[Mar-2023] GIAC GCIH Actual Questions and Braindumps
Pass GCIH Exam with Updated GCIH Exam Dumps PDF 2023
For more info visit:
NEW QUESTION 11
Which of the following procedures is designed to enable security personnel to identify, mitigate, and recover from malicious computer incidents, such as unauthorized access to a system or data, denialof-service, or unauthorized changes to system hardware, software, or data?
- A. Cyber Incident Response Plan
- B. Disaster Recovery Plan
- C. Occupant Emergency Plan
- D. Crisis Communication Plan
Answer: A
NEW QUESTION 12
Which of the following tasks can be performed by using netcat utility?
Each correct answer represents a complete solution. Choose all that apply.
- A. Creating a Backdoor
- B. Firewall testing
- C. Checking file integrity
- D. Port scanning and service identification
Answer: A,B,D
Explanation:
Section: Volume C
NEW QUESTION 13
Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.
- A. tcp wrapper provides access control, host address spoofing, client username lookups, etc.
- B. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server
program directly. - C. tcp wrapper protects a Linux server from IP address spoofing.
- D. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to
filter for access control purposes.
Answer: A,B,D
NEW QUESTION 14
Which of the following types of malware does not replicate itself but can spread only when the
circumstances are beneficial?
- A. Mass mailer
- B. Blended threat
- C. Trojan horse
- D. Worm
Answer: C
NEW QUESTION 15
Which of the following are types of access control attacks?
Each correct answer represents a complete solution. Choose all that apply.
- A. Mail bombing
- B. Spoofing
- C. Brute force attack
- D. Dictionary attack
Answer: B,C,D
NEW QUESTION 16
You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and flooding it. What is this called?
- A. Syn flood
- B. Smurf attack
- C. IP spoofing
- D. Blue jacking
Answer: B
NEW QUESTION 17
Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?
- A. Evasion attack
- B. Ping of death attack
- C. Denial-of-Service (DoS) attack
- D. Buffer overflow attack
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 18
You check performance logs and note that there has been a recent dramatic increase in the amount of broadcast traffic. What is this most likely to be an indicator of?
- A. DoS attack
- B. Syn flood
- C. Misconfigured router
- D. Virus
Answer: A
NEW QUESTION 19
Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?
- A. Evasion attack
- B. Ping of death attack
- C. Denial-of-Service (DoS) attack
- D. Buffer overflow attack
Answer: D
NEW QUESTION 20
John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that
he wants to buy, the attacker changes the price of the item to 1.
Original cookie values:
ItemID1=2
ItemPrice1=900
ItemID2=1
ItemPrice2=200
Modified cookie values:
ItemID1=2
ItemPrice1=1
ItemID2=1
ItemPrice2=1
Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.
Which of the following hacking techniques is John performing?
- A. Computer-based social engineering
- B. Man-in-the-middle attack
- C. Cookie poisoning
- D. Cross site scripting
Answer: C
NEW QUESTION 21
Adam, a malicious hacker has successfully gained unauthorized access to the Linux system of Umbrella Inc. Web server of the company runs on Apache. He has downloaded sensitive documents and database files from the computer.
After performing these malicious tasks, Adam finally runs the following command on the Linux command box before disconnecting.
for (( i = 0;i<11;i++ )); do dd if=/dev/random of=/dev/hda && dd if=/dev/zero of=/dev/hda done Which of the following actions does Adam want to perform by the above command?
- A. Wiping the contents of the hard disk with zeros.
- B. Infecting the hard disk with polymorphic virus strings.
- C. Deleting all log files present on the system.
- D. Making a bit stream copy of the entire hard disk for later download.
Answer: A
NEW QUESTION 22
Adam works as a sales manager for Umbrella Inc. He wants to download software from the Internet. As the software comes from a site in his untrusted zone, Adam wants to ensure that the downloaded software has not been Trojaned. Which of the following options would indicate the best course of action for Adam?
- A. Compare the version of the software with the one published on the distribution media.
- B. Compare the file's MD5 signature with the one published on the distribution media.
- C. Compare the file size of the software with the one given on the Website.
- D. Compare the file's virus signature with the one published on the distribution.
Answer: B
NEW QUESTION 23
Brutus is a password cracking tool that can be used to crack the following authentications:
l HTTP (Basic Authentication) l HTTP (HTML Form/CGI) l POP3 (Post Office Protocol v3) l FTP (File Transfer Protocol) l SMB (Server Message Block) l Telnet
Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.
- A. Man-in-the-middle attack
- B. Hybrid attack
- C. Brute force attack
- D. Dictionary attack
- E. Replay attack
Answer: B,C,D
NEW QUESTION 24
Which of the following are the automated tools that are used to perform penetration testing?
Each correct answer represents a complete solution. Choose two.
- A. Pwdump
- B. GFI LANguard
- C. Nessus
- D. EtherApe
Answer: B,C
Explanation:
Section: Volume B
NEW QUESTION 25
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?
- A. Stick
- B. ADMutate
- C. Fragroute
- D. Absinthe
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 26
Who are the primary victims of smurf attacks on the contemporary Internet system?
- A. FTP servers are the primary victims to smurf attacks
- B. IRC servers are the primary victims to smurf attacks
- C. Mail servers are the primary victims to smurf attacks
- D. SMTP servers are the primary victims to smurf attacks
Answer: B
NEW QUESTION 27
Which of the following tools uses common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures of the rootkits?
- A. chkrootkit
- B. rkhunter
- C. Blue Pill
- D. OSSEC
Answer: A
NEW QUESTION 28
What is the major difference between a worm and a Trojan horse?
- A. A Trojan horse is a malicious program, while a worm is an anti-virus software.
- B. A worm spreads via e-mail, while a Trojan horse does not.
- C. A worm is a form of malicious program, while a Trojan horse is a utility.
- D. A worm is self replicating, while a Trojan horse is not.
Answer: D
Explanation:
Section: Volume A
Explanation
NEW QUESTION 29
Which of the following US Acts emphasized a "risk-based policy for cost-effective security" and makes mandatory for agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency's information security program and report the results to Office of Management and Budget?
- A. Federal Information Security Management Act of 2002 (FISMA)
- B. The Fair Credit Reporting Act (FCRA)
- C. The Electronic Communications Privacy Act of 1986 (ECPA)
- D. The Equal Credit Opportunity Act (ECOA)
Answer: A
NEW QUESTION 30
Who are the primary victims of smurf attacks on the contemporary Internet system?
- A. FTP servers are the primary victims to smurf attacks
- B. IRC servers are the primary victims to smurf attacks
- C. Mail servers are the primary victims to smurf attacks
- D. SMTP servers are the primary victims to smurf attacks
Answer: B
NEW QUESTION 31
......
GCIH Certified Professional Salary
- Europe:€114987
- England: £97983
- India:₹ 906020
- United States: $127,530
Latest GCIH Pass Guaranteed Exam Dumps with Accurate & Updated Questions: https://www.prepawaytest.com/GIAC/GCIH-practice-exam-dumps.html
GCIH Exam Brain Dumps - Study Notes and Theory: https://drive.google.com/open?id=1AB7-vTLKS632gm1ebOF6NPl0UFmALpDi