GCIH Exam Questions

Which of the following applications is an example of a data-sending Trojan?

John works as a professional Ethical Hacker. He has been assigned a project to test the security and successfully logs in to the user page of the Web site. The we-are-secure login...

Which of the following statements are true about worms? Each correct answer represents a complete solution. Choose all that apply.

Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All computers run on Windows XP. Manager of the Sales department complains Adam about the un...

Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a vari...

Which of the following are the primary goals of the incident handling team? Each correct answer represents a complete solution. Choose all that apply.

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

Which of the following statements are true about a keylogger? Each correct answer represents a complete solution. Choose all that apply.

John works as a professional Ethical Hacker. He has been assigned a project to test the security server. The output of the scanning test is as follows: C:\whisker.pl -h target_IP_a...

Which of the following statements about buffer overflow is true?

Which of the following commands is used to access Windows resources from Linux workstation?

Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans woul...

You have configured a virtualized Internet browser on your Windows XP professional computer. Using the virtualized Internet browser, you can protect your operating system from whic...

Which of the following statements about Denial-of-Service (DoS) attack are true? Each correct answer represents a complete solution. Choose three.

You see the career section of a company's Web site and analyze the job profile requirements. You conclude that the company wants professionals who have a sharp knowledge of Windows...

John works as a Professional Penetration Tester. He has been assigned a project to test the ='or''=' as a username and successfully logs on to the user page of the Web site. Now, J...

You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correc...

You want to scan your network quickly to detect live hosts by using ICMP ECHO Requests. What type of scanning will you perform to accomplish the task?

Adam, a malicious hacker is running a scan. Statistics of the scan is as follows: Scan directed at open port: ClientServer 192.5.2.92:4079 ---------FIN--------->192.5.2.110:23192.5...

Which of the following is a network worm that exploits the RPC sub-system vulnerability present in the Microsoft Windows operating system?

Which of the following statements are true about netcat? Each correct answer represents a complete solution. Choose all that apply.

Which of the following types of attacks is mounted with the objective of causing a negative impact on the performance of a computer or network?

Which of the following refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system?

Which of the following malicious software travels across computer networks without the assistance of a user?

What is the major difference between a worm and a Trojan horse?

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to test the network security of the company. He created a webpage to discuss the progres...

You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 Active Directory-based single domain single forest network. The company has three Windows...

Which of the following methods can be used to detect session hijacking attack?

DOS attacks. Which of the following is most useful against DOS attacks?

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmen...

Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.

Which of the following attacks come under the category of layer 2 Denial-of-Service attacks? Each correct answer represents a complete solution. Choose all that apply.

You check performance logs and note that there has been a recent dramatic increase in the amount of broadcast traffic. What is this most likely to be an indicator of?

Which of the following is a reason to implement security logging on a DNS server?

Which of the following tools combines two programs, and also encrypts the resulting package in an attempt to foil antivirus programs?

Which of the following is spy software that records activity on Macintosh systems via snapshots, keystrokes, and Web site logging?

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems....

Which of the following statements are true about firewalking? Each correct answer represents a complete solution. Choose all that apply.

You run the following command on the remote Windows server 2003 computer: c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d "c:\windows\nc.exe -d 192...

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which...

Which of the following is the best method of accurately identifying the services running on a victim host?

Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows...

Which of the following functions can be used as a countermeasure to a Shell Injection attack? Each correct answer represents a complete solution. Choose all that apply.

Which of the following Nmap commands is used to perform a UDP port scan?

You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your...

Your company has been hired to provide consultancy, development, and integration services for a company named Brainbridge International. You have prepared a case study to plan the...

Which of the following characters will you use to check whether an application is vulnerable to an SQL injection attack?

Which of the following tools can be used to detect the steganography?

In which of the following scanning methods do Windows operating systems send only RST packets irrespective of whether the port is open or closed?

Which of the following tools is used to download the Web pages of a Website on the local system?