GCIH Practice Test

GCIH Practice Test practice questions, page 4 of 34, with answer review and explanations.

Question 16

Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All computers run on Windows XP. Manager of the Sales department complains Adam about the unusual behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his computer overnight. Adam suspects that some malicious software or Trojans have been installed on the computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346, and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one application to run every time when Windows start. Which of the following is the most likely reason behind this issue?

  1. Cheops-ng is installed on the computer.
  2. Elsave is installed on the computer.
  3. NetBus is installed on the computer.
  4. NetStumbler is installed on the computer.

Question 17

Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the variable was designed to hold. Which of the following are the two popular types of buffer overflows? Each correct answer represents a complete solution. (Choose two.)

  1. Dynamic buffer overflows
  2. Stack based buffer overflow
  3. Heap based buffer overflow
  4. Static buffer overflows

Question 18

Which of the following are the primary goals of the incident handling team? Each correct answer represents a complete solution. (Choose all that apply.)

  1. Freeze the scene.
  2. Repair any damage caused by an incident.
  3. Prevent any further damage.
  4. Inform higher authorities.

Question 19

FILL BLANK - Fill in the blank with the appropriate word. StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use ______ defense against buffer overflow attacks.

Question 20

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

  1. Whishker
  2. Nessus
  3. SARA
  4. Nmap