GFACT EXAM, GFACT CERTIFICATION
EXAM 2025 WITH ACTUAL CORRECT
QUESTIONS AND VERIFIED DETAILED
ANSWERS |FREQUENTLY TESTED
QUESTIONS AND SOLUTIONS |ALREADY
GRADED A+|LATEST
UPDATE|GUARANTEED PASS
If malicious software (malware) infects a computer, at which level does it require the most effort
to detect and remove?
A) Kernel
B) System libraries
C) Application code
D) Local user file
Kernel
When debugging an executable with pwndbg, what happens when a function named
function_A is stepped over, instead of into?
A) The debugger executes the code within function_A and moves to the next instruction
B) The debugger skips over the code within function_A and moves to the next instruction
C)The debugger will stop at each line of code within function_A
The debugger executes the code within function_A and moves to the next instruction
In Python, which symbol indicates the text after it is a comment?
A) #
B) ;
1|Page
,C)!
D)--
#
What is encryption?
Encryption is the process of converting data from one form to another
What does encryption provide?
A)Authentication
B)Integraty
C)Non-repudiation
D)All of the above
All of the above
In order to encrypt data, what 3 things are necessary?
The original unencrypted message, the Encryption key, and the encryption algorithm
What 3 things do you need to decrypt data?
The encrypted data, The encryption key for decryption, and the encryption algorithm
What makes an encryption a strong encryption?
A) An encryption where the mathematical calculations are open to the public
B) An encryption that was bought from a 3rd party
C) An encryption with no mathematical calculations
D) A decrypted encryption
An encryption where the mathematical calculations are open to the public
What are the 2 ways to break encryption?
Find a flaw in the encryption and to guess the encryption key that was used
What is the difference between encryption and encoding?
A)An encryption has an encryption key while encoding does not
B) Encoding involves multiple encryption keys while encryption keys only involve one
C) There is no difference between them
D)They are the same thing just different names
2|Page
,An encryption has an encryption key while encoding does not
What is Symmetric Encryption?
A) An encryption that uses the same key to decrypt and encrypt a message
B) An encryption that requires both parties to be the same
C) An encryption that requires two different keys to encrypt and decrypt
An encryption that uses the key to decrypt and encrypt a message
What is Asymmetric encryption?
A) A form of encryption that uses the same key to decrypt and encrypt a message
B) A form of encryption that uses a public and private key to encrypt a message
C) An encryption that requires both parties to be different from one another
A form of encryption that uses a public and private key to encrypt a message
What form of encryption does HTTPS uses?
A) Asymmetric
B) Symmetric
C) Both
D) Neither
Both
What is a hashing algorithm?
A) A utility designed to create a binary or hexadecimal number that represents the uniqueness
of a data set, such as a file or entire disk
B) A form of one way encryption
C)Both A and B
D)Answer is not supplied
Both A and B
What is considered a good hashing encryption algorithm?
A) MD5
B) SHA1
C) SHA2
D)None of the above
3|Page
, SHA2
What is a command injection?
A flaw in a web application that takes advantage in how a web application process user input
What is the best way to mitigate a Command Injection?
To program the web application without a third party entity and to sanitize the user input
What is a file inclusion attack?
A result of adding resources on a page based on user input
What is the best way to mitigate a file inclusion attack?
The best way to avoid being vulnerable to this attack is to avoid dynamically adding files based
on user input
What is a Cross Site Scripting Attack?
A client side attack that targets users that are browsing the site. Typically occurs in areas of the
site where users input information
How do you mitigate a Cross Site Scripting Attack?
To sanitize the user input and to use a 3rd party library and not implement your own filter
What is an SQL injection attack?
A type of injection attack wherein the attacker exploits the web application to send
unauthorized commands to a backend database server
How do you mitigate SQL
It is to not user an insecure method of passing queries to the database
What is a Session Guessing attack?
Where an attacker guesses a Session Token and logs into a site under your information
What is the best way to mitigate a Session Guessing attack?
To use truly random session tokens that expire
What is a clickjacking attack?
Where a user can be tricked into clicking on something without realizing that they did
How do you mitigate a clickjacking attack?
4|Page
EXAM 2025 WITH ACTUAL CORRECT
QUESTIONS AND VERIFIED DETAILED
ANSWERS |FREQUENTLY TESTED
QUESTIONS AND SOLUTIONS |ALREADY
GRADED A+|LATEST
UPDATE|GUARANTEED PASS
If malicious software (malware) infects a computer, at which level does it require the most effort
to detect and remove?
A) Kernel
B) System libraries
C) Application code
D) Local user file
Kernel
When debugging an executable with pwndbg, what happens when a function named
function_A is stepped over, instead of into?
A) The debugger executes the code within function_A and moves to the next instruction
B) The debugger skips over the code within function_A and moves to the next instruction
C)The debugger will stop at each line of code within function_A
The debugger executes the code within function_A and moves to the next instruction
In Python, which symbol indicates the text after it is a comment?
A) #
B) ;
1|Page
,C)!
D)--
#
What is encryption?
Encryption is the process of converting data from one form to another
What does encryption provide?
A)Authentication
B)Integraty
C)Non-repudiation
D)All of the above
All of the above
In order to encrypt data, what 3 things are necessary?
The original unencrypted message, the Encryption key, and the encryption algorithm
What 3 things do you need to decrypt data?
The encrypted data, The encryption key for decryption, and the encryption algorithm
What makes an encryption a strong encryption?
A) An encryption where the mathematical calculations are open to the public
B) An encryption that was bought from a 3rd party
C) An encryption with no mathematical calculations
D) A decrypted encryption
An encryption where the mathematical calculations are open to the public
What are the 2 ways to break encryption?
Find a flaw in the encryption and to guess the encryption key that was used
What is the difference between encryption and encoding?
A)An encryption has an encryption key while encoding does not
B) Encoding involves multiple encryption keys while encryption keys only involve one
C) There is no difference between them
D)They are the same thing just different names
2|Page
,An encryption has an encryption key while encoding does not
What is Symmetric Encryption?
A) An encryption that uses the same key to decrypt and encrypt a message
B) An encryption that requires both parties to be the same
C) An encryption that requires two different keys to encrypt and decrypt
An encryption that uses the key to decrypt and encrypt a message
What is Asymmetric encryption?
A) A form of encryption that uses the same key to decrypt and encrypt a message
B) A form of encryption that uses a public and private key to encrypt a message
C) An encryption that requires both parties to be different from one another
A form of encryption that uses a public and private key to encrypt a message
What form of encryption does HTTPS uses?
A) Asymmetric
B) Symmetric
C) Both
D) Neither
Both
What is a hashing algorithm?
A) A utility designed to create a binary or hexadecimal number that represents the uniqueness
of a data set, such as a file or entire disk
B) A form of one way encryption
C)Both A and B
D)Answer is not supplied
Both A and B
What is considered a good hashing encryption algorithm?
A) MD5
B) SHA1
C) SHA2
D)None of the above
3|Page
, SHA2
What is a command injection?
A flaw in a web application that takes advantage in how a web application process user input
What is the best way to mitigate a Command Injection?
To program the web application without a third party entity and to sanitize the user input
What is a file inclusion attack?
A result of adding resources on a page based on user input
What is the best way to mitigate a file inclusion attack?
The best way to avoid being vulnerable to this attack is to avoid dynamically adding files based
on user input
What is a Cross Site Scripting Attack?
A client side attack that targets users that are browsing the site. Typically occurs in areas of the
site where users input information
How do you mitigate a Cross Site Scripting Attack?
To sanitize the user input and to use a 3rd party library and not implement your own filter
What is an SQL injection attack?
A type of injection attack wherein the attacker exploits the web application to send
unauthorized commands to a backend database server
How do you mitigate SQL
It is to not user an insecure method of passing queries to the database
What is a Session Guessing attack?
Where an attacker guesses a Session Token and logs into a site under your information
What is the best way to mitigate a Session Guessing attack?
To use truly random session tokens that expire
What is a clickjacking attack?
Where a user can be tricked into clicking on something without realizing that they did
How do you mitigate a clickjacking attack?
4|Page
