GCIH Practice Test

GCIH Practice Test practice questions, page 3 of 34, with answer review and explanations.

Question 11

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He finds that the We-are- secure server is vulnerable to attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.

  1. IIS buffer overflow
  2. NetBIOS NULL session
  3. SNMP enumeration
  4. DNS zone transfer

Question 12

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

  1. Non persistent
  2. Document Object Model (DOM)
  3. SAX
  4. Persistent

Question 13

Which of the following applications is an example of a data-sending Trojan?

  1. SubSeven
  2. Senna Spy Generator
  3. Firekiller 2000
  4. eBlaster

Question 14

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and successfully logs in to the user page of the Web site. The we-are-secure login page is vulnerable to a __________.

  1. Dictionary attack
  2. SQL injection attack
  3. Replay attack
  4. Land attack

Question 15

Which of the following statements are true about worms? Each correct answer represents a complete solution. (Choose all that apply.)

  1. Worms cause harm to the network by consuming bandwidth, whereas viruses almost always corrupt or modify files on a targeted computer.
  2. Worms can exist inside files such as Word or Excel documents.
  3. One feature of worms is keystroke logging.
  4. Worms replicate themselves from one system to another without using a host file.