GCIH Practice Test

GCIH Practice Test practice questions, page 5 of 34, with answer review and explanations.

Question 21

Which of the following statements are true about a keylogger? Each correct answer represents a complete solution. (Choose all that apply.)

  1. It records all keystrokes on the victim's computer in a predefined log file.
  2. It can be remotely installed on a computer system.
  3. It is a software tool used to trace all or specific activities of a user on a computer.
  4. It uses hidden code to destroy or scramble data on the hard disk.

Question 22

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is as follows: C:\whisker.pl -h target_IP_address -- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - = = Host: target_IP_address = Server: Apache/1.3.12 (Win32) ApacheJServ/1.1 mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22 + 200 OK: HEAD /cgi-bin/printenv John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server. Which of the following statements about 'Printenv' vulnerability are true? Each correct answer represents a complete solution. (Choose all that apply.)

  1. This vulnerability helps in a cross site scripting attack.
  2. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the attacker.
  3. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
  4. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.

Question 23

Which of the following statements about buffer overflow is true?

  1. It manages security credentials and public keys for message encryption.
  2. It is a collection of files used by Microsoft for software updates released between major service pack releases.
  3. It is a condition in which an application receives more data than it is configured to accept.
  4. It is a false warning about a virus.

Question 24

Which of the following commands is used to access Windows resources from Linux workstation?

  1. mutt
  2. scp
  3. rsync
  4. smbclient

Question 25

Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans would be most accurate and reliable?

  1. UDP sacn
  2. TCP Connect scan
  3. ACK scan
  4. Fin scan