The Secret Of GIAC GCIH Exam Question

NEW QUESTION 1
Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses 'Faulkner' as the password for the gmail account. After a few days, he starts receiving a lot of e-mails stating that his gmail account has been hacked. He also finds that some of his important mails have been deleted by someone. Which of the following methods has the attacker used to crack Andrew's password?
Each correct answer represents a complete solution. Choose all that apply.

• A. Denial-of-service (DoS) attack
• B. Zero-day attack
• C. Brute force attack
• D. Social engineering
• E. Buffer-overflow attack
• F. Rainbow attack
• G. Password guessing
• H. Dictionary-based attack

Answer: CDFGH

NEW QUESTION 2
Victor is a novice Ethical Hacker. He is learning the hacking process, i.e., the steps taken by malicious hackers to perform hacking. Which of the following steps is NOT included in the hacking process?

• A. Scanning
• B. Preparation
• C. gaining access
• D. Reconnaissance

Answer: B

NEW QUESTION 3
CORRECT TEXT
Fill in the blank with the appropriate term.
_______is the practice of monitoring and potentially restricting the flow of information outbound from one network to another

• A.

Answer: Egressfiltering

NEW QUESTION 4
Which of the following services CANNOT be performed by the nmap utility?
Each correct answer represents a complete solution. Choose all that apply.

• A. Passive OS fingerprinting
• B. Sniffing
• C. Active OS fingerprinting
• D. Port scanning

Answer: AB

NEW QUESTION 5
You want to create an SSH tunnel for POP and SMTP protocols. Which of the following commands will you run?

• A. ssh -L 110:mailhost:110 -L 25
• B. ssh -L 110:mailhost:110 -L 25:mailhost:25 -1
• C. ssh -L 25:mailhost:110 -L 110
• D. ssh -L 110:mailhost:110 -L 25:mailhost:25 -1 user -N mailhost

Answer: D

NEW QUESTION 6
Which of the following penetration testing phases involves reconnaissance or data gathering?

• A. Attack phase
• B. Pre-attack phase
• C. Post-attack phase
• D. Out-attack phase

Answer: B

NEW QUESTION 7
Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

• A. Denial of Service attack
• B. Replay attack
• C. Teardrop attack
• D. Land attack

Answer: A

NEW QUESTION 8
Your company has been hired to provide consultancy, development, and integration services for a company named Brainbridge International. You have prepared a case study to plan the upgrade for the company. Based on the case study, which of the following steps will you suggest for configuring WebStore1?
Each correct answer represents a part of the solution. Choose two.

• A. Customize IIS 6.0 to display a legal warning page on the generation of the 404.2 and 404.3 errors.
• B. Move the WebStore1 server to the internal network.
• C. Configure IIS 6.0 on WebStore1 to scan the URL for known buffer overflow attacks.
• D. Move the computer account of WebStore1 to the Remote organizational unit (OU).

Answer: AC

NEW QUESTION 9
Which of the following attacks is specially used for cracking a password?

• A. PING attack
• B. Dictionary attack
• C. Vulnerability attack
• D. DoS attack

Answer: B

NEW QUESTION 10
Which of the following is the Web 2.0 programming methodology that is used to create Web pages that are dynamic and interactive?

• A. UML
• B. Ajax
• C. RSS
• D. XML

Answer: B

NEW QUESTION 11
Which of the following refers to applications or files that are not classified as viruses or Trojan horse programs, but can still negatively affect the performance of the computers on your network and introduce significant security risks to your organization?

• A. Hardware
• B. Grayware
• C. Firmware
• D. Melissa

Answer: B

NEW QUESTION 12
An Active Attack is a type of steganography attack in which the attacker changes the carrier during the communication process. Which of the following techniques is used for smoothing the transition and controlling contrast on the hard edges, where there is significant color transition?

• A. Soften
• B. Rotate
• C. Sharpen
• D. Blur

Answer: D

NEW QUESTION 13
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and successfully logs in to the user page of the Web site.
The we-are-secure login page is vulnerable to a __________.

• A. Dictionary attack
• B. SQL injection attack
• C. Replay attack
• D. Land attack

Answer: B

NEW QUESTION 14
Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise?

• A. Preparation phase
• B. Eradication phase
• C. Identification phase
• D. Recovery phase
• E. Containment phase

Answer: A

NEW QUESTION 15
In which of the following steps of the incident handling processes does the Incident Handler make sure that all business processes and functions are back to normal and then also wants to monitor the system or processes to ensure that the system is not compromised again?

• A. Eradication
• B. Lesson Learned
• C. Recovery
• D. Containment

Answer: C

NEW QUESTION 16
You work as a System Engineer for Cyber World Inc. Your company has a single Active Directory domain. All servers in the domain run Windows Server 2008. The Microsoft Hyper-V server role has been installed on one of the servers, namely uC1. uC1 hosts twelve virtual machines. You have been given the task to configure the Shutdown option for uC1, so that each virtual machine shuts down before the main Hyper-V server shuts down. Which of the following actions will you perform to accomplish the task?

• A. Enable the Shut Down the Guest Operating System option in the Automatic Stop Action Properties on each virtual machine.
• B. Manually shut down each of the guest operating systems before the server shuts down.
• C. Create a batch file to shut down the guest operating system before the server shuts down.
• D. Create a logon script to shut down the guest operating system before the server shuts down.

Answer: A

NEW QUESTION 17
......