GIAC GCFW Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Firewall Technologies and Architecture | - Stateful and stateless firewall concepts - Firewall deployment models (perimeter, distributed, host-based) - Next-generation firewall capabilities |
| Traffic Analysis and Troubleshooting | - Using logs for forensic analysis - Diagnosing connectivity and policy issues - Packet capture and inspection techniques |
| Network Address Translation and VPNs | - Remote access and site-to-site VPN configuration - NAT types and use cases - IPSec fundamentals |
| Packet Filtering and Rule Management | - Access control lists and rule evaluation logic - Logging and audit configuration - Rule ordering, optimization, and cleanup |
| Intrusion Detection and Prevention Integration | - Threat detection and mitigation strategies - IDS vs IPS functionality with firewalls |
GIAC Certified Firewall Analyst Sample Questions:
Question #1
Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?
A. Firewall
B. Packet filtering
C. Demilitarized zone (DMZ)
D. Intrusion detection system (IDS)
Question #2
Which of the following features does the Nmap utility have?
Each correct answer represents a complete solution. Choose all that apply.
A. It identifies services running on systems in a specified range of IP addresses using scanning and sweeping feature.
B. It uses operating system fingerprinting technology to identify the operating system running on a target system.
C. It is a location where an organization can easily view the event of a disaster, such as fire, flood, terrorist threat, or other disruptive events.
D. It has a stealth approach to scanning and sweeping.
Question #3
Choose the best explanation for the resulting error when entering the command below.
A. The port number given does not correspond with the proper transport protocol.
B. The wildcard mask is not provided for the source and destination addresses.
C. The command is attempting to create a standard access list with extended access list param eters.
D. The ACL commands should be entered from the (config-router) configuration mode.
Question #4
Which of the following utilities provides an efficient way to give specific users permission to use specific system commands at the root level of a Linux operating system?
A. Snort
B. SUDO
C. SSH
D. Apache
Question #5
Windump is a Windows port of the famous TCPDump packet sniffer available on a variety of platforms. In order to use this tool on the Windows platform a user must install a packet capture library.
What is the name of this library?
A. PCAP
B. SysPCap
C. libpcap
D. WinPCap
Solutions:
| Question #1 Correct Answer: D | Question #2 Correct Answer: A,B,D | Question #3 Correct Answer: C | Question #4 Correct Answer: B | Question #5 Correct Answer: D |
920 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
