GCIH Exam Questions

Which of the following programming languages are NOT vulnerable to buffer overflow attacks? Each correct answer represents a complete solution. Choose two.

Mark works as a Network Administrator for NetTech Inc. The network has 150 Windows 2000 Professional client computers and four Windows 2000 servers. All the client computers are ab...

Which of the following reads and writes data across network connections by using the TCP/IP protocol?

Which of the following terms describes an attempt to transfer DNS zone data?

Adam, a novice web user, is very conscious about the security. He wants to visit the Web site that is known to have malicious applets and code. Adam always makes use of a basic Web...

John works as a Penetration Tester in a security service providing firm named you-are-secure Inc. Recently, John's company has got a project to test the security of a promotional W...

John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the ite...

You send SYN packets with the exact TTL of the target system starting at port 1 and going up to port 1024 using hping2 utility. This attack is known as __________.

John works as a professional Ethical Hacker. He is assigned a project to test the security of are-secure network and intercept a conversation between two employees of the company t...

Adam works as a Security Administrator for the Umbrella Inc. A project has been assigned to him to strengthen the security policies of the company, including its password policies....

Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofi...

Which of the following malicious code can have more than one type of trigger, multiple task capabilities, and can replicate itself in more than one manner?

Which of the following can be used as a countermeasure against the SQL injection attack? Each correct answer represents a complete solution. Choose two.

You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to accomplish the task? Each correct answer represents a complete...

Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless pac...

John works as a professional Ethical Hacker. He has been assigned the project of testing the pre- attack phase: l Information gathering l Determining network range l Identifying ac...

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which ty...

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux- based network. The company is aware of various types of security attacks and wants to impe...

Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?

Which of the following netcat parameters makes netcat a listener that automatically restarts itself when a connection is dropped?

Which of the following tools can be used for network sniffing as well as for intercepting conversations through session hijacking?

You want to use PGP files for steganography. Which of the following tools will you use to accomplish the task?

Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or stop the traffic altogether?

Which of the following protocols is a maintenance protocol and is normally considered a part of the IP layer, but has also been used to conduct denial-of-service attacks?

to the CEO of the company. To secure these messages, she uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'...

Adam works as a Network administrator for Umbrella Inc. He noticed that an ICMP ECHO requests is coming from some suspected outside sources. Adam suspects that some malicious hacke...

You are the Security Consultant and have been hired to check security for a client's network. Your client has stated that he has many concerns but the most critical is the security...

Which of the following tasks can be performed by using netcat utility? Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements are correct about spoofing and session hijacking? Each correct answer represents a complete solution. Choose all that apply.

You work as a professional Ethical Hacker. You are assigned a project to test the security of Windows based. While you are installing the NetCat tool as a backdoor in the we-are-se...

Which of the following programs is used for bypassing normal authentication for securing remote access to a computer?

Which of the following statements is true about a Trojan engine?

Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. Choose all that apply.

Which of the following Linux rootkits allows an attacker to hide files, processes, and network connections? Each correct answer represents a complete solution. Choose all that appl...

John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking...

John works as a professional Ethical Hacker. He is assigned a project to test the security of Which of the following statements are true about rootkits? Each correct answer represe...

You enter the following URL on your Web browser: af../windows/system32/cmd.exe?/c+dir+c:\ What kind of attack are you performing?

A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation atta...

Which of the following attacking methods allows the bypassing of access control lists on servers or routers, either hiding a computer on a network or allowing it to impersonate ano...

Your IDS discovers that an intruder has gained access to your system. You immediately stop that access, change passwords for administrative accounts, and secure your network. You d...

Which of the following techniques does an attacker use to sniff data frames on a local area network and modify the traffic?

Brutus is a password cracking tool that can be used to crack the following authentications: l HTTP (Basic Authentication) l HTTP (HTML Form/CGI) l POP3 (Post Office Protocol v3) l...

You have forgotten your password of an online shop. The web application of that online shop asks you to enter your email so that they can send you a new password. You enter your em...

Maria works as a professional Ethical Hacker. She has been assigned the project of testing the Inc. In which of the following steps of malicious hacking does dumpster diving come u...

Which of the following types of attacks slows down or stops a server by overloading it with requests?

Session splicing is an IDS evasion technique in which an attacker delivers data in multiple small- sized packets to the target computer. Hence, it becomes very difficult for an IDS...

You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. You are working as a root user on the Linux operating system. Your company is...

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company uses Check Point SmartDefense to provide security to the network of th...

Which of the following types of attacks is targeting a Web server with multiple compromised computers that are simultaneously sending hundreds of FIN packets with spoofed IP source...

When you conduct the XMAS scanning using Nmap, you find that most of the ports scanned do not give a response. What can be the state of these ports?