GCIH Practice Test

GCIH Practice Test practice questions, page 25 of 34, with answer review and explanations.

Question 121

Which of the following tools uses common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures of the rootkits?

  1. rkhunter
  2. OSSEC
  3. chkrootkit
  4. Blue Pill

Question 122

Which of the following rootkits is used to attack against full disk encryption systems?

  1. Boot loader rootkit
  2. Library rootkit
  3. Hypervisor rootkit
  4. Kernel level rootkit

Question 123

Which of the following statements are true about Dsniff? Each correct answer represents a complete solution. Choose two.

  1. It contains Trojans.
  2. It is a virus.
  3. It is antivirus.
  4. It is a collection of various hacking tools.

Question 124

Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?

  1. Library rootkit
  2. Kernel level rootkit
  3. Hypervisor rootkit
  4. Boot loader rootkit

Question 125

You work as a Security Administrator for Net Perfect Inc. The company has a Windows-based network. You want to use a scanning technique which works as a reconnaissance attack. The technique should direct to a specific host or network to determine the services that the host offers. Which of the following scanning techniques can you use to accomplish the task?

  1. IDLE scan
  2. Nmap
  3. SYN scan
  4. Host port scan