GNFA - GIAC Network Forensic Analyst Forensics Practice Questions

What is the main purpose of packet capture in network forensics?

• AA. To block malicious traffic
• BB. To create network policies
• CC. To optimize performance
• DD. To analyze network traffic

In network forensics, what does the term "flow" refer to?

• AA. A network topology
• BB. A data leak
• CC. An application protocol
• DD. A sequence of packets

What is the first step in the digital forensics process?

• AA. Analysis of collected data
• BB. Recovery of data
• CC. Preservation of evidence
• DD. Reporting findings

What is the function of a SIEM system in the context of network forensics?

• AA. User training
• BB. Threat detection
• CC. Application deployment
• DD. Data storage