GIAC GCIH Exam Questions (Updated 2023) 100% Real Question Answers
Pass GIAC GCIH Exam Quickly With iPassleader
To prepare for the GCIH exam, candidates should have a solid understanding of computer networks, operating systems, and security principles. They should also have experience with incident response, either through work experience or through training courses. GIAC offers a variety of training options for candidates, including self-paced study guides, online courses, and in-person training sessions. Candidates should plan to study for several months before taking the exam.
NEW QUESTION # 78
Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN. What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.
- A. Using ARP watch utility
- B. Using ARP Guard utility
- C. Using smash guard utility
- D. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets
- E. Using static ARP entries on servers, workstation and routers
Answer: A,B,D,E
NEW QUESTION # 79
You are the Administrator for a corporate network. You are concerned about denial of service attacks.
Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?
- A. Shorten the timeout for connection attempts.
- B. Implement network based antivirus.
- C. Place a honey pot in the DMZ.
- D. Implement a strong password policy.
Answer: A
Explanation:
Section: Volume B
NEW QUESTION # 80
Which of the following controls is described in the statement given below?
"It ensures that the enforcement of organizational security policy does not rely on voluntary web application user
compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of
security a user is operating at."
- A. Attribute-based Access Control
- B. Discretionary Access Control
- C. Mandatory Access Control
- D. Role-based Access Control
Answer: C
NEW QUESTION # 81
Firewalking is a technique that can be used to gather information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
- A. ICMP packets leaving the network should be allowed.
- B. An attacker should know the IP address of the last known gateway before the firewall.
- C. An attacker should know the IP address of a host located behind the firewall.
- D. There should be a backdoor installed on the network.
Answer: A,B,C
Explanation:
Section: Volume C
NEW QUESTION # 82
Which of the following protocol loggers is used to detect ping sweep?
- A. dpsl
- B. lppi
- C. pitl
- D. ippl
Answer: D
NEW QUESTION # 83
Which of the following attacks come under the category of layer 2 Denial-of-Service attacks?
Each correct answer represents a complete solution. Choose all that apply.
- A. Password cracking
- B. RF jamming attack
- C. Spoofing attack
- D. SYN flood attack
Answer: C,D
NEW QUESTION # 84
Brutus is a password cracking tool that can be used to crack the following authentications:
* HTTP (Basic Authentication)
* HTTP (HTML Form/CGI)
* POP3 (Post Office Protocol v3)
* FTP (File Transfer Protocol)
* SMB (Server Message Block)
* Telnet
Which of the following attacks can be performed by Brutus for password cracking?
Each correct answer represents a complete solution. Choose all that apply.
- A. Replay attack
- B. Dictionary attack
- C. Man-in-the-middle attack
- D. Brute force attack
- E. Hybrid attack
Answer: B,D,E
NEW QUESTION # 85
As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to retrieve as many different protocols as possible being used by the secureserver.com so that you could get the accurate knowledge about what services were being used by the secure server.com. Which of the following nmap switches have you used to accomplish the task?
- A. nmap -sT
- B. nmap -vO
- C. nmap -sO
- D. nmap -sS
Answer: C
NEW QUESTION # 86
You want to use PGP files for steganography. Which of the following tools will you use to accomplish the task?
- A. Blindside
- B. ImageHide
- C. Snow
- D. Stealth
Answer: D
Explanation:
Section: Volume C
NEW QUESTION # 87
Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
- A. UDP sacn
- B. TCP Connect scan
- C. Fin scan
- D. ACK scan
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 88
Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
- A. UDP sacn
- B. TCP Connect scan
- C. Fin scan
- D. ACK scan
Answer: B
NEW QUESTION # 89
Which of the following is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems, and fax machines?
- A. Wardialing
- B. Demon dialing
- C. Warkitting
- D. War driving
Answer: A
Explanation:
Section: Volume A
NEW QUESTION # 90
Maria works as a professional Ethical Hacker. She is assigned a project to test the security of www.we-are- secure.com. She wants to test a DoS attack on the We-are-secure server. She finds that the firewall of the server is blocking the ICMP messages, but it is not checking the UDP packets. Therefore, she sends a large amount of UDP echo request traffic to the IP broadcast addresses. These UDP requests have a spoofed source address of the We-are-secure server. Which of the following DoS attacks is Maria using to accomplish her task?
- A. Smurf DoS attack
- B. Fraggle DoS attack
- C. Teardrop attack
- D. Ping flood attack
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 91
Which of the following tools are used as a network traffic monitoring tool in the Linux operating
system?
Each correct answer represents a complete solution. Choose all that apply.
- A. MRTG
- B. IPTraf
- C. Ntop
- D. Netbus
Answer: A,B,C
NEW QUESTION # 92
Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?
- A. Ping of death attack
- B. Denial-of-Service (DoS) attack
- C. Buffer overflow attack
- D. Evasion attack
Answer: C
NEW QUESTION # 93
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare- secure.com. He installs a rootkit on the Linux server of the We-are-secure network. Which of the following statements are true about rootkits?
Each correct answer represents a complete solution. Choose all that apply.
- A. They allow an attacker to conduct a buffer overflow.
- B. They allow an attacker to replace utility programs that can be used to detect the attacker's activity.
- C. They allow an attacker to set a Trojan in the operating system and thus open a backdoor for anytime access.
- D. They allow an attacker to run packet sniffers secretly to capture passwords.
Answer: B,C,D
NEW QUESTION # 94
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare- secure.com. He enters a single quote in the input field of the login page of the We-are-secure Web site and receives the following error message:
Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'
This error message shows that the We-are-secure Website is vulnerable to __________.
- A. An XSS attack
- B. A Denial-of-Service attack
- C. A SQL injection attack
- D. A buffer overflow
Answer: C
Explanation:
Section: Volume C
NEW QUESTION # 95
Mark works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network.
The company uses Check Point SmartDefense to provide security to the network. Mark uses SmartDefense on the HTTP servers of the company to fix the limitation for the maximum response header length. Which of the following attacks can be blocked by defining this limitation?
- A. HTR Overflow worms and mutations
- B. Shoulder surfing attack
- C. Melissa virus attack
- D. Ramen worm attack
Answer: A
NEW QUESTION # 96
......
Real GIAC GCIH Exam Questions [Updated 2023]: https://www.ipassleader.com/GIAC/GCIH-practice-exam-dumps.html
Prepare GCIH Question Answers - GCIH Exam Dumps: https://drive.google.com/open?id=1OHVaulIwvnMnVun7ByMgynRhvK5zxbpG