Skip to content
Past Exams

2023 GFACT Computer Science Certification Exam With Answers (162 Solved Questions)

2023 GFACT Computer Science Certification Exam With Answers provides an insight into real exam scenarios with past test papers.

Preview 9 of 27 pages

See the first 9 pages exactly as they appear in the document.

  1. Page 1
    Read page 1 as text

    GFACT Certification Exam 2023 Questions and Answers Correct What does it mean when a computer program is "multi-threaded"? A) It calls multiple external libraries B) It has multiple serial number for different users C) It can run multiple chunks of code concurrently D) It has multiple functions defined in the program Answer- It can run multiple chunks of code concurrently Which of the following is a common result of a reflected cross-site scripting attack? A)Tricking a user into making an authenticated transaction B)Sending a website user's session cookie to an attacker C) Embedding the attacker's malware in web application source code D) Stealing password hashes from a website's back end database Answer- Sending a website user's session cookie to an attacker What tool can be used to fingerprint the operating system of a host? A)netstat B)dig C)nslookup D)nmap Answer- Nmap What type of vulnerability is illustrated where there is code in the web page? A)File Inclusion B) Clickjacking C)Cross-Site Scripting D) SQL injection Answer- File Inclusion An alert indicates that a compromised host was used by an attacker to run the command below. What was the attacker attempting to do? $ nmap -sS 192.168.10.0/24 A)Map a network drive to a remote host B)Identify services running on network hosts C)Execute a script on a remote host D)Send Spoofed packets to network hosts Answer- Identify services running on network hosts

  2. Page 2
  3. Page 3
    Read page 3 as text

    What type of artifact can a blue team member use to identify the name that is associated to the file? A)Metadata B)Windows security logs C)Prefetch D)File Ownership Answer- Metadata What is HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run considered to be? A)Domain Name B)Log File Path C) Registry Key D) Yo Mama's Number Answer- A Registry Key If a user agent is used, where would it be found in the HTTP Protocol? A)In the response header B)In the response body C)Delimited by an h1 tag D) In a GET Request Answer- In a GET Request What benefit does moving from local logging to using a log server provide organizations? A) Enables the use of network intrusion detection systems (NIDS) B) Harder for attackers to overwrite logs C) Attackers will have to pivot through an extra server to infiltrate the network D)Less complex logging infrastructure Answer- Harder for attackers to overwrite logs What is the only way to mitigate an integer overflow/underflow? A) Takin the absolute value of negative results prior to running the equation B) Checking that the result of any change to a signed integer falls within an allowed range C) Randomizing salt values prior to hashing user content D) Sanitizing user input to block special characters from being entered Answer- Checking that the result of any change to a signed integer falls within an allowed range Which Variable name will cause Python to produce an error? A)2nd_phone_number B)LASTNAM_ C)streetAddress

  4. Page 4
    Read page 4 as text

    D)_firstname Answer- 2nd_phone_number What is the following command attempting to accomplish in Kali Linux? dnsmap myfakedomain.local -w /usr/share/wordlists/dnsmap.txt A)Search for subdomains based upon the wordlist provided B) Check for users based on the wordlist provided C)Run checks on the applications based on the wordlist provided D)Call yo mama Answer- Search for subdomains based upon the wordlist provided How do you remove data from a Solid State Drive? A) Destroy it B) Place Magnets upon it C) Snap it D) Yo mama sit on it Answer- Destroy it Where are the wordlists located in Kali? A)/var/opt/wordlists B)/etc/default/wordlists C)/etc/security/wordlists D)/var/adm/wordlists E)/usr/share/wordlists Answer- /usr/share/wordlists What is the outcome of the command below? ps aux | grep -i sshd | grep root A) Enabling logging for all root logins for the ssh service B)Terminating the secure shell service C)List of secure shell processes running under the root user D)Starting up the ssh service as the root user Answer- List of secure shell processes running under the root user When would a security analyst create a "TCP Socket" in a Python Program? A) When scanning the host computer for malicious software B) When creating a script to run against a network service C) When collecting information about the host computer's hardware D) When the host is running network services in the background during Python program execution Answer- When creating a script to run against a network service What is used to access the address of a variable in the C Programming Language?

  5. Page 5
    Read page 5 as text

    A) &giac B)*giac C) {giac} D) 8=giac=D Answer- &giac What does the home folder contain? A) User Directories for every user on the system excluding the root user B)Yo Mama C)All of the directories on a system D) Only the Guest directories on a system Answer- User Directories for every user on the system excluding the root user What does the Local Users Management Console do? A)Create users within Windows B) Create groups within Windows C) Yo Mama (insert giggle) D) Change your password Answer- Create users within Windows, create groups within Windows, Change your password What kind of storage system are in USB's? A)exFAT B)FAT32 C)NTFS D)HFS Plus Answer- exFAT When a new File is created what permissions are inherited? A) Parent Folder B) You set them when you open the folder C) Root Permissions D) Default File Permissions Answer- Parent Folder What command will generate a makefile that is tuned to the system that it is installed to? A)source makefile.am B)source configure.in C) ./install-sh D) ./configure Answer- ./configure What might a captcha do to a scanner? A) Redirect the scanner to the same page in a loop

  6. Page 6
    Read page 6 as text

    B) Proceed to the website as per normal C) Shut the scanner down D) Lock you out of the website Answer- Redirect the scanner to the same page in a loop The user starts Microsoft Word and clicks File | Open. What does word do as a result? A) Generates a software interrupt B) Loads the Kernal C) Opens the appropriate output HID D) Yo Mama Answer- Generates a software interrupt What attack is being attempted by the command shown below? root@kali: ~/target# dirb https:www.sans.org /usr/share/wordlists/dirb/small.txt A) Dictionary attack against known user accounts on a website B) Dictionary attack against unknown user accounts on a website C) Search for valid accounts using a wordlist against a website D) Search for directories not link to public areas of a website Answer- Search for directories not linked to public areas of a website Where is the data from the GDB output shown in the image stored on the host? A) Master Boot Record B) BIOS C) CPU D) Random Access Memory Answer- CPU What command is used to generate lists of images that are stored locally and provides arguments for handling them? A) docker images B) docker pull C) docker run D) vi Dockerfile E) docker ps Answer- docker images What is the significance of the items listed in pwbdbg's backtrace? A) They are all of the functions called up to this point B) They are functions currently loaded in the CPU cache C) It is a list of functions that are about to be called D) They are pointed to by the _GLOBAL_OFFSET_TABLE_ Answer- They are all of the functions called up to this point

  7. Page 7
    Read page 7 as text

    Which packet header field characteristic is a strong indicator of data exfiltration? A) TCP Packets in a session with varying message data sizes B) ICMP echo requests with varying data field sizes C) UDP packets with invalid checksums D) Yo mama Answer- ICMP echo requests with varying data field sizes During which stage of incident response should the adequacy of policies be examined? A) Lessons learned B) Eradication C) Recovery Answer- Lessons Learned What is a way to check the symmetric or asymmetric encryption? A) The Website's SSL certificate B) The Public Key C) The Private Key D) Yo Mama Answer- The Website's SSL certificate Which of the follow C:\Windows\System32 subdirectories may provide stored credentials from unattended installs? A) Restore B) Boot C) Sysprep D) Dism Answer- Sysprep Which of the following is one of the four User Account Control (UAC) settings on a Windows system? A) Access this compute from the network B) Full control C) Run as Administrator D) Always Notify Answer- Always notify What HTTP protocol request asks a web server to retrieve metadata without the data? A) PUT B) HEAD C) GET D) POST Answer- HEAD What command will change your directory to the current home folder? A) cd ~

  8. Page 8
    Read page 8 as text

    B) cd .. C) cd // D) cd Yo Mama Answer- cd ~ What does the home folder contain? A) The user directories for every user other than the root B) All directories under the Windows machine C) The specific user's directory D) Yo Mama Answer- The user directories for every user other than the root Examine the list from a Python program below. Which statement will display Oregon? PNW_states = [ 'Washington' , 'Oregon' , 'Idaho' , 'Montana' , 'Wyoming' ] A) print(PNW_states[2]) B) print(PNW_states(2)) C) print(PNW_states[1]) D) print(PNW_states[0][2]) Answer- print(PNW_states[1]) If you run the command "Python" on a Linux system where it is installed, what will happen? A)Python will list all currently installed libraries and modules B) The computer will run Python in the background upon reboot C) The operating system will prompt you for a Python code file to open D) An interactive console will open for writing simple Python code Answer- An interactive console will open for writing simple Python code A Web application is configured to validate a unique token value for each submitted user request. What threat is being mitigated? A) Local file inclusion B) Cross site request forgery C) Drive-by downloads D) Command injection Answer- Cross site request forgery In the Python programming language, cast_list, shown below, is which of the following? A) Dictionary B) Tuple C) Array D) List Answer- Dictionary Which of the following is the name given to the behaviors that objects have in object oriented programming?

  9. Page 9
    Read page 9 as text

    A) Methods B) Functions C) Modules D) Procedures Answer- Methods Which of the following services would be a target for privilege escalation? 1: Microsoft Office Click-to-Run Service "C:\Program Files\Common Files\ Microsoft Shared\ClickToRun\OfficeClickToRun.exe" 2: CodeMeter Runtime Server C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe 3: TP AutoConnect Service "C:\Program Files\VMWare\VMware Tools\TPAutoConnsvc.exe" Manual A) Microsoft Office Click To Run Service B) CodeMeter Runtime Server C) TP AutoConnect Service D) Yo Mama Answer- CodeMeter Runtime Server In both the TCP handshake and teardown, the ACK number increases by one. How much data is being sent? A) Zero bytes B) Two bytes C) One byte D) Three bytes Answer- Zero bytes What can an Apache server administrator do to prevent version information from leaking? A) Run Apache as a non-root user B) Enable HTTPS C) Set permission on /var/www/html to 700 D) Disable the banner Answer- Disable the banner When debugging a program with pwngdb what is the significance of the s in x/s 0x80484ef command shown in the command below: pwndbg> x/s 0x80484ef 0x80484ef <main+4>: A) Tells the command to step into the address 0x80484ef B) Identifies the output format for data at address 0x80484ef C) Tells the command to stop after the address 0x80484ef

18 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Information Technology study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.