Pass GIAC GCIH exam questions - convert Test Engine to PDF
Pass Your GCIH Exam Easily - Real GCIH Practice Dump Updated Sep 08, 2023
NEW QUESTION # 24
John is a malicious attacker. He illegally accesses the server of We-are-secure Inc. He then places a backdoor in the We-are-secure server and alters its log files. Which of the following steps of malicious hacking includes altering the server log files?
- A. Reconnaissance
- B. Gaining access
- C. Maintaining access
- D. Covering tracks
Answer: D
NEW QUESTION # 25
Which of the following attacks come under the category of layer 2 Denial-of-Service attacks?
Each correct answer represents a complete solution. Choose all that apply.
- A. SYN flood attack
- B. RF jamming attack
- C. Password cracking
- D. Spoofing attack
Answer: A,D
NEW QUESTION # 26
Which of the following is used by attackers to obtain an authenticated connection on a network?
- A. Denial-of-Service (DoS) attack
- B. Man-in-the-middle attack
- C. Back door
- D. Replay attack
Answer: D
NEW QUESTION # 27
Which of the following statements are correct about spoofing and session hijacking?
Each correct answer represents a complete solution. Choose all that apply.
- A. Spoofing is an attack in which an attacker can spoof the IP address or other identity of the target and the valid user cannot be active.
- B. Session hijacking is an attack in which an attacker takes over the session, and the valid user's session is not disconnected.
- C. Session hijacking is an attack in which an attacker takes over the session, and the valid user's session is disconnected.
- D. Spoofing is an attack in which an attacker can spoof the IP address or other identity of the target but the valid user can be active.
Answer: B,D
NEW QUESTION # 28
Which of the following can be used to perform session hijacking?
Each correct answer represents a complete solution. Choose all that apply.
- A. ARP spoofing
- B. Cross-site scripting
- C. Session sidejacking
- D. Session fixation
Answer: B,C,D
NEW QUESTION # 29
Victor works as a professional Ethical Hacker for SecureNet Inc. He wants to use Steganographic file system method to encrypt and hide some secret information. Which of the following disk spaces will he use to store this secret information?
Each correct answer represents a complete solution. Choose all that apply.
- A. Unused Sectors
- B. Hidden partition
- C. Slack space
- D. Dumb space
Answer: A,B,C
NEW QUESTION # 30
Your company has been hired to provide consultancy, development, and integration services for a company named Brainbridge International. You have prepared a case study to plan the upgrade for the company. Based on the case study, which of the following steps will you suggest for configuring WebStore1?
Each correct answer represents a part of the solution. Choose two.
- A. Move the computer account of WebStore1 to the Remote organizational unit (OU).
- B. Customize IIS 6.0 to display a legal warning page on the generation of the 404.2 and 404.3 errors.
- C. Move the WebStore1 server to the internal network.
- D. Configure IIS 6.0 on WebStore1 to scan the URL for known buffer overflow attacks.
Answer: B,D
NEW QUESTION # 31
In which of the following scanning methods do Windows operating systems send only RST packets irrespective of
whether the port is open or closed?
- A. TCP FIN
- B. TCP SYN
- C. FTP bounce
- D. XMAS
Answer: A
NEW QUESTION # 32
You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to
accomplish the task?
Each correct answer represents a complete solution. Choose two.
- A. Place the directory containing nikto.pl in root's PATH environment variable.
- B. Restart nessusd service.
- C. Place nikto.pl file in the /var/www directory.
- D. Place nikto.pl file in the /etc/nessus directory.
Answer: A,B
NEW QUESTION # 33
Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps
is NOT a part of manual network mapping?
- A. Banner grabbing
- B. Collecting employees information
- C. Performing Neotracerouting
- D. Gathering private and public IP addresses
Answer: C
NEW QUESTION # 34
Which of the following tools can be used for steganography?
Each correct answer represents a complete solution. Choose all that apply.
- A. Image hide
- B. Stegbreak
- C. Anti-x
- D. Snow.exe
Answer: A,D
Explanation:
Section: Volume A
NEW QUESTION # 35
You discover that all available network bandwidth is being used by some unknown service. You discover that UDP packets are being used to connect the echo service on one machine to the chargen service on another machine. What kind of attack is this?
- A. Denial of Service
- B. Evil Twin
- C. Virus
- D. Smurf
Answer: A
NEW QUESTION # 36
Which of the following malicious code can have more than one type of trigger, multiple task capabilities, and can replicate itself in more than one manner?
- A. Trojan
- B. Boot sector virus
- C. Macro virus
- D. Blended threat
Answer: D
NEW QUESTION # 37
Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online
discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform
acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to
do?
- A. Persistent
- B. SAX
- C. Non persistent
- D. Document Object Model (DOM)
Answer: A
NEW QUESTION # 38
You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and flooding it. What is this called?
- A. IP spoofing
- B. Smurf attack
- C. Syn flood
- D. Blue jacking
Answer: B
Explanation:
Section: Volume B
NEW QUESTION # 39
John is a malicious attacker. He illegally accesses the server of We-are-secure Inc. He then places a backdoor in the
We-are-secure server and alters its log files. Which of the following steps of malicious hacking includes altering the
server log files?
- A. Reconnaissance
- B. Gaining access
- C. Maintaining access
- D. Covering tracks
Answer: D
NEW QUESTION # 40
Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism?
Each correct answer represents a complete solution. Choose two.
- A. Ping of Death attack
- B. SYN flood attack
- C. Land attack
- D. Teardrop attack
Answer: A,D
Explanation:
Section: Volume A
NEW QUESTION # 41
Which of the following threats is a combination of worm, virus, and Trojan horse characteristics?
- A. Heuristic
- B. Blended
- C. Rootkits
- D. Spyware
Answer: B
Explanation:
Section: Volume C
Explanation/Reference:
NEW QUESTION # 42
Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses 'Faulkner' as the password for the gmail account. After a few days, he starts receiving a lot of e-mails stating that his gmail account has been hacked. He also finds that some of his important mails have been deleted by someone. Which of the following methods has the attacker used to crack Andrew's password?
Each correct answer represents a complete solution. Choose all that apply.
- A. Buffer-overflow attack
- B. Password guessing
- C. Rainbow attack
- D. Zero-day attack
- E. Social engineering
- F. Dictionary-based attack
- G. Denial-of-service (DoS) attack
- H. Brute force attack
Answer: B,C,E,F,H
NEW QUESTION # 43
......
The GCIH certification is highly sought after by professionals in the field of cybersecurity. It demonstrates a candidate's commitment to the incident handling process and their ability to effectively manage incidents. Additionally, it provides employers with a benchmark for identifying skilled incident handlers who can help protect their organization's critical assets.
GIAC GCIH (GIAC Certified Incident Handler) exam is a certification that validates an individual’s ability to handle and respond to security incidents. It is a highly respected certification in the cybersecurity industry that demonstrates an individual’s knowledge and skills in incident handling, incident response, and computer forensics. The GCIH certification is designed for professionals who are responsible for detecting, responding to, and preventing security incidents in their organizations.
GCIH Real Exam Questions and Answers FREE: https://lead2pass.guidetorrent.com/GCIH-dumps-questions.html