GCIH Practice Test

GCIH Practice Test practice questions, page 24 of 34, with answer review and explanations.

Question 116

Which of the following types of malware can an antivirus application disable and destroy? Each correct answer represents a complete solution. (Choose all that apply.)

  1. Rootkit
  2. Trojan
  3. Crimeware
  4. Worm
  5. Adware
  6. Virus

Question 117

Which of the following penetration testing phases involves reconnaissance or data gathering?

  1. Attack phase
  2. Pre-attack phase
  3. Post-attack phase
  4. Out-attack phase

Question 118

You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution? Each correct answer represents a part of the solution. (Choose all that apply.)

  1. Eradication
  2. Contamination
  3. Preparation
  4. Recovery
  5. Identification

Question 119

FILL BLANK - Fill in the blank with the appropriate name of the rootkit. A _______ rootkit uses device or platform firmware to create a persistent malware image.

Question 120

FILL BLANK - Fill in the blank with the appropriate term. ______ is a free Unix subsystem that runs on top of Windows.