最新のGNFA問題集で試験を準備する

GIAC GNFA 試験概要:

GIAC GNFA 試験シラバストピック:

GIAC Network Forensic Analyst (GNFA) 認定 GNFA 試験問題：

問題 #1

Which open-source tools are commonly used for network security proxying?
(Select two.)
Response:

A. Wireshark
B. OpenVPN
C. Squid
D. Privoxy

問題 #2

A security analyst is reviewing NetFlow data and notices a sudden increase in outbound connections to an unfamiliar IP address. The majority of the connections originate from a single internal workstation. What is the most likely cause?
Response:

A. Normal traffic fluctuation
B. A user downloading a large file
C. A botnet infection exfiltrating data
D. An error in NetFlow collection

問題 #3

Your company is implementing a Zero Trust network model. Which approach would best align with Zero Trust principles?
Response:

A. Requiring continuous authentication and strict access controls
B. Granting access based on IP address
C. Using only perimeter-based firewalls
D. Allowing unrestricted lateral movement within the network

問題 #4

An administrator notices unusual traffic patterns where a single workstation is attempting to connect to multiple internal servers within minutes. What should be the first step in investigating this activity?
Response:

A. Block all outbound connections from the workstation
B. Analyze the NetFlow records and IDS alerts
C. Disable the workstation immediately
D. Review network segmentation policies

問題 #5

What is a key advantage of using a proxy-based firewall compared to a packet-filtering firewall?
Response:

A. Proxy-based firewalls cannot block specific content types
B. Packet-filtering firewalls work at the application layer
C. Proxy-based firewalls inspect entire application-layer data
D. Packet-filtering firewalls are more secure

解説：