Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the GIAC Security Administration GCIH Questions and answers with ValidTests

Exam GCIH All Questions
Exam GCIH Premium Access

View all detail and faqs for the GCIH exam

Viewing page 8 out of 10 pages
Viewing questions 71-80 out of questions
Questions # 71:

John works as a C programmer. He develops the following C program:

#include

#include

#include

int buffer(char *str) {

char buffer1[10];

strcpy(buffer1, str);

return 1;

}

int main(int argc, char *argv[]) {

buffer (argv[1]);

printf("Executed\n");

return 1;

}

His program is vulnerable to a __________ attack.

Options:

A.

SQL injection

B.

Denial-of-Service

C.

Buffer overflow

D.

Cross site scripting

Expert Solution
Questions # 72:

Which of the following attacks involves multiple compromised systems to attack a single target?

Options:

A.

Brute force attack

B.

Replay attack

C.

Dictionary attack

D.

DDoS attack

Expert Solution
Questions # 73:

In which of the following attacks does an attacker use packet sniffing to read network traffic between two parties to steal the session cookie?

Options:

A.

Session fixation

B.

Cross-site scripting

C.

Session sidejacking

D.

ARP spoofing

Expert Solution
Questions # 74:

Which of the following HTTP requests is the SQL injection attack?

Options:

A.

http://www.xsecurity.com/cgiin/bad.cgi?foo=..%fc%80%80%80%80%af../bin/ls%20-al

B.

http://www.victim.com/example?accountnumber=67891 &creditamount=999999999

C.

http://www.myserver.com/search.asp?lname=adam%27%3bupdate%20usertable%20set% 20pass wd%3d %27hCx0r%27%3b--%00

D.

http://www.myserver.com/script.php?mydata=%3cscript%20src=%22http%3a%2f%

2fwww.yourser ver.c0m %2fbadscript.js%22%3e%3c%2fscript%3e

Expert Solution
Questions # 75:

Firekiller 2000 is an example of a __________.

Options:

A.

Security software disabler Trojan

B.

DoS attack Trojan

C.

Data sending Trojan

D.

Remote access Trojan

Expert Solution
Questions # 76:

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:

nmap -PN -p- -sI IP_Address_of_Company_Server

He analyzes that the server's TCP ports 21, 25, 80, and 111 are open.

Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?

Options:

A.

Non-disclosure agreement

B.

Antivirus policy

C.

Acceptable use policy

D.

Audit policy

Expert Solution
Questions # 77:

Which of the following statements are true about Dsniff?

Each correct answer represents a complete solution. Choose two.

Options:

A.

It contains Trojans.

B.

It is a virus.

C.

It is antivirus.

D.

It is a collection of various hacking tools.

Expert Solution
Questions # 78:

Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered only when the algorithm compares the changed cover with the original cover.

Which of the following Steganography methods is Victor using to accomplish the task?

Options:

A.

The distortion technique

B.

The spread spectrum technique

C.

The substitution technique

D.

The cover generation technique

Expert Solution
Questions # 79:

Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?

Options:

A.

Library rootkit

B.

Kernel level rootkit

C.

Hypervisor rootkit

D.

Boot loader rootkit

Expert Solution
Questions # 80:

Which of the following malicious code can have more than one type of trigger, multiple task capabilities, and can replicate itself in more than one manner?

Options:

A.

Macro virus

B.

Blended threat

C.

Trojan

D.

Boot sector virus

Expert Solution
Viewing page 8 out of 10 pages
Viewing questions 71-80 out of questions