Free GIAC GCIH Practice Exam with Questions & Answers | Set: 9

Name: How to Pass GCIH Exams
Brand: Examstrack
SKU: gcih
Price: 42 USD
Availability: InStock

Questions 81

Fill in the blank with the appropriate word.

StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use ______ defense against buffer overflow attacks.

Options:

GIAC GCIH Premium Access

Questions 82

Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All computers run on Windows XP. Manager of the Sales department complains Adam about the unusual behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his computer overnight. Adam suspects that some malicious software or Trojans have been installed on the computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346, and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one application to run every time when Windows start.

Which of the following is the most likely reason behind this issue?

Options:

Cheops-ng is installed on the computer.

Elsave is installed on the computer.

NetBus is installed on the computer.

NetStumbler is installed on the computer.

Questions 83

Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point.

Which of the following type of scans would be most accurate and reliable?

Options:

UDP sacn

TCP Connect scan

ACK scan

Fin scan

Questions 84

Which of the following attacks is specially used for cracking a password?

Options:

PING attack

Dictionary attack

Vulnerability attack

DoS attack

Questions 85

Which of the following is designed to protect the Internet resolvers (clients) from forged DNS data created by DNS cache poisoning?

Options:

Stub resolver

BINDER

Split-horizon DNS

Domain Name System Extension (DNSSEC)

Questions 86

In which of the following attacking methods does an attacker distribute incorrect IP address?

Options:

IP spoofing

Mac flooding

DNS poisoning

Man-in-the-middle

Questions 87

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

Options:

Non persistent

Document Object Model (DOM)

SAX

Persistent

Questions 88

Which of the following applications is an example of a data-sending Trojan?

Options:

SubSeven

Senna Spy Generator

Firekiller 2000

eBlaster

Questions 89

Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform.

Which of the following steps should Adam take to overcome this problem with the least administrative effort?

Options:

Create incident manual read it every time incident occurs.

Appoint someone else to check the procedures.

Create incident checklists.

Create new sub-team to keep check.

Questions 90

Which of the following types of attacks is mounted with the objective of causing a negative impact on the performance of a computer or network?

Options:

Vulnerability attack

Man-in-the-middle attack

Denial-of-Service (DoS) attack