15 December, 2024

Improve GCIH Exam Prep For GIAC Certified Incident Handler Certification

Want to know Certleader GCIH Exam practice test features? Want to lear more about GIAC GIAC Certified Incident Handler certification experience? Study Download GIAC GCIH answers to Most up-to-date GCIH questions at Certleader. Gat a success with an absolute guarantee to pass GIAC GCIH (GIAC Certified Incident Handler) test on your first attempt.

Page: 1 / 27

Total 328 questions Full Exam Access

Question 1

Which of the following types of attacks is targeting a Web server with multiple compromised computers that are simultaneously sending hundreds of FIN packets with spoofed IP source IP addresses?

Evasion attack

Insertion attack

DDoS attack

Dictionary attack

Question 2

466 ms 16 0.so-3-0-0.XR1.MIA4.ALTER.
NET (152.63.101.41) 50.937 ms 49.005 ms 51.055 ms 17 117.ATM6- 0.GW5.MIA1.ALTER.NET (152.63.82.73) 51.897 ms 50.280 ms 53.647 ms 18 Exambiblegw1. customer.alter.net (65.195.239.14) 51.921 ms 51.571 ms 56.855 ms 19 www.Exambible.com (65.195.239.22) 52.191 ms 52.571 ms 56.855 ms 20 www.Exambible.com (65.195.239.22) 53.561 ms 54.121 ms 58.333 ms
Which of the following is the most like cause of this issue?

An application firewall

Intrusion Detection System

Network Intrusion system

A stateful inspection firewall

Question 3

Which of the following attacks saturates network resources and disrupts services to a specific computer?

Replay attack

Teardrop attack

Denial-of-Service (DoS) attack

Polymorphic shell code attack

Question 4

You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and flooding it. What is this called?

Syn flood

Blue jacking

Smurf attack

IP spoofing

Question 5

CORRECT TEXT
Fill in the blank with the appropriate name of the tool.
______ scans for rootkits by comparing SHA-1 hashes of important files with known good ones in online database.

Question 6

You are hired as a Database Administrator for Jennifer Shopping Cart Inc. You monitor the server health through the System Monitor and found that there is a sudden increase in the number of logins.
A case study is provided in the exhibit. Which of the following types of attack has occurred? (Click the Exhibit button on the toolbar to see the case study.)

Injection

Virus

Worm

Denial-of-service

Question 7

Which of the following statements are true about session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

Use of a long random number or string as the session key reduces session hijacking.

It is used to slow the working of victim's network resources.

TCP session hijacking is when a hacker takes over a TCP session between two machines.

It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.

Question 8

Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered only when the algorithm compares the changed cover with the original cover.
Which of the following Steganography methods is Victor using to accomplish the task?

The distortion technique

The spread spectrum technique

The substitution technique

The cover generation technique

Question 9

Which of the following virus is a script that attaches itself to a file or template?

Boot sector

Trojan horse

Macro virus

E-mail virus

Question 10

Which of the following is an Internet mapping technique that relies on various BGP collectors that collect information such as routing updates and tables and provide this information publicly?

AS Route Inference

Path MTU discovery (PMTUD)

AS PATH Inference

Firewalking

Question 11

Adam works as a Network Administrator for Exambible Inc. He wants to prevent the network from DOS attacks. Which of the following is most useful against DOS attacks?

SPI

Distributive firewall

Honey Pot

Internet bot

Question 12

Which of the following is the best method of accurately identifying the services running on a victim host?

Use of the manual method of telnet to each of the open ports.

Use of a port scanner to scan each port to confirm the services running.

Use of hit and trial method to guess the services and ports of the victim host.

Use of a vulnerability scanner to try to probe each port to verify which service is running.

Question 13

You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linux- based server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

Brute force

Replay

XSS

Cookie poisoning

Question 14

Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Adam assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs.
Which of the following types of attack is Adam performing?

Replay attack

MAC Spoofing attack

Caffe Latte attack

Network injection attack

Question 15

Which of the following attacks involves multiple compromised systems to attack a single target?

Brute force attack

Replay attack

Dictionary attack

DDoS attack

Question 16

John, a part-time hacker, has accessed in unauthorized way to the www.yourbank.com banking Website and stolen the bank account information of its users and their credit card numbers by using the SQL injection attack. Now, John wants to sell this information to malicious person Mark and make a deal to get a good amount of money. Since, he does not want to send the hacked information in the clear text format to Mark; he decides to send information in hidden text. For this, he takes a steganography tool and hides the information in ASCII text by appending whitespace to the end of lines and encrypts the hidden information by using the IDEA encryption algorithm. Which of the following tools is John using for steganography?

Image Hide

2Mosaic

Snow.exe

Netcat

Page: 1 / 27

Total 328 questions Full Exam Access