GFACT CERTIFICATION EXAM NEWEST VERSION ACTUAL
160 QUESTION AND CORRECT DETAILED VERIFIED
ANSWERS FROM VERIFIED SOURCES BY EXPERT RATED
A
GRADE.(RATIONALES) WITH PAGE
REFERENCE.CERTIFICATION GFACT TEST .
QUESTION
What is the primary purpose and functionality of the Local Users Management Console
within the Windows operating system environment?
a. Create users within Windows
b. Create groups within Windows
c. Yo Mama (insert giggle)
d. Change your password
CORRECT ANS: Create users within Windows, create groups within Windows, Change
your password
EXPERT RATIONALE
The Local Users Management Console (often accessed via the lusrmgr.msc snap-in) is a
Microsoft Management Console (MMC) tool that provides a graphical interface for
managing local user accounts and groups on a standalone Windows machine. Its core
functionalities include creating, modifying, and deleting local user accounts; creating
and managing local groups; and resetting user passwords. This tool is essential for
system administrators to control local access to a computer that is not part of a domain.
The options provided are all actions that can be performed through this console,
making the comprehensive answer the correct one.
QUESTION
What file system format is most commonly used as the default storage system for most
commercial Universal Serial Bus (USB) flash drives?
,a. exFAT
b. FAT32
c. NTFS
d. HFS Plus
CORRECT ANS: exFAT
EXPERT RATIONALE
The Extended File Allocation Table (exFAT) is a file system specifically designed for flash
drives and other removable media. It was developed by Microsoft to overcome the
limitations of FAT32, particularly the 4 GB maximum file size restriction, while
maintaining broad compatibility across different operating systems, including Windows,
macOS, and Linux. exFAT is optimized for use on flash drives due to its lightweight
structure and low overhead, making it the most common default format for modern,
high-capacity USB drives. While FAT32 is still used on smaller drives, NTFS is primarily
for internal hard drives, and HFS Plus is Apple's proprietary file system for macOS.
QUESTION
When a new file is created within a folder in a Windows operating system, from what
source does the new file inherit its default security permissions?
a. Parent Folder
b. You set them when you open the folder
c. Root Permissions
d. Default File Permissions
CORRECT ANS: Parent Folder
EXPERT RATIONALE
In the Windows NTFS file system, permissions are inherited by default. When a new file
or subfolder is created within a parent folder, it automatically inherits the security
permissions (Access Control Lists, or ACLs) of that parent container. This inheritance
model is fundamental to Windows security, simplifying administration by ensuring that
new objects automatically have the same access rules as their container. While root
permissions dictate the starting point for the drive, they are applied through the parent
folder hierarchy, and default permissions are overridden by inheritance.
,QUESTION
What command, when executed in a Linux source code directory, is responsible for
generating a Makefile that is specifically optimized and tuned to the features and
configuration of the current system?
a. source makefile.am
b. source configure.in
c. ./install-sh
d. ./configure
CORRECT ANS: ./configure
EXPERT RATIONALE
In the standard GNU build system (often referred to as Autotools), the ./configure script
is the first step in the compilation process. This script is a shell script that performs a
system-wide examination to detect the presence of libraries, header files, and compiler
characteristics. It then uses this information to generate a Makefile tailored to the
specific environment, ensuring the software will compile correctly with the available
system resources. The makefile.am and configure.in files are source files for the
Autotools themselves, not the final build instruction file, and install-sh is a helper script
for installation.
QUESTION
What is a common defensive behavior of a web application when it detects a
vulnerability scanner attempting to systematically enumerate and probe its resources?
a. Redirect the scanner to the same page in a loop
b. Proceed to the website as per normal
c. Shut the scanner down
d. Lock you out of the website
CORRECT ANS: Redirect the scanner to the same page in a loop
EXPERT RATIONALE
A CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans
Apart) is a security measure that presents a challenge designed to be easily solvable by
humans but difficult for automated bots and scripts. When a vulnerability scanner
encounters a CAPTCHA, it typically cannot solve the challenge. A common defensive
, strategy against such scanners is to implement a redirect loop, where the scanner is
perpetually redirected to the same page or a login page. This effectively traps the
automated tool in an endless cycle, preventing it from advancing and scanning the
deeper, more sensitive parts of the application.
QUESTION
What is the fundamental operating system-level action that occurs when a user clicks
"File | Open" from within the Microsoft Word application?
a. Generates a software interrupt
b. Loads the kernel
c. Opens the appropriate output HID
d. Yo Mama
CORRECT ANS: Generates a software interrupt
EXPERT RATIONALE
When a user performs a high-level action in a user-mode application, such as opening a
file, the application needs to request a service from the operating system's kernel. To do
this safely and securely, the application generates a software interrupt (also known as a
system call or trap). This interrupt signals the processor to transition from user mode to
kernel mode, allowing the operating system to execute the privileged I/O operations
necessary to access the file system and display the file dialog.
QUESTION
What specific attack methodology is an attacker attempting to execute using the
following command in Kali Linux?
root@kali: ~/target# dirb https:www.sans.org /usr/share/wordlists/dirb/small.txt
a. Dictionary attack against known user accounts on a website
b. Dictionary attack against unknown user accounts on a website
c. Search for valid accounts using a wordlist against a website
d. Search for directories not linked to public areas of a website
CORRECT ANS: Search for directories not linked to public areas of a website
160 QUESTION AND CORRECT DETAILED VERIFIED
ANSWERS FROM VERIFIED SOURCES BY EXPERT RATED
A
GRADE.(RATIONALES) WITH PAGE
REFERENCE.CERTIFICATION GFACT TEST .
QUESTION
What is the primary purpose and functionality of the Local Users Management Console
within the Windows operating system environment?
a. Create users within Windows
b. Create groups within Windows
c. Yo Mama (insert giggle)
d. Change your password
CORRECT ANS: Create users within Windows, create groups within Windows, Change
your password
EXPERT RATIONALE
The Local Users Management Console (often accessed via the lusrmgr.msc snap-in) is a
Microsoft Management Console (MMC) tool that provides a graphical interface for
managing local user accounts and groups on a standalone Windows machine. Its core
functionalities include creating, modifying, and deleting local user accounts; creating
and managing local groups; and resetting user passwords. This tool is essential for
system administrators to control local access to a computer that is not part of a domain.
The options provided are all actions that can be performed through this console,
making the comprehensive answer the correct one.
QUESTION
What file system format is most commonly used as the default storage system for most
commercial Universal Serial Bus (USB) flash drives?
,a. exFAT
b. FAT32
c. NTFS
d. HFS Plus
CORRECT ANS: exFAT
EXPERT RATIONALE
The Extended File Allocation Table (exFAT) is a file system specifically designed for flash
drives and other removable media. It was developed by Microsoft to overcome the
limitations of FAT32, particularly the 4 GB maximum file size restriction, while
maintaining broad compatibility across different operating systems, including Windows,
macOS, and Linux. exFAT is optimized for use on flash drives due to its lightweight
structure and low overhead, making it the most common default format for modern,
high-capacity USB drives. While FAT32 is still used on smaller drives, NTFS is primarily
for internal hard drives, and HFS Plus is Apple's proprietary file system for macOS.
QUESTION
When a new file is created within a folder in a Windows operating system, from what
source does the new file inherit its default security permissions?
a. Parent Folder
b. You set them when you open the folder
c. Root Permissions
d. Default File Permissions
CORRECT ANS: Parent Folder
EXPERT RATIONALE
In the Windows NTFS file system, permissions are inherited by default. When a new file
or subfolder is created within a parent folder, it automatically inherits the security
permissions (Access Control Lists, or ACLs) of that parent container. This inheritance
model is fundamental to Windows security, simplifying administration by ensuring that
new objects automatically have the same access rules as their container. While root
permissions dictate the starting point for the drive, they are applied through the parent
folder hierarchy, and default permissions are overridden by inheritance.
,QUESTION
What command, when executed in a Linux source code directory, is responsible for
generating a Makefile that is specifically optimized and tuned to the features and
configuration of the current system?
a. source makefile.am
b. source configure.in
c. ./install-sh
d. ./configure
CORRECT ANS: ./configure
EXPERT RATIONALE
In the standard GNU build system (often referred to as Autotools), the ./configure script
is the first step in the compilation process. This script is a shell script that performs a
system-wide examination to detect the presence of libraries, header files, and compiler
characteristics. It then uses this information to generate a Makefile tailored to the
specific environment, ensuring the software will compile correctly with the available
system resources. The makefile.am and configure.in files are source files for the
Autotools themselves, not the final build instruction file, and install-sh is a helper script
for installation.
QUESTION
What is a common defensive behavior of a web application when it detects a
vulnerability scanner attempting to systematically enumerate and probe its resources?
a. Redirect the scanner to the same page in a loop
b. Proceed to the website as per normal
c. Shut the scanner down
d. Lock you out of the website
CORRECT ANS: Redirect the scanner to the same page in a loop
EXPERT RATIONALE
A CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans
Apart) is a security measure that presents a challenge designed to be easily solvable by
humans but difficult for automated bots and scripts. When a vulnerability scanner
encounters a CAPTCHA, it typically cannot solve the challenge. A common defensive
, strategy against such scanners is to implement a redirect loop, where the scanner is
perpetually redirected to the same page or a login page. This effectively traps the
automated tool in an endless cycle, preventing it from advancing and scanning the
deeper, more sensitive parts of the application.
QUESTION
What is the fundamental operating system-level action that occurs when a user clicks
"File | Open" from within the Microsoft Word application?
a. Generates a software interrupt
b. Loads the kernel
c. Opens the appropriate output HID
d. Yo Mama
CORRECT ANS: Generates a software interrupt
EXPERT RATIONALE
When a user performs a high-level action in a user-mode application, such as opening a
file, the application needs to request a service from the operating system's kernel. To do
this safely and securely, the application generates a software interrupt (also known as a
system call or trap). This interrupt signals the processor to transition from user mode to
kernel mode, allowing the operating system to execute the privileged I/O operations
necessary to access the file system and display the file dialog.
QUESTION
What specific attack methodology is an attacker attempting to execute using the
following command in Kali Linux?
root@kali: ~/target# dirb https:www.sans.org /usr/share/wordlists/dirb/small.txt
a. Dictionary attack against known user accounts on a website
b. Dictionary attack against unknown user accounts on a website
c. Search for valid accounts using a wordlist against a website
d. Search for directories not linked to public areas of a website
CORRECT ANS: Search for directories not linked to public areas of a website
