GCIH Practice Test

GCIH Practice Test practice questions, page 16 of 34, with answer review and explanations.

Question 76

Which of the following attacks is specially used for cracking a password?

  1. PING attack
  2. Dictionary attack
  3. Vulnerability attack
  4. DoS attack

Question 77

You run the following bash script in Linux: for i in 'cat hostlist.txt' ;do nc -q 2 -v $i 80 < request.txt done Where hostlist.txt file contains the list of IP addresses and request.txt is the output file. Which of the following tasks do you want to perform by running this script?

  1. You want to put nmap in the listen mode to the hosts given in the IP address list.
  2. You want to perform banner grabbing to the hosts given in the IP address list.
  3. You want to perform port scanning to the hosts given in the IP address list.
  4. You want to transfer file hostlist.txt to the hosts given in the IP address list.

Question 78

The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook's preview pane. The Klez worm gathers email addresses from the entries of the default Windows Address Book (WAB). Which of the following registry values can be used to identify this worm?

  1. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
  2. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
  3. HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name = "file and pathname of the WAB file"
  4. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Question 79

John, a part-time hacker, has accessed in unauthorized way to the www.yourbank.com banking Website and stolen the bank account information of its users and their credit card numbers by using the SQL injection attack. Now, John wants to sell this information to malicious person Mark and make a deal to get a good amount of money. Since, he does not want to send the hacked information in the clear text format to Mark; he decides to send information in hidden text. For this, he takes a steganography tool and hides the information in ASCII text by appending whitespace to the end of lines and encrypts the hidden information by using the IDEA encryption algorithm. Which of the following tools is John using for steganography?

  1. Image Hide
  2. 2Mosaic
  3. Snow.exe
  4. Netcat

Question 80

Which of the following DoS attacks affects mostly Windows computers by sending corrupt UDP packets?

  1. Fraggle
  2. Ping flood
  3. Bonk
  4. Smurf