GCIH Practice Test practice questions, page 8 of 34, with answer review and explanations.
Question 36
Which of the following refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system?
Piggybacking
Hacking
Session hijacking
Keystroke logging
Question 37
Which of the following malicious software travels across computer networks without the assistance of a user?
Worm
Virus
Hoax
Trojan horses
Question 38
What is the major difference between a worm and a Trojan horse?
A worm spreads via e-mail, while a Trojan horse does not.
A worm is a form of malicious program, while a Trojan horse is a utility.
A worm is self replicating, while a Trojan horse is not.
A Trojan horse is a malicious program, while a worm is an anti-virus software.
Question 39
Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to test the network security of the company. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a company's icon to mark the progress of the test. Adam successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access. How was security compromised and how did the firewall respond?
The attack was social engineering and the firewall did not detect it.
Security was not compromised as the webpage was hosted internally.
The attack was Cross Site Scripting and the firewall blocked it.
Security was compromised as keylogger is invisible for firewall.
Question 40
You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 Active Directory-based single domain single forest network. The company has three Windows 2008 file servers, 150 Windows XP Professional, thirty UNIX-based client computers. The network users have identical user accounts for both Active Directory and the UNIX realm. You want to ensure that the UNIX clients on the network can access the file servers. You also want to ensure that the users are able to access all resources by logging on only once, and that no additional software is installed on the UNIX clients. What will you do to accomplish this task? Each correct answer represents a part of the solution. (Choose two.)
Configure a distributed file system (Dfs) on the file server in the network.
Enable the Network File System (NFS) component on the file servers in the network.
Configure ADRMS on the file servers in the network.
Enable User Name Mapping on the file servers in the network.