GIAC Certified Intrusion Analyst
Domain 2Objective 2
SiLK and Other Traffic Analysis Tools GCIA Practice Questions (Page 1)
Part of the Traffic Analysis and Tools domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~26–43 in this domain), expect 7–11 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
16concepts
Questions 1–5
- 1
Which rwfilter option would you use to select flow records that occurred within a specific time range?
Select an answer first - 2
An analyst has a pcap file from a network tap and wants to integrate the data into an existing SiLK repository for long-term analysis. Which tool should be used to convert the pcap data into SiLK flow records?
Select an answer first - 3
What is the purpose of SiLK Python bindings?
Select an answer first - 4
Which tool is primarily used for capturing packets for detailed inspection?
Select an answer first - 5
Which rwgroup option specifies the fields by which to aggregate flow records?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.