GCIH Exam Questions

Many organizations create network maps of their network system to visualize the network and understand the relationship between the end devices and the transport layer that provide...

Which of the following functions can you use to mitigate a command injection attack? Each correct answer represents a part of the solution. Choose all that apply.

Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-encrypted TCP/IP utility?

Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his pro...

Adam, a malicious hacker is sniffing the network to inject ARP packets. He injects broadcast frames onto the wire to conduct Man-in-The-Middle attack. Which of the following is the...

Mark works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company uses Check Point SmartDefense to provide security to the network. Ma...

Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for networ...

Which of the following attacks are examples of Denial-of-service attacks (DoS)? Each correct answer represents a complete solution. Choose all that apply.

Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses 'Faulkner' as the password for the gmail account. After a few days, he starts receiving a lot of...

Which of the following are the automated tools that are used to perform penetration testing? Each correct answer represents a complete solution. Choose two.

Firekiller 2000 is an example of a __________.

You are an Incident manager in Orangesect.Inc. You have been tasked to set up a new extension of your enterprise. The networking, to be done in the new extension, requires differen...

Which of the following statements about Ping of Death attack is true?

Which of the following can be used as a Trojan vector to infect an information system? Each correct answer represents a complete solution. Choose all that apply.

Which of the following tools can be used as penetration tools in the Information system auditing process? Each correct answer represents a complete solution. Choose two.

You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhel...

What is the purpose of configuring a password protected screen saver on a computer?

Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some confidential information is being leaked out by an employee of the company. Rick su...

Against which of the following does SSH provide protection? Each correct answer represents a complete solution. Choose two.

Which of the following US Acts emphasized a "risk-based policy for cost-effective security" and makes mandatory for agency program officials, chief information officers, and inspec...

You enter the netstat -an command in the command prompt and you receive intimation that port number 7777 is open on your computer. Which of the following Trojans may be installed o...

You are the Administrator for a corporate network. You are concerned about denial of service attacks. Which of the following measures would be most helpful in defending against a D...

Adam is a novice Web user. He chooses a 22 letters long word from the dictionary as his password. How long will it take to crack the password by an attacker?

Which of the following is a technique for creating Internet maps? Each correct answer represents a complete solution. Choose two.

Which of the following attacks can be overcome by applying cryptography?

In which of the following attacks does the attacker gather information to perform an access attack?

Which of the following refers to applications or files that are not classified as viruses or Trojan horse programs, but can still negatively affect the performance of the computers...

James works as a Database Administrator for Techsoft Inc. The company has a SQL Server 2005 computer. The computer has a database named Sales. Users complain that the performance o...

Which of the following is a version of netcat with integrated transport encryption capabilities?

Which of the following systems is used in the United States to coordinate emergency preparedness and incident management among various federal, state, and local agencies?

Which of the following can be used to perform session hijacking? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is a type of computer security vulnerability typically found in Web applications that allow code injection by malicious Web users into the Web pages viewed b...

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

Which of the following services CANNOT be performed by the nmap utility? Each correct answer represents a complete solution. Choose all that apply.

In which of the following malicious hacking steps does email tracking come under?

Which of the following rootkits is able to load the original operating system as a virtual machine, thereby enabling it to intercept all hardware calls made by the original operati...

John works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company uses Check Point SmartDefense to provide security to the network of...

In which of the following methods does an hacker use packet sniffing to read network traffic between two parties to steal the session cookies?

You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linux- based server. Recently, you have updated the password policy of the company in which...

Which of the following are countermeasures to prevent unauthorized database access attacks? Each correct answer represents a complete solution. Choose all that apply.

In which of the following attacks does an attacker spoof the source address in IP packets that are sent to the victim?

In which of the following steps of the incident handling processes does the Incident Handler make sure that all business processes and functions are back to normal and then also wa...

Which of the following tools is used to attack the Digital Watermarking?

You are hired as a Database Administrator for Jennifer Shopping Cart Inc. You monitor the server health through the System Monitor and found that there is a sudden increase in the...

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an employee's computer?

Which of the following types of malware does not replicate itself but can spread only when the circumstances are beneficial?

Which of the following statements about reconnaissance is true?

You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a proj...

Which of the following tools will you use to prevent from session hijacking? Each correct answer represents a complete solution. Choose all that apply.

You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers ge...