GFACT CERTIFICATION EXAM 2026 UPDATE
QUESTIONS AND CORRECT VERIFIED ANSWERS
ALREADY GRADED A+ (BRAND NEW VISION)
What is Phishing?
A) An email that encourages people to click on malicious links or download malicious
files
B) Where you send out emails to attackers in hopes one clicks on it to report to local
police
C) A great outdoor sport
D) None of the above - ANS-An email that encourages people to click on malicious
links or download malicious files
What is Spear Phishing?
A) A phishing attack but you have a specific target in mind for the attack
B) Where you go phishing but with a spear instead of a normal bait and hook
C) Where you target a specific attacker with an email or file in hopes they tag it
D) None of the above - ANS-A phishing attack but you have a specific target in
mind for the attack
Where do phishing attacks normally strike the most? - ANS-A legal dept, HR, and the
accounting dept
What is a word Marco? - ANS-A word doc that can host malware
What is a Drive By Download attack?
A) Where the attacker compromises a site that their target visits often and installs
malware
B) Where the attacker takes over a session in progress from a user
C) Where the attacker drives by the user's house and downloads their files off their local
internet
D) None of the above - ANS-Where the attacker compromises a site that their
target visits often and installs malware
What is a Credential Harvesting Attack?
A) An attack that relies on an attacker cloning a site and hosting it to have a user
logging into and stealing their credentials
,B) Where an attacker uses social engineering to view a person's password and
username
C) Where the attacker collects and sells usernames on the Dark Web
D) None of the Above - ANS-An attack that relies on an attacker cloning a site and
hosting it to have a user logging into and stealing their credentials
What is "CEO Fraud"? How does it work? - ANS-Posing as a figure higher up in
order to get an employee to perform wire transfers via electronic communication
What is Privilege Escalation?
A) Where you gain the highest level of access within a system
B) Where you gain a higher privilege in life
C) Where you escalate privilege of a user to meet their needs for work
D) None of the above - ANS-Where you gain the highest level of access within a
system
What are some of the ways to perform privilege escalation?
A) Exploiting Services
B) Exploiting the Kernel
C) SUID Files
D) All of the above - ANS-All of the above
What is a Wild Card injection?
A) Where you take advantage of a code but supplementing Wildcards within code
B) Where you use wild cards to help run the command in question
C) Where you use a parameter to run code in a command prompt
D) None of the above - ANS-Where you take advantage of a code but
supplementing wildcards within the code
What is the difference between "sudo" and "su"?
A) There is no difference
B) Sudo is allowed by the admin to run a command while su is to become the admin
C) Su is allowed by the admin to run a command while sudo is to become the admin
D) Sudo is more used in Linux while su is a Kali Linux command - ANS-Sudo is
allowed by the admin to run a command while su is to become the admin
What is the highest level of privileges on a window machine?
A) Admin
B) User
C) SYSTEM
D) Root - ANS-SYSTEM
, What is considered the easiest way to bypass UAC? (User Access Control)
A) To ask the administrator for the permissions
B) To Privilege escalate your user account
C) To become the SYSTEM User
D) None of the above - ANS-To ask the administrator for the permissions
Which packet type is used when a graceful TCP Teardown fails?
A) FIN
B) RST
C)EXIT
D) ACK/FIN - ANS-RST
Which of the following is a likely source of logs for HTTP network traffic data?
A) Layer 2 switch
B)Firewall
C)DNS Server
D) Active Directory Server - ANS-Firewall
Which of the following is a Windows Database of settings for both the operating system
and applications?
A) Group Policy
B) User Access Control
C) PowerShell
D)Registry - ANS-Registry
A Red Team would use the following command for which purposes?
# nmap -vv -sS -p- 10.10.1.1
A) Identifying open ports that could be used to compromise a host
B) Determining updates needed for the host's asset inventory record
C) Identifying unauthorized open ports to disable on the host
D) Determining version information for services running on the host - ANS-Identifying
open ports that could be used to compromise a host
What is the software or firmware platform that hosts a virtual machine called?
A) Guest System
B) Hypervisor
C) Container
D) Operating System - ANS-Hypervisor
QUESTIONS AND CORRECT VERIFIED ANSWERS
ALREADY GRADED A+ (BRAND NEW VISION)
What is Phishing?
A) An email that encourages people to click on malicious links or download malicious
files
B) Where you send out emails to attackers in hopes one clicks on it to report to local
police
C) A great outdoor sport
D) None of the above - ANS-An email that encourages people to click on malicious
links or download malicious files
What is Spear Phishing?
A) A phishing attack but you have a specific target in mind for the attack
B) Where you go phishing but with a spear instead of a normal bait and hook
C) Where you target a specific attacker with an email or file in hopes they tag it
D) None of the above - ANS-A phishing attack but you have a specific target in
mind for the attack
Where do phishing attacks normally strike the most? - ANS-A legal dept, HR, and the
accounting dept
What is a word Marco? - ANS-A word doc that can host malware
What is a Drive By Download attack?
A) Where the attacker compromises a site that their target visits often and installs
malware
B) Where the attacker takes over a session in progress from a user
C) Where the attacker drives by the user's house and downloads their files off their local
internet
D) None of the above - ANS-Where the attacker compromises a site that their
target visits often and installs malware
What is a Credential Harvesting Attack?
A) An attack that relies on an attacker cloning a site and hosting it to have a user
logging into and stealing their credentials
,B) Where an attacker uses social engineering to view a person's password and
username
C) Where the attacker collects and sells usernames on the Dark Web
D) None of the Above - ANS-An attack that relies on an attacker cloning a site and
hosting it to have a user logging into and stealing their credentials
What is "CEO Fraud"? How does it work? - ANS-Posing as a figure higher up in
order to get an employee to perform wire transfers via electronic communication
What is Privilege Escalation?
A) Where you gain the highest level of access within a system
B) Where you gain a higher privilege in life
C) Where you escalate privilege of a user to meet their needs for work
D) None of the above - ANS-Where you gain the highest level of access within a
system
What are some of the ways to perform privilege escalation?
A) Exploiting Services
B) Exploiting the Kernel
C) SUID Files
D) All of the above - ANS-All of the above
What is a Wild Card injection?
A) Where you take advantage of a code but supplementing Wildcards within code
B) Where you use wild cards to help run the command in question
C) Where you use a parameter to run code in a command prompt
D) None of the above - ANS-Where you take advantage of a code but
supplementing wildcards within the code
What is the difference between "sudo" and "su"?
A) There is no difference
B) Sudo is allowed by the admin to run a command while su is to become the admin
C) Su is allowed by the admin to run a command while sudo is to become the admin
D) Sudo is more used in Linux while su is a Kali Linux command - ANS-Sudo is
allowed by the admin to run a command while su is to become the admin
What is the highest level of privileges on a window machine?
A) Admin
B) User
C) SYSTEM
D) Root - ANS-SYSTEM
, What is considered the easiest way to bypass UAC? (User Access Control)
A) To ask the administrator for the permissions
B) To Privilege escalate your user account
C) To become the SYSTEM User
D) None of the above - ANS-To ask the administrator for the permissions
Which packet type is used when a graceful TCP Teardown fails?
A) FIN
B) RST
C)EXIT
D) ACK/FIN - ANS-RST
Which of the following is a likely source of logs for HTTP network traffic data?
A) Layer 2 switch
B)Firewall
C)DNS Server
D) Active Directory Server - ANS-Firewall
Which of the following is a Windows Database of settings for both the operating system
and applications?
A) Group Policy
B) User Access Control
C) PowerShell
D)Registry - ANS-Registry
A Red Team would use the following command for which purposes?
# nmap -vv -sS -p- 10.10.1.1
A) Identifying open ports that could be used to compromise a host
B) Determining updates needed for the host's asset inventory record
C) Identifying unauthorized open ports to disable on the host
D) Determining version information for services running on the host - ANS-Identifying
open ports that could be used to compromise a host
What is the software or firmware platform that hosts a virtual machine called?
A) Guest System
B) Hypervisor
C) Container
D) Operating System - ANS-Hypervisor
