GCIH Practice Test

GCIH Practice Test practice questions, page 28 of 34, with answer review and explanations.

Question 136

Which of the following statements about Ping of Death attack is true?

  1. In this type of attack, a hacker sends more traffic to a network address than the buffer can handle.
  2. This type of attack uses common words in either upper or lower case to find a password.
  3. In this type of attack, a hacker maliciously cuts a network cable.
  4. In this type of attack, a hacker sends ICMP packets greater than 65,536 bytes to crash a system.

Question 137

Which of the following can be used as a Trojan vector to infect an information system? Each correct answer represents a complete solution. (Choose all that apply.)

  1. NetBIOS remote installation
  2. Any fake executable
  3. Spywares and adware
  4. ActiveX controls, VBScript, and Java scripts

Question 138

Which of the following tools can be used as penetration tools in the Information system auditing process? Each correct answer represents a complete solution. (Choose two.)

  1. Nmap
  2. Snort
  3. SARA
  4. Nessus

Question 139

You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and flooding it. What is this called?

  1. Syn flood
  2. Blue jacking
  3. Smurf attack
  4. IP spoofing

Question 140

What is the purpose of configuring a password protected screen saver on a computer?

  1. For preventing unauthorized access to a system.
  2. For preventing a system from a Denial of Service (DoS) attack.
  3. For preventing a system from a social engineering attack.
  4. For preventing a system from a back door attack.