GCIH Practice Test

GCIH Practice Test practice questions, page 9 of 34, with answer review and explanations.

Question 41

Which of the following methods can be used to detect session hijacking attack?

  1. nmap
  2. Brutus
  3. ntop
  4. sniffer

Question 42

Adam works as a Network Administrator for PassGuide Inc. He wants to prevent the network from DOS attacks. Which of the following is most useful against DOS attacks?

  1. SPI
  2. Distributive firewall
  3. Honey Pot
  4. Internet bot

Question 43

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except the ports that must be used. He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about the programs like Hping2 that can get into a network through covert channels. Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?

  1. Block all outgoing traffic on port 21
  2. Block all outgoing traffic on port 53
  3. Block ICMP type 13 messages
  4. Block ICMP type 3 messages

Question 44

Which of the following are types of access control attacks? Each correct answer represents a complete solution. (Choose all that apply.)

  1. Spoofing
  2. Brute force attack
  3. Dictionary attack
  4. Mail bombing

Question 45

Which of the following attacks come under the category of layer 2 Denial-of-Service attacks? Each correct answer represents a complete solution. (Choose all that apply.)

  1. Spoofing attack
  2. SYN flood attack
  3. Password cracking
  4. RF jamming attack