GCIH Practice Test

GCIH Practice Test practice questions, page 6 of 34, with answer review and explanations.

Question 26

You have configured a virtualized Internet browser on your Windows XP professional computer. Using the virtualized Internet browser, you can protect your operating system from which of the following?

  1. Brute force attack
  2. Mail bombing
  3. Distributed denial of service (DDOS) attack
  4. Malware installation from unknown Web sites

Question 27

Which of the following statements about Denial-of-Service (DoS) attack are true? Each correct answer represents a complete solution. (Choose three.)

  1. It disrupts services to a specific computer.
  2. It changes the configuration of the TCP/IP protocol.
  3. It saturates network resources.
  4. It disrupts connections between two computers, preventing communications between services.

Question 28

You see the career section of a company's Web site and analyze the job profile requirements. You conclude that the company wants professionals who have a sharp knowledge of Windows server 2003 and Windows active directory installation and placement. Which of the following steps are you using to perform hacking?

  1. Scanning
  2. Covering tracks
  3. Reconnaissance
  4. Gaining access

Question 29

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are-secure Website login page from the SQL injection attack?

  1. Use the escapeshellarg() function
  2. Use the session_regenerate_id() function
  3. Use the mysql_real_escape_string() function for escaping input
  4. Use the escapeshellcmd() function

Question 30

You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correct password is found. Which type of attack is this?

  1. Denial-of-Service
  2. Man-in-the-middle
  3. Brute Force
  4. Vulnerability