[May 14, 2022] Passing Key To Getting GCIH Certified Exam Engine PDF [Q115-Q135]

NEW QUESTION 115
Which of the following types of channels is used by Trojans for communication?

NEW QUESTION 116
Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform.
Which of the following steps should Adam take to overcome this problem with the least administrative effort?

NEW QUESTION 117
Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows-based network. Jason successfully enters the target system remotely by using the advantage of vulnerability. He places a Trojan to maintain future access and then disconnects the remote session. The employees of the company complain to Mark, who works as a Professional Ethical Hacker for DataSoft Inc., that some computers are very slow. Mark diagnoses the network and finds that some irrelevant log files and signs of Trojans are present on the computers. He suspects that a malicious hacker has accessed the network. Mark takes the help from Forensic Investigators and catches Jason.
Which of the following mistakes made by Jason helped the Forensic Investigators catch him?

NEW QUESTION 118
You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?

NEW QUESTION 119
Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to test the network
security of the company. He created a webpage to discuss the progress of the tests with employees who were
interested in following the test. Visitors were allowed to click on a company’s icon to mark the progress of the test.
Adam successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the
network well and allows strict Internet access.
How was security compromised and how did the firewall respond?

NEW QUESTION 120
Which of the following incident response team members ensures that the policies of the organization are enforced during the incident response?

NEW QUESTION 121
Mark works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The
company uses Check Point SmartDefense to provide security to the network. Mark uses SmartDefense on the HTTP
servers of the company to fix the limitation for the maximum response header length. Which of the following attacks
can be blocked by defining this limitation?

NEW QUESTION 122
Which of the following functions in c/c++ can be the cause of buffer overflow?
Each correct answer represents a complete solution. Choose two.

NEW QUESTION 123
You have forgotten your password of an online shop. The web application of that online shop asks you to enter your email so that they can send you a new password. You enter your email [email protected]
And press the submit button.
The Web application displays the server error. What can be the reason of the error?

NEW QUESTION 124
You have forgotten your password of an online shop. The web application of that online shop asks you to enter your
email so that they can send you a new password. You enter your email
[email protected]’ and press the submit button. The Web application displays the server error. What can be the reason
of the error?

NEW QUESTION 125
John works as a Penetration Tester in a security service providing firm named you-are-secure Inc. Recently, John’s company has got a project to test the security of a promotional Website www.missatlanta.com and assigned the pen-testing work to John. When John is performing penetration testing, he inserts the following script in the search box at the company home page:
<script>alert(‘Hi, John’)</script>
After pressing the search button, a pop-up box appears on his screen with the text – “Hi, John.” Which of the following attacks can be performed on the Web site tested by john while considering the above scenario?

NEW QUESTION 126
Which of the following statements are correct about spoofing and session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 127
You check performance logs and note that there has been a recent dramatic increase in the amount of broadcast
traffic. What is this most likely to be an indicator of?

NEW QUESTION 128
In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to the target system?

NEW QUESTION 129
Which of the following procedures is designed to enable security personnel to identify, mitigate, and recover from
malicious computer incidents, such as unauthorized access to a system or data, denialof-service, or unauthorized
changes to system hardware, software, or data?

NEW QUESTION 130
Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

NEW QUESTION 131
Against which of the following does SSH provide protection?
Each correct answer represents a complete solution. Choose two.

NEW QUESTION 132
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network.
The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company’s Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:
nmap -PN -p- -sI IP_Address_of_Company_Server
He analyzes that the server’s TCP ports 21, 25, 80, and 111 are open.
Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?

NEW QUESTION 133
You are the Administrator for a corporate network. You are concerned about denial of service attacks.
Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?

NEW QUESTION 134
You want to add a netbus Trojan in the chess.exe game program so that you can gain remote access to a friend’s computer. Which of the following tools will you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 135
Which of the following characters will you use to check whether an application is vulnerable to an SQL injection attack?