New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCIA Exam - Topic 3 Question 20 Discussion

Actual exam question for GIAC's GCIA exam
Question #: 20
Topic #: 3
[All GCIA Questions]

Which of the following programs can be used to detect stealth port scans performed by a malicious hacker?

Each correct answer represents a complete solution. Choose all that apply.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, D

Contribute your Thoughts:

0/2000 characters
Leota
4 months ago
Agreed, portsentry is a must-have for this!
upvoted 0 times
...
Lawanda
4 months ago
Wait, can scanlogd really catch stealth scans? Not sure about that.
upvoted 0 times
...
Sanjuana
4 months ago
Nmap? Really? That's more for scanning than detection.
upvoted 0 times
...
Royal
4 months ago
I think libnids is also a good choice.
upvoted 0 times
...
Jamal
5 months ago
Definitely portsentry and scanlogd!
upvoted 0 times
...
Louisa
5 months ago
Scanlogd sounds familiar for detecting scans. I practiced some questions on this, and I think it’s a valid choice.
upvoted 0 times
...
Nguyet
5 months ago
Nmap is more of a scanning tool itself, right? I don't think it detects stealth scans, but I could be wrong.
upvoted 0 times
...
Paulene
5 months ago
I'm not entirely sure about libnids. I feel like it’s more about network intrusion detection, but it might help with scans too?
upvoted 0 times
...
Whitley
5 months ago
I think portsentry is definitely one of the tools for detecting stealth scans. I remember it being mentioned in class.
upvoted 0 times
...
Ty
5 months ago
Hmm, I'm a bit unsure about this one. I know the quantifiers have something to do with matching patterns, but I can't quite remember the specific symbols off the top of my head. I'll have to think this through carefully.
upvoted 0 times
...
Malcom
5 months ago
Hmm, I'm a bit unsure about this one. I know DDoS protection is important, but I'm not sure which of these options would be the best approach. I'll have to think it through carefully.
upvoted 0 times
...

Save Cancel