GIAC GCIA Exam - Topic 2 Question 75 Discussion

Actual exam question for GIAC's GCIA exam

Question #: 75
Topic #: 2

[All GCIA Questions]

Which of the following techniques is used to identify attacks originating from a botnet?

AIFilter

BBPF-based filter

CPassive OS fingerprinting

DRecipient filtering

Show Suggested Answer

Suggested Answer: C

by Krissy at Nov 21, 2025, 05:05 AM

Limited Time Offer

25%

Off

Get Premium GCIA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sena

5 months ago

D) Recipient filtering seems irrelevant here.

upvoted 0 times

...

Kallie

5 months ago

I agree with TechGuru. BPF is more targeted.

upvoted 0 times

...

Rachael

5 months ago

C is useful, but not specifically for botnets.

upvoted 0 times

...

Jenelle

5 months ago

I’m not sure. What about C) Passive OS fingerprinting?

upvoted 0 times

...

Emeline

5 months ago

Nah, D is not really for botnet detection.

upvoted 0 times

...

Chanel

5 months ago

I’m surprised B isn’t more widely known!

upvoted 0 times

...

Malinda

6 months ago

Definitely A, right?

upvoted 0 times

...

Sharen

6 months ago

I thought passive OS fingerprinting was more effective?

upvoted 0 times

...

Quiana

6 months ago

BPF-based filter is the way to go!

upvoted 0 times

...

Alease

7 months ago

Passive OS fingerprinting, huh? Sounds like a job for the cyber-Sherlock Holmes!

upvoted 0 times

...

Almeta

7 months ago

A) IFilter? Really? That's like using a water gun to stop a tsunami.

upvoted 0 times

...

Dottie

7 months ago

B) BPF-based filter is the clear choice here. Filters out the bad stuff like a boss.

upvoted 0 times

...

Blondell

7 months ago

C) Passive OS fingerprinting is the way to go. Gotta catch those botnet baddies in the act!

upvoted 0 times

...

Callie

7 months ago

I'm a bit confused about recipient filtering; I don't think it applies to botnets, but I can't remember the details on the other options.

upvoted 0 times

...

Jesusa

7 months ago

I practiced a similar question where we had to identify network attack techniques, and I think BPF-based filters were the correct choice there too.

upvoted 0 times

...

Stephaine

8 months ago

I feel like passive OS fingerprinting was mentioned in our last class, but I can't recall how it relates to botnets specifically.

upvoted 0 times

...

Mohammad

8 months ago

I think I remember something about BPF-based filters being used for network traffic analysis, but I'm not entirely sure if that's the right answer here.

upvoted 0 times

...

Alpha

8 months ago

Recipient filtering? That doesn't sound right to me. I'm leaning towards one of the other options, but I'll have to double-check my notes.

upvoted 0 times

...

Chandra

8 months ago

Yeah, BPF can analyze traffic effectively.

upvoted 0 times

...

Yaeko

8 months ago

I think B) BPF-based filter is the best choice.

upvoted 0 times

...

Krissy

8 months ago

I'm a little lost on this one. I know we covered botnet detection, but I can't quite recall the specific technique. Guess I'll have to think it through.

upvoted 0 times

...

Marion

9 months ago

Okay, let me think this through step-by-step. Botnets are networks of infected devices, so we'd want a technique that can identify that kind of activity. I'm going to go with BPF-based filter.

upvoted 0 times

...