The Refresh Guide To GCIH Dumps

NEW QUESTION 1
Mark works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company uses Check Point SmartDefense to provide security to the network. Mark uses SmartDefense on the HTTP servers of the company to fix the limitation for the maximum response header length. Which of the following attacks can be blocked by defining this limitation?

• A. HTR Overflow worms and mutations
• B. Ramen worm attack
• C. Melissa virus attack
• D. Shoulder surfing attack

Answer: A

NEW QUESTION 2
Which of the following HTTP requests is the SQL injection attack?

• A. http://www.xsecurity.com/cgiin/bad.cgi?foo=..%fc%80%80%80%80%af../bin/ls%20-al
• B. http://www.victim.com/example?accountnumber=67891&creditamount=999999999
• C. http://www.myserver.com/search.asp?lname=adam%27%3bupdate%20usertable%20set% 20pass wd%3d %27hCx0r%27%3b--%00
• D. http://www.myserver.com/script.php?mydata=%3cscript%20src=%22http%3a%2f% 2fwww.yourser ver.c0m %2fbadscript.js%22%3e%3c%2fscript%3e

Answer: C

NEW QUESTION 3
Which of the following methods can be used to detect session hijacking attack?

• A. nmap
• B. Brutus
• C. ntop
• D. sniffer

Answer: D

NEW QUESTION 4
You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution?
Each correct answer represents a part of the solution. Choose all that apply.

• A. Eradication
• B. Contamination
• C. Preparation
• D. Recovery
• E. Identification

Answer: ABD

NEW QUESTION 5
In which of the following attacking methods does an attacker distribute incorrect IP address?

• A. IP spoofing
• B. Mac flooding
• C. DNS poisoning
• D. Man-in-the-middle

Answer: C

NEW QUESTION 6
You work as a System Administrator for Happy World Inc. Your company has a server named uC1 that runs Windows Server 2008. The Windows Server virtualization role service is installed on the uC1 server which hosts one virtual machine that also runs Windows Server 2008. You are required to install a new application on the virtual machine. You need to ensure that in case of a failure of the application installation, you are able to quickly restore the virtual machine to its original state.
Which of the following actions will you perform to accomplish the task?

• A. Use the Virtualization Management Console to save the state of the virtual machine.
• B. Log on to the virtual host and create a new dynamically expanding virtual hard disk.
• C. Use the Virtualization Management Console to create a snapshot of the virtual machine.
• D. Use the Edit Virtual Hard Disk Wizard to copy the virtual hard disk of the virtual machine.

Answer: C

NEW QUESTION 7
Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN. What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.

• A. Using smash guard utility
• B. Using ARP Guard utility
• C. Using static ARP entries on servers, workstation and routers
• D. Using ARP watch utility
• E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets

Answer: BCDE

NEW QUESTION 8
Which of the following statements is true about a Trojan engine?

• A. It limits the system resource usage.
• B. It specifies the signatures that keep a watch for a host or a network sending multiple packets to a single host or a single network.
• C. It specifies events that occur in a related manner within a sliding time interval.
• D. It analyzes the nonstandard protocols, such as TFN2K and BO2K.

Answer: D

NEW QUESTION 9
Which of the following techniques does an attacker use to sniff data frames on a local area network and modify the traffic?

• A. MAC spoofing
• B. IP address spoofing
• C. Email spoofing
• D. ARP spoofing

Answer: D

NEW QUESTION 10
Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

• A. Gathering private and public IP addresses
• B. Collecting employees information
• C. Banner grabbing
• D. Performing Neotracerouting

Answer: D

NEW QUESTION 11
5.2.92:4079<-----RST/ACK----------192.5.2.110:23
Which of the following types of port scan is Adam running?

• A. ACK scan
• B. FIN scan
• C. XMAS scan
• D. Idle scan

Answer: B

NEW QUESTION 12
Which of the following types of attacks is mounted with the objective of causing a negative impact on the performance of a computer or network?

• A. Vulnerability attack
• B. Man-in-the-middle attack
• C. Denial-of-Service (DoS) attack
• D. Impersonation attack

Answer: C

NEW QUESTION 13
Which of the following is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems, and fax machines?

• A. Demon dialing
• B. Warkitting
• C. War driving
• D. Wardialing

Answer: D

NEW QUESTION 14
Which of the following statements about reconnaissance is true?

• A. It describes an attempt to transfer DNS zone data.
• B. It is a computer that is used to attract potential intruders or attackers.
• C. It is any program that allows a hacker to connect to a computer without going through the normal authentication process.
• D. It is also known as half-open scanning.

Answer: A

NEW QUESTION 15
Which of the following services CANNOT be performed by the nmap utility?
Each correct answer represents a complete solution. Choose all that apply.

• A. Passive OS fingerprinting
• B. Sniffing
• C. Active OS fingerprinting
• D. Port scanning

Answer: AB

NEW QUESTION 16
......