GCIH Practice Test

GCIH Practice Test practice questions, page 33 of 34, with answer review and explanations.

Question 161

In which of the following methods does a hacker use packet sniffing to read network traffic between two parties to steal the session cookies?

  1. Cross-site scripting
  2. Physical accessing
  3. Session fixation
  4. Session sidejacking

Question 162

You work as a Network Administrator in the ABC Inc. The ABC Inc. is using Linux-based server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

  1. Brute force
  2. Replay
  3. XSS
  4. Cookie poisoning

Question 163

Which of the following are countermeasures to prevent unauthorized database access attacks? Each correct answer represents a complete solution. (Choose all that apply.)

  1. Session encryption
  2. Removing all stored procedures
  3. Applying strong firewall rules
  4. Input sanitization

Question 164

In which of the following attacks does an attacker spoof the source address in IP packets that are sent to the victim?

  1. Dos
  2. DDoS
  3. Backscatter
  4. SQL injection

Question 165

In which of the following steps of the incident handling processes does the Incident Handler make sure that all business processes and functions are back to normal and then also wants to monitor the system or processes to ensure that the system is not compromised again?

  1. Eradication
  2. Lesson Learned
  3. Recovery
  4. Containment