, where would it be
found in the HTTP Protocol?
- In the response header
- In the response body
- Delimited by an h1 tag
- In a GET Request