GCIH Practice Test

GCIH Practice Test practice questions, page 12 of 34, with answer review and explanations.

Question 56

Which of the following functions can be used as a countermeasure to a Shell Injection attack? Each correct answer represents a complete solution. (Choose all that apply.)

  1. escapeshellarg()
  2. mysql_real_escape_string()
  3. regenerateid()
  4. escapeshellcmd()

Question 57

Which of the following Nmap commands is used to perform a UDP port scan?

  1. nmap -sY
  2. nmap -sS
  3. nmap -sN
  4. nmap -sU

Question 58

You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network. What method would be best for finding such flaws?

  1. Manual penetration testing
  2. Code review
  3. Automated penetration testing
  4. Vulnerability scanning

Question 59

Your company has been hired to provide consultancy, development, and integration services for a company named Brainbridge International. You have prepared a case study to plan the upgrade for the company. Based on the case study, which of the following steps will you suggest for configuring WebStore1? Each correct answer represents a part of the solution. (Choose two.)

  1. Customize IIS 6.0 to display a legal warning page on the generation of the 404.2 and 404.3 errors.
  2. Move the WebStore1 server to the internal network.
  3. Configure IIS 6.0 on WebStore1 to scan the URL for known buffer overflow attacks.
  4. Move the computer account of WebStore1 to the Remote organizational unit (OU).

Question 60

Which of the following characters will you use to check whether an application is vulnerable to an SQL injection attack?

  1. Dash (-)
  2. Double quote (")
  3. Single quote (')
  4. Semi colon (;)