GCIH Practice Test

GCIH Practice Test practice questions, page 14 of 34, with answer review and explanations.

Question 66

Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-encrypted TCP/IP utility?

  1. Dictionary attack
  2. Session Hijacking
  3. Trojan horse
  4. Social Engineering

Question 67

Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his program neat and simple. His chooses to use printf(str) where he should have ideally used printf("%s", str). What attack will his program expose the Web application to?

  1. Format string attack
  2. Cross Site Scripting attack
  3. SQL injection attack
  4. Sequence++ attack

Question 68

Adam works as a sales manager for Umbrella Inc. He wants to download software from the Internet. As the software comes from a site in his untrusted zone, Adam wants to ensure that the downloaded software has not been Trojaned. Which of the following options would indicate the best course of action for Adam?

  1. Compare the file size of the software with the one given on the Website.
  2. Compare the version of the software with the one published on the distribution media.
  3. Compare the file's virus signature with the one published on the distribution.
  4. Compare the file's MD5 signature with the one published on the distribution media.

Question 69

Maria works as a professional Ethical Hacker. She is assigned a project to test the security of www.we-are-secure.com. She wants to test a DoS attack on the We-are-secure server. She finds that the firewall of the server is blocking the ICMP messages, but it is not checking the UDP packets. Therefore, she sends a large amount of UDP echo request traffic to the IP broadcast addresses. These UDP requests have a spoofed source address of the We-are-secure server. Which of the following DoS attacks is Maria using to accomplish her task?

  1. Ping flood attack
  2. Fraggle DoS attack
  3. Teardrop attack
  4. Smurf DoS attack

Question 70

Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise?

  1. Preparation phase
  2. Eradication phase
  3. Identification phase
  4. Recovery phase
  5. Containment phase