GISP Practice Test

GISP Practice Test practice questions, page 8 of 26, with answer review and explanations.

Question 36

John works as a professional Ethical Hacker. He has been assigned a project for testing the security of www.we-are-secure.com. He wants to corrupt an IDS signature database so that performing attacks on the server is made easy and he can observe the flaws in the We-are-secure server. To perform his task, he first of all sends a virus that continuously changes its signature to avoid detection from IDS. Since the new signature of the virus does not match the old signature, which is entered in the IDS signature database, IDS becomes unable to point out the malicious virus. Which of the following IDS evasion attacks is John performing?

  1. Session splicing attack
  2. Evasion attack
  3. Insertion attack
  4. Polymorphic shell code attack

Question 37

Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

  1. Teardrop attack
  2. Denial of Service attack
  3. Land attack
  4. Replay attack

Question 38

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He wants to perform a stealth scan to discover open ports and applications running on the We-are-secure server. For this purpose, he wants to initiate scanning with the IP address of any third party. Which of the following scanning techniques will John use to accomplish his task?

  1. RPC
  2. IDLE
  3. UDP
  4. TCP SYN/ACK

Question 39

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disable to ensure that the password is encrypted during remote access?

  1. SPAP
  2. MSCHAP V2
  3. PAP
  4. MSCHAP

Question 40

components? Each correct answer represents a complete solution. Choose three.

  1. Switches
  2. Bridges
  3. MAC addresses
  4. Hub