GIAC
GCIH · Question #226
GCIH Question #226: Real Exam Question with Answer & Explanation
The correct answer is C: Back door. A back door is a covert mechanism that allows access to a system while bypassing normal authentication controls. The other options describe different types of attacks unrelated to authentication bypass.
Question
Which of the following is a method of gaining access to a system that bypasses normal authentication?
Options
- ATeardrop
- BTrojan horse
- CBack door
- DSmurf
Explanation
A back door is a covert mechanism that allows access to a system while bypassing normal authentication controls. The other options describe different types of attacks unrelated to authentication bypass.
Common mistakes.
- A. Teardrop is a denial-of-service attack that sends malformed, overlapping IP fragments to crash or destabilize the target system - it does not bypass authentication.
- B. A Trojan horse is malware disguised as legitimate software to trick users into executing it - it does not itself bypass authentication mechanisms.
- D. Smurf is an ICMP-based distributed denial-of-service amplification attack that floods a victim with traffic - it has no authentication bypass capability.
Concept tested. Back door authentication bypass attack type
Reference. https://csrc.nist.gov/glossary/term/backdoor
Community Discussion
No community discussion yet for this question.