GCIH Exam Questions

Which of the following is designed to protect the Internet resolvers (clients) from forged DNS data created by DNS cache poisoning?

You work as a System Engineer for Cyber World Inc. Your company has a single Active Directory domain. All servers in the domain run Windows Server 2008. The Microsoft Hyper-V serve...

You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick inst...

Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?

Which of the following attacks is specially used for cracking a password?

You run the following bash script in Linux: for i in 'cat hostlist.txt' ;do nc -q 2 -v $i 80 < request.txt done Where, hostlist.txt file contains the list of IP addresses and reque...

The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook's preview pane. The Klez worm gathers email addresses...

Website and stolen the bank account information of its users and their credit card numbers by using the SQL injection attack. Now, John wants to sell this information to malicious...

Which of the following DoS attacks affects mostly Windows computers by sending corrupt UDP packets?

Who are the primary victims of smurf attacks on the contemporary Internet system?

Which of the following tools can be used for stress testing of a Web server? Each correct answer represents a complete solution. Choose two.

An attacker sends a large number of packets to a target computer that causes denial of service. Which of the following type of attacks is this?

Which of the following statements about a Trojan horse are true? Each correct answer represents a complete solution. Choose two.

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

You run the following command while using Nikto Web scanner: perl nikto.pl -h 192.168.0.1 -p 443 What action do you want to perform?

Which of the following tools can be used to perform brute force attack on a remote database? Each correct answer represents a complete solution. Choose all that apply.

Which of the following commands can be used for port scanning?

Which of the following tools can be used for steganography? Each correct answer represents a complete solution. Choose all that apply.

Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism? Each correct answer represents a complete solution. Choose two.

Adam, a malicious hacker performs an exploit, which is given below: ##################################################### $port = 53; # Spawn cmd.exe on port X $your = "192.168.1.1...

Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and proced...

In which of the following attacking methods does an attacker distribute incorrect IP address?

You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security o...

Which of the following statements are true about session hijacking? Each correct answer represents a complete solution. Choose all that apply.

Your network is being flooded by ICMP packets. When you trace them down they come from multiple different IP addresses. What kind of attack is this?

Adam works as a Security administrator for Umbrella Inc. He runs the following traceroute and notices that hops 19 and 20 both show the same IP address. 1 172.16.1.254 (172.16.1.25...

Your friend plans to install a Trojan on your computer. He knows that if he gives you a new version of chess.exe, you will definitely install the game on your computer. He picks up...

Victor works as a professional Ethical Hacker for SecureEnet Inc. He has been assigned a job to test an image, in which some secret information is hidden, using Steganography. Vict...

Which of the following is the process of comparing cryptographic hash functions of system executables and configuration files?

Which of the following are open-source vulnerability scanners?

Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to...

Which of the following statements is true about the difference between worms and Trojan horses?

Which of the following is executed when a predetermined event occurs?

Adam, a malicious hacker purposely sends fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65,536 bytes. On the basis of abo...

As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to r...

Which of the following nmap command parameters is used for TCP SYN port scanning?

In which of the following attacks does an attacker create the IP packets with a forged (spoofed) source IP address with the purpose of concealing the identity of the sender or impe...

Which of the following viruses/worms uses the buffer overflow attack?

Which of the following techniques is used when a system performs the penetration testing with the objective of accessing unauthorized information residing inside a computer?

Mark works as a Network Administrator for Perfect Inc. The company has both wired and wireless networks. An attacker attempts to keep legitimate users from accessing services that...

Which of the following functions in c/c++ can be the cause of buffer overflow? Each correct answer represents a complete solution. Choose two.

You work as a System Administrator in SunSoft Inc. You are running a virtual machine on Windows Server 2003. The virtual machine is protected by DPM. Now, you want to move the virt...

In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can h...

Which of the following types of malware can an antivirus application disable and destroy? Each correct answer represents a complete solution. Choose all that apply.

Which of the following penetration testing phases involves reconnaissance or data gathering?

You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it i...

Which of the following tools uses common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures of the rootkits?

Which of the following rootkits is used to attack against full disk encryption systems?

Which of the following statements are true about Dsniff? Each correct answer represents a complete solution. Choose two.

Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?