GCIH GIAC Exam Questions and Free Practice Test

Question 55

You discover that all available network bandwidth is being used by some unknown service. You discover that UDP packets are being used to connect the echo service on one machine to the chargen service on another machine. What kind of attack is this?

A. Smurf

B. Denial of Service

C. Evil Twin

D. Virus

Correct Answer:B

Question 56

Which of the following statements is true about the difference between worms and Trojan horses?

A. Trojan horses are a form of malicious codes while worms are not.

B. Trojan horses are harmful to computers while worms are not.

C. Worms can be distributed through emails while Trojan horses cannot.

D. Worms replicate themselves while Trojan horses do not.

Correct Answer:D

Question 57

Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.

A. tcp wrapper provides access control, host address spoofing, client username lookups, etc.

B. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server program directly.

C. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to filter for access control purposes.

D. tcp wrapper protects a Linux server from IP address spoofing.

Correct Answer:ABC

Question 58

Which of the following attacks allows an attacker to retrieve crucial information from a Web server's database?

A. Database retrieval attack

B. PHP injection attack

C. SQL injection attack

D. Server data attack

Correct Answer:C

Question 59

Which of the following are open-source vulnerability scanners?

A. Nessus

B. Hackbot

C. NetRecon

D. Nikto

Correct Answer:ABD

Question 60

Which of the following statements about Ping of Death attack is true?

A. In this type of attack, a hacker sends more traffic to a network address than the buffer can handle.

B. This type of attack uses common words in either upper or lower case to find a password.

C. In this type of attack, a hacker maliciously cuts a network cable.

D. In this type of attack, a hacker sends ICMP packets greater than 65,536 bytes to crash a system.

Correct Answer:D

START GCIH EXAM