Online Access Free GCIA Practice Test

Sasha wants to add an entry to your DNS database for your mail server. Which of the following types of resource records will she use to accomplish this?

• A.CNAME
• B.MX
• C.ANAME
• D.SOA

Which of the following firewalls keeps track of the state of network connections traveling across the network?

• A.Packet filtering firewall
• B.Stateful firewall
• C.Circuit-level firewall
• D.Application-level firewall

Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol?
Each correct answer represents a complete solution. Choose all that apply.

• A.Rhosts (rsh-style) authentication
• B.Kerberos authentication
• C.TIS authentication
• D.Password-based authentication

Which of the following algorithms is used as a default algorithm for ESP extension header in IPv6?

• A.Cipher Feedback (CFB) Mode
• B.Cipher Block Chaining (CBC) Mode
• C.Electronic Codebook (ECB) Mode
• D.Propagating Cipher Block Chaining (PCBC) Mode

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used.
He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?

• A.Block ICMP type 3 messages
• B.Block all outgoing traffic on port 53
• C.Block all outgoing traffic on port 21
• D.Block ICMP type 13 messages