GCIH Exam Questions

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

In which of the following attacks does an attacker use packet sniffing to read network traffic between two parties to steal the session cookie?

Which of the following rootkits adds additional code or replaces portions of an operating system, including both the kernel and associated device drivers?

Which of the following types of scan does not open a full TCP connection?

Which of the following statements about smurf is true?

Which of the following tools is used for port scanning?

John works as a Professional Ethical Hacker for NetPerfect Inc. The company has a Linux-based network. All client computers are running on Red Hat 7.0 Linux. The Sales Manager of t...

Which of the following steps can be taken as countermeasures against sniffer attacks? Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements about threats are true? Each correct answer represents a complete solution. Choose all that apply.

Which of the following provides packet-level encryption between hosts in a LAN?

Which of the following attacks allows an attacker to retrieve crucial information from a Web server's database?

Which of the following IP packet elements is responsible for authentication while using IPSec?

Which of the following techniques can be used to map 'open' or 'pass through' ports on a gateway?

Which of the following is used to gather information about a remote network protected by a firewall?

Which of the following hacking tools provides shell access over ICMP?

Which of the following threats is a combination of worm, virus, and Trojan horse characteristics?

Which of the following applications automatically calculates cryptographic hashes of all key system files that are to be monitored for modifications?

Which of the following types of channels is used by Trojans for communication?

Which of the following is a method of gaining access to a system that bypasses normal authentication?

Which of the following are the rules by which an organization operates?

Which of the following steps of incident response is steady in nature?

Which of the following incident response team members ensures that the policies of the organization are enforced during the incident response?

Which of the following ensures that the investigation process of incident response team does not break any laws during the response to an incident?

Which of the following are used to identify who is responsible for responding to an incident?

Which of the following applications is NOT used for passive OS fingerprinting?

Which of the following is a process of searching unauthorized modems?

Which of the following is used to determine the range of IP addresses that are mapped to a live hosts?

Which of the following options scans the networks for vulnerabilities regarding the security of a network?

Which of the following protocol loggers is used to detect ping sweep?

Which of the following is the Web 2.0 programming methodology that is used to create Web pages that are dynamic and interactive?

Which of the following strategies allows a user to limit access according to unique hardware information supplied by a potential client?

OutGuess is used for __________ attack.

Which of the following protocols uses only User Datagram Protocol (UDP)?

Which of the following describes network traffic that originates from the inside of a network perimeter and progresses towards the outside?

Adam works as an Incident Handler for Umbrella Inc. He has been sent to the California unit to train the members of the incident response team. As a demo project he asked members o...

Adam, a novice computer user, works primarily from home as a medical professional. He just bought a brand new Dual Core Pentium computer with over 3 GB of RAM. After about two mont...

Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

Which of the following types of attack can guess a hashed password?

In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to the target system?

Adam has installed and configured his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filte...

Which of the following is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers,...

Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

Which of the following statements are true about tcp wrappers? Each correct answer represents a complete solution. Choose all that apply.

Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?

John works as a professional Ethical Hacker. He has been assigned the project of testing the attacks. As a countermeasure, he suggests that the Network Administrator should remove...

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets...

Adam works as a sales manager for Umbrella Inc. He wants to download software from the Internet. As the software comes from a site in his untrusted zone, Adam wants to ensure that...

Maria works as a professional Ethical Hacker. She is assigned a project to test the security of that the firewall of the server is blocking the ICMP messages, but it is not checkin...

Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an ente...

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?