GIAC Battlefield Forensics and Acquisition
Domain 1Objective 2
Computer Fundamentals GBFA Practice Questions (Page 5)
Part of the Foundations and Preparation domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–17 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
5concepts
Questions 21–25
- 21
A forensic examiner is analyzing network traffic captured during an incident. The examiner sees a packet with a destination IP address of 192.168.1.255. What is the most likely purpose of this packet?
Select an answer first - 22
What is the smallest unit of data in a computer?
Select an answer first - 23
A forensic examiner is investigating a network intrusion. The examiner needs to identify which device on the network is sending a high volume of traffic to an external IP address. Which networking concept is most directly used to identify the source device?
Select an answer first - 24
Which protocol is commonly used to reliably transfer files over a network?
Select an answer first - 25
A forensic examiner receives a laptop that was used to store a large database of case files. The examiner needs to acquire the data quickly, but the laptop's hard drive is nearly full and the system is slow. The examiner wants to create a bit-for-bit image of the drive. Which hardware component is most likely to be the bottleneck during the acquisition, assuming the drive is connected via USB 3.0?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GBFA” is a trademark of its owner, used for identification only.