8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
GFACT CERTIFICATION EXAM ACTUAL EXAM
QUESTIONS AND ANSWERS EXCELEENT
2025\LATEST VERSION
(B2, Pg122) What does it It can run multiple chunks of code concurrently
mean when a computer
program is "multi-threaded"?
A) It calls multiple external
libraries
B) It has multiple serial
number for different users
C) It can run multiple
chunks of code
concurrently
D) It has multiple functions
defined in the program
(B3, Pg162) Which of the Sending a website user's session cookie to an attacker
following is a common
result of a reflected cross-
site scripting attack?
A) Tricking a user into
making an
authenticated
transaction
B) Sending a website user's
session cookie to an
attacker
C) Embedding the
attacker's malware in web
… 1/57
,8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
application source code
D) Stealing password
hashes from a
website's back end
database
HINT It may be under the
session guessing section, but
if you read further into it,
you will see where it
mentions XSS attack.
(B3, Pg90) What tool can Nmap
be used to fingerprint the
operating system of a host?
A) netsta
t B)dig
C)nsloo
kup
D)nma
p
Where is the data from the CPU
GDB output shown in the
image stored on the host?
A) Master Boot Record
B) BIOS
C) CPU
D) Random Access Memory
(B2, Pg369) What docker images
command is used to
generate lists of images that
are stored locally and
provides arguments for
handling them?
A) docker images
B) docker pull
… 2/57
,8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
C) docker run
D) vi Dockerfile
E) docker ps
What is the significance of They are all of the functions called up to this point
the items listed in pwbdbg's
backtrace?
A) They are all of the
functions called up to this
point
B) They are functions
currently loaded in the
CPU cache
C) It is a list of functions that
are about to be called
D) They are pointed to by the
_GLOBAL_OFFSET_TABLE_
(B3, Pg340) Which packet ICMP echo requests with varying data field sizes
header field characteristic is
a strong indicator of data
exfiltration?
A) TCP Packets in a session
with varying message
data sizes
B) ICMP echo requests with
varying data field sizes
C) UDP packets with invalid
checksums
D) Yo mama
(B3, Pg108) During which Lessons Learned
stage of incident response
should the adequacy of
policies be examined?
… 3/57
, 8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
A) Lessons learned
B) Eradication
C) Recovery
(B3, Pg21) What is a way to The Website's SSL certificate
check the symmetric or
asymmetric encryption?
A) The Website's SSL certificate
B) The Public Key
C) The Private Key
D) Yo Mama
Which of the follow Sysprep
C:\Windows\System32
subdirectories may provide
stored credentials from
unattended installs?
A) Restore
B) Boot
C) Sysprep
D) Dism
(B2, Pg292) Which of the Always notify
following is one of the four
User Account Control (UAC)
settings on a Windows
system?
A) Access this computer from
the network
B) Full control
C) Run as Administrator
D) Always notify
… 4/57
GFACT CERTIFICATION EXAM ACTUAL EXAM
QUESTIONS AND ANSWERS EXCELEENT
2025\LATEST VERSION
(B2, Pg122) What does it It can run multiple chunks of code concurrently
mean when a computer
program is "multi-threaded"?
A) It calls multiple external
libraries
B) It has multiple serial
number for different users
C) It can run multiple
chunks of code
concurrently
D) It has multiple functions
defined in the program
(B3, Pg162) Which of the Sending a website user's session cookie to an attacker
following is a common
result of a reflected cross-
site scripting attack?
A) Tricking a user into
making an
authenticated
transaction
B) Sending a website user's
session cookie to an
attacker
C) Embedding the
attacker's malware in web
… 1/57
,8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
application source code
D) Stealing password
hashes from a
website's back end
database
HINT It may be under the
session guessing section, but
if you read further into it,
you will see where it
mentions XSS attack.
(B3, Pg90) What tool can Nmap
be used to fingerprint the
operating system of a host?
A) netsta
t B)dig
C)nsloo
kup
D)nma
p
Where is the data from the CPU
GDB output shown in the
image stored on the host?
A) Master Boot Record
B) BIOS
C) CPU
D) Random Access Memory
(B2, Pg369) What docker images
command is used to
generate lists of images that
are stored locally and
provides arguments for
handling them?
A) docker images
B) docker pull
… 2/57
,8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
C) docker run
D) vi Dockerfile
E) docker ps
What is the significance of They are all of the functions called up to this point
the items listed in pwbdbg's
backtrace?
A) They are all of the
functions called up to this
point
B) They are functions
currently loaded in the
CPU cache
C) It is a list of functions that
are about to be called
D) They are pointed to by the
_GLOBAL_OFFSET_TABLE_
(B3, Pg340) Which packet ICMP echo requests with varying data field sizes
header field characteristic is
a strong indicator of data
exfiltration?
A) TCP Packets in a session
with varying message
data sizes
B) ICMP echo requests with
varying data field sizes
C) UDP packets with invalid
checksums
D) Yo mama
(B3, Pg108) During which Lessons Learned
stage of incident response
should the adequacy of
policies be examined?
… 3/57
, 8/8/25, 7:06 AM GFACT CERTIFICATION EXAM ACTUAL EXAM QUESTIONS AND ANSWERS EXCELEENT 2025 Flashcards | Quizlet
A) Lessons learned
B) Eradication
C) Recovery
(B3, Pg21) What is a way to The Website's SSL certificate
check the symmetric or
asymmetric encryption?
A) The Website's SSL certificate
B) The Public Key
C) The Private Key
D) Yo Mama
Which of the follow Sysprep
C:\Windows\System32
subdirectories may provide
stored credentials from
unattended installs?
A) Restore
B) Boot
C) Sysprep
D) Dism
(B2, Pg292) Which of the Always notify
following is one of the four
User Account Control (UAC)
settings on a Windows
system?
A) Access this computer from
the network
B) Full control
C) Run as Administrator
D) Always notify
… 4/57
