Free GIAC Information Security GCIH Ultimate Study Guide (Updated 335 Questions)
Get to the Top with GCIH Practice Exam Questions
Conclusion
A candidate’s success in the GIAC GCIH evaluation is determined by his/her ability to combine different types of preparation materials and organize an effective training routine. Apart from following the exam blueprint, the test-takers will improve their chances to pass this test if they use the books available on Amazon and enroll in the official classes provided by the training provider.
What is the duration, language, and format of GCIH Exam
Format: Multiple choices, multiple answers
- Language: English
- Passing score: 73%
- Number of Questions: 150
- Length of Examination: 4 Hours
NEW QUESTION 173
Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?
- A. Library rootkit
- B. Boot loader rootkit
- C. Hypervisor rootkit
- D. Kernel level rootkit
Answer: A
Explanation:
Section: Volume B
NEW QUESTION 174
Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?
- A. Whishker
- B. SARA
- C. Nmap
- D. Nessus
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 175
In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to the target
system?
- A. Ping of death
- B. Fraggle
- C. Jolt
- D. Teardrop
Answer: A
NEW QUESTION 176
Many organizations create network maps of their network system to visualize the network and understand the relationship between the end devices and the transport layer that provide services.
Which of the following are the techniques used for network mapping by large organizations?
Each correct answer represents a complete solution. Choose three.
- A. Active Probing
- B. Packet crafting
- C. SNMP-based approaches
- D. Route analytics
Answer: A,C,D
NEW QUESTION 177
Which of the following provides packet-level encryption between hosts in a LAN?
- A. PFS
- B. Tunneling protocol
- C. PPTP
- D. IPsec
Answer: D
NEW QUESTION 178
Fill in the blank with the appropriate name of the tool.
______ scans for rootkits by comparing SHA-1 hashes of important files with known good ones in online database.
Answer:
Explanation:
rkhunter
NEW QUESTION 179
Which of the following strategies allows a user to limit access according to unique hardware information supplied by a
potential client?
- A. Extensible Authentication Protocol (EAP)
- B. MAC address filtering
- C. WEP
- D. Wireless Transport Layer Security (WTLS)
Answer: B
NEW QUESTION 180
Your network is being flooded by ICMP packets. When you trace them down they come from multiple different IP addresses. What kind of attack is this?
- A. DDOS
- B. Syn flood
- C. Ping storm
- D. Smurf attack
Answer: A
NEW QUESTION 181
You work as a Network Administrator for Marioxnet Inc. You have the responsibility of handling two routers with BGP protocol for the enterprise's network. One of the two routers gets flooded with an unexpected number of data packets, while the other router starves with no packets reaching it. Which of the following attacks can be a potential cause of this?
- A. Packet manipulation
- B. Eavesdropping
- C. Denial-of-Service
- D. Spoofing
Answer: C
Explanation:
Section: Volume B
NEW QUESTION 182
John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are- secure Website login page from the SQL injection attack?
- A. Use the escapeshellcmd() function
- B. Use the escapeshellarg() function
- C. Use the mysql_real_escape_string() function for escaping input
- D. Use the session_regenerate_id() function
Answer: C
Explanation:
Section: Volume A
Explanation/Reference:
NEW QUESTION 183
Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
- A. UDP sacn
- B. Fin scan
- C. ACK scan
- D. TCP Connect scan
Answer: D
NEW QUESTION 184
Which of the following protocols is a maintenance protocol and is normally considered a part of the IP layer, but has also been used to conduct denial-of-service attacks?
- A. ICMP
- B. L2TP
- C. NNTP
- D. TCP
Answer: A
NEW QUESTION 185
Which of the following virus is a script that attaches itself to a file or template?
- A. E-mail virus
- B. Macro virus
- C. Trojan horse
- D. Boot sector
Answer: B
NEW QUESTION 186
Which of the following statements about threats are true?
Each correct answer represents a complete solution. Choose all that apply.
- A. A threat is any circumstance or event with the potential of causing harm to a system in the form of destruction, disclosure, modification of data, or denial of service.
- B. A threat is a potential for violation of security which exists when there is a circumstance, capability, action, or event that could breach security and cause harm.
- C. A threat is a weakness or lack of safeguard that can be exploited by vulnerability, thus causing harm to the information systems or networks.
- D. A threat is a sequence of circumstances and events that allows a human or other agent to cause an information-related misfortune by exploiting vulnerability in an IT product.
Answer: A,B,D
NEW QUESTION 187
Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his program neat and simple. His chooses to use printf(str) where he should have ideally used printf("%s", str).
What attack will his program expose the Web application to?
- A. Format string attack
- B. Sequence++ attack
- C. Cross Site Scripting attack
- D. SQL injection attack
Answer: A
NEW QUESTION 188
You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 Active Directory-based single domain single forest network. The company has three Windows 2008 file servers,
150 Windows XP Professional, thirty UNIX-based client computers. The network users have identical user accounts for both Active Directory and the UNIX realm. You want to ensure that the UNIX clients on the network can access the file servers. You also want to ensure that the users are able to access all resources by logging on only once, and that no additional software is installed on the UNIX clients. What will you do to accomplish this task?
Each correct answer represents a part of the solution. Choose two.
- A. Enable User Name Mapping on the file servers in the network.
- B. Configure ADRMS on the file servers in the network.
- C. Enable the Network File System (NFS) component on the file servers in the network.
- D. Configure a distributed file system (Dfs) on the file server in the network.
Answer: A,C
NEW QUESTION 189
Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique
used to attack an Ethernet wired or wireless network. ARP spoofing may allow an attacker to sniff data frames on a
local area network (LAN), modify the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake
ARP messages to an Ethernet LAN. What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
- A. Using ARP Guard utility.
- B. Using ARP watch utility.
- C. Using smash guard utility.
- D. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets.
- E. Using static ARP entries on servers, workstation and routers.
Answer: A,B,D,E
NEW QUESTION 190
Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism?
Each correct answer represents a complete solution. Choose two.
- A. Ping of Death attack
- B. Land attack
- C. SYN flood attack
- D. Teardrop attack
Answer: A,D
Explanation:
Section: Volume A
NEW QUESTION 191
Against which of the following does SSH provide protection?
Each correct answer represents a complete solution. Choose two.
- A. Broadcast storm
- B. Password sniffing
- C. DoS attack
- D. IP spoofing
Answer: B,D
Explanation:
Section: Volume B
NEW QUESTION 192
Which of the following are the rules by which an organization operates?
- A. Acts
- B. Rules
- C. Manuals
- D. Policies
Answer: D
NEW QUESTION 193
Adam works as a Security administrator for Umbrella Inc. He runs the following traceroute and notices that hops 19
and 20 both show the same IP address.
1 172.16.1.254 (172.16.1.254) 0.724 ms 3.285 ms 0.613 ms 2 ip68-98-176-1.nv.nv.cox.net
(68.98.176.1) 12.169 ms 14.958 ms 13.416 ms 3 ip68-98-176-1.nv.nv.cox.net
(68.98.176.1) 13.948 ms ip68-100-0-1.nv.nv. cox.net (68.100.0.1) 16.743 ms 16.207 ms 4 ip68-100-0-137.nv.nv.cox.net
(68.100.0.137) 17.324 ms 13.933 ms 20.938 ms 5 68.1.1.4
(68.1.1.4) 12.439 ms 220.166 ms 204.170 ms
6 so-6-0-0.gar2.wdc1.Level3.net (67.29.170.1) 16.177 ms 25.943 ms 14.104 ms 7
unknown.Level3.net (209.247.9.173) 14.227 ms 17.553 ms 15.415 ms "PassGuide" - 8 so-0-1-
0.bbr1.NewYork1.level3.net (64.159.1.41) 17.063 ms 20.960 ms 19.512 ms 9 so-7-0-0.gar1. NewYork1.Level3.net
(64.159.1.182) 20.334 ms 19.440 ms 17.938 ms 10 so-4-0-0.edge1.NewYork1.Level3.
net (209.244.17.74) 27.526 ms 18.317 ms 21.202 ms 11 uunet-level3- oc48.NewYork1.Level3.net
(209.244.160.12) 21.411 ms 19.133 ms 18.830 ms 12 0.so-6-0-0.XL1.NYC4.ALTER.NET (152.63.21.78)
21.203 ms 22.670 ms 20.111 ms 13 0.so-2-0-0.TL1.NYC8.ALTER.NET (152.63.0.153) 30.929 ms 24.858 ms
23.108 ms 14 0.so-4-1-0.TL1.ATL5.ALTER.NET (152.63.10.129) 37.894 ms 33.244 ms
33.910 ms 15 0.so-7-0-0.XL1.MIA4.ALTER.NET (152.63.86.189) 51.165 ms 49.935 ms
49.466 ms 16 0.so-3-0-0.XR1.MIA4.ALTER.
NET (152.63.101.41) 50.937 ms 49.005 ms 51.055 ms 17 117.ATM6- 0.GW5.MIA1.ALTER.NET (152.63.82.73) 51.897
ms 50.280 ms 53.647 ms 18 PassGuidegw1. customer.alter.net (65.195.239.14) 51.921 ms 51.571 ms 56.855 ms 19
www.PassGuide.com (65.195.239.22) 52.191 ms 52.571 ms 56.855 ms 20 www.PassGuide.com (65.195.239.22)
53.561 ms 54.121 ms 58.333 ms
Which of the following is the most like cause of this issue?
- A. A stateful inspection firewall
- B. Network Intrusion system
- C. Intrusion Detection System
- D. An application firewall
Answer: A
NEW QUESTION 194
James works as a Database Administrator for Techsoft Inc. The company has a SQL Server 2005 computer. The
computer has a database named Sales. Users complain that the performance of the database has deteriorated. James
opens the System Monitor tool and finds that there is an increase in network traffic. What kind of attack might be the
cause of the performance deterioration ?
- A. Virus
- B. Injection
- C. Denial-of-Service
- D. Internal attack
Answer: C
NEW QUESTION 195
Which of the following rootkits adds additional code or replaces portions of an operating system, including both the kernel and associated device drivers?
- A. Library rootkit
- B. Boot loader rootkit
- C. Kernel level rootkit
- D. Hypervisor rootkit
Answer: C
NEW QUESTION 196
Which of the following Linux rootkits allows an attacker to hide files, processes, and network connections?
Each correct answer represents a complete solution. Choose all that apply.
- A. Adore
- B. Phalanx2
- C. Beastkit
- D. Knark
Answer: A,D
Explanation:
Section: Volume C
Explanation/Reference:
NEW QUESTION 197
Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the variable was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.
- A. Dynamic buffer overflows
- B. Static buffer overflows
- C. Stack based buffer overflow
- D. Heap based buffer overflow
Answer: C,D
NEW QUESTION 198
......
Pass GIAC GCIH exam - questions - convert Tets Engine to PDF: https://www.trainingdump.com/GIAC/GCIH-practice-exam-dumps.html
Use Real GCIH Dumps Free Sample Questions and Practice Test Engine : https://drive.google.com/open?id=1AaJR67TaQtiWOL_4iYuL_tpBQ3Laz2cv