ITExamDump을 선택함으로 100%인증시험을 패스하실 수 있습니다. 우리는GIAC GCIH시험의 갱신에 따라 최신의 덤프를 제공할 것입니다. ITExamDump에서는 무료로 24시간 온라인상담이 있으며, ITExamDump의 덤프로GIAC GCIH시험을 패스하지 못한다면 우리는 덤프전액환불을 약속 드립니다.
GIAC인증GCIH시험덤프공부자료는ITExamDump제품으로 가시면 자격증취득이 쉬워집니다. ITExamDump에서 출시한 GIAC인증GCIH덤프는 이미 사용한 분들에게 많은 호평을 받아왔습니다. 시험적중율 최고에 많은 공부가 되었다고 희소식을 전해올때마다 ITExamDump는 더욱 완벽한GIAC인증GCIH시험덤프공부자료로 수정하고기 위해 최선을 다해왔습니다. 최고품질으GIAC인증GCIH덤프공부자료는ITExamDump에서만 찾아볼수 있습니다.
ITExamDump의 GIAC인증 GCIH덤프의 무료샘플을 이미 체험해보셨죠? ITExamDump의 GIAC인증 GCIH덤프에 단번에 신뢰가 생겨 남은 문제도 공부해보고 싶지 않나요? ITExamDump는 고객님들의 시험부담을 덜어드리기 위해 가벼운 가격으로 덤프를 제공해드립니다. ITExamDump의 GIAC인증 GCIH로 시험패스하다 더욱 넓고 좋은곳으로 고고싱 하세요.
시험 번호/코드: GCIH
시험 이름: GIAC (GIAC Certified Incident Handler)
당신이 구입하기 전에 시도
일년동안 무료 업데이트
100% 환불보장약속
100% 합격율 보장
Q&A: 335 문항
업데이트: 2013-11-17
ITExamDump의GIAC GCIH시험자료의 문제와 답이 실제시험의 문제와 답과 아주 비슷합니다. 우리의 짧은 학습가이드로 빠른 시일 내에 관련지식을 터득하여 응시준비를 하게 합니다. 우리는 우리의GIAC GCIH인증시험덤프로 시험패스를 보장합니다.
ITExamDump 는 아주 우수한 IT인증자료사이트입니다. 우리ITExamDump에서 여러분은GIAC GCIH인증시험관련 스킬과시험자료를 얻을수 있습니다. 여러분은 우리ITExamDump 사이트에서 제공하는GIAC GCIH관련자료의 일부분문제와답등 샘플을 무료로 다운받아 체험해볼 수 있습니다. 그리고ITExamDump에서는GIAC GCIH자료구매 후 추후 업데이트되는 동시에 최신버전을 무료로 발송해드립니다. 우리는GIAC GCIH인증시험관련 모든 자료를 여러분들에서 제공할 것입니다. 우리의 IT전문 팀은 부단한 업계경험과 연구를 이용하여 정확하고 디테일 한 시험문제와 답으로 여러분을 어시스트 해드리겠습니다.
저희는 수많은 IT자격증시험에 도전해보려 하는 IT인사들께 편리를 가져다 드리기 위해 GIAC GCIH실제시험 출제유형에 근거하여 가장 퍼펙트한 시험공부가이드를 출시하였습니다. 많은 사이트에서 판매하고 있는 시험자료보다 출중한ITExamDump의 GIAC GCIH덤프는 실제시험의 거의 모든 문제를 적중하여 고득점으로 시험에서 한방에 패스하도록 해드립니다. GIAC GCIH시험은ITExamDump제품으로 간편하게 도전해보시면 후회없을 것입니다.
GCIH 덤프무료샘플다운로드하기: http://www.itexamdump.com/GCIH.html
NO.1 John works as a Professional Penetration Tester. He has been assigned a project to test the Website
security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a
username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure
Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve
the security of the we-are-secure Website login page from the SQL injection attack?
A. Use the escapeshellarg() function
B. Use the session_regenerate_id() function
C. Use the mysql_real_escape_string() function for escaping input
D. Use the escapeshellcmd() function
Answer: C
GIAC GCIH pdf GCIH시험문제 GCIH GCIH
NO.2 You see the career section of a company's Web site and analyze the job profile requirements. You
conclude that the company wants professionals who have a sharp knowledge of Windows server 2003
and Windows active directory installation and placement. Which of the following steps are you using to
perform hacking?
A. Scanning
B. Covering tracks
C. Reconnaissance
D. Gaining access
Answer: C
GIAC GCIH시험문제 GCIH GCIH덤프 GCIH
NO.3 In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to
the target system?
A. Ping of death
B. Jolt
C. Fraggle
D. Teardrop
Answer: A
GIAC GCIH GCIH
NO.4 Which of the following types of attack can guess a hashed password?
A. Brute force attack
B. Evasion attack
C. Denial of Service attack
D. Teardrop attack
Answer: A
GIAC덤프 GCIH GCIH dump GCIH GCIH
NO.5 Which of the following statements are true about a keylogger?
Each correct answer represents a complete solution. Choose all that apply.
A. It records all keystrokes on the victim's computer in a predefined log file.
B. It can be remotely installed on a computer system.
C. It is a software tool used to trace all or specific activities of a user on a computer.
D. It uses hidden code to destroy or scramble data on the hard disk.
Answer: A, B, C
GIAC시험문제 GCIH최신덤프 GCIH GCIH
NO.6 Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.
A. tcp wrapper provides access control, host address spoofing, client username lookups, etc.
B. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running
the server program directly.
C. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as
tokens to filter for access control purposes.
D. tcp wrapper protects a Linux server from IP address spoofing.
Answer: A, B, C
GIAC GCIH pdf GCIH dumps GCIH dumps
NO.7 Which of the following statements about buffer overflow is true?
A. It manages security credentials and public keys for message encryption.
B. It is a collection of files used by Microsoft for software updates released between major service pack
releases.
C. It is a condition in which an application receives more data than it is configured to accept.
D. It is a false warning about a virus.
Answer: C
GIAC pdf GCIH GCIH GCIH시험문제
NO.8 You have configured a virtualized Internet browser on your Windows XP professional computer. Using
the virtualized Internet browser, you can protect your operating system from which of the following?
A. Brute force attack
B. Mail bombing
C. Distributed denial of service (DDOS) attack
D. Malware installation from unknown Web sites
Answer: D
GIAC GCIH dumps GCIH시험문제
NO.9 Which of the following are the primary goals of the incident handling team?
Each correct answer represents a complete solution. Choose all that apply.
A. Freeze the scene.
B. Repair any damage caused by an incident.
C. Prevent any further damage.
D. Inform higher authorities.
Answer: A, B, C
GIAC GCIH GCIH GCIH
NO.10 Which of the following commands is used to access Windows resources from Linux workstation?
A. mutt
B. scp
C. rsync
D. smbclient
Answer: D
GIAC GCIH pdf GCIH GCIH자격증
NO.11 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The
output of the scanning test is as follows:
C:\whisker.pl -h target_IP_address
-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv
John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server.
Which of the following statements about 'Printenv' vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.
A. This vulnerability helps in a cross site scripting attack.
B. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the
attacker.
C. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
D. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other
malicious scripts.
Answer: A, C, D
GIAC시험문제 GCIH dumps GCIH인증 GCIH GCIH
NO.12 Adam works as an Incident Handler for Umbrella Inc. He has been sent to the California unit to train the
members of the incident response team. As a demo project he asked members of the incident response
team to perform the following actions:
Remove the network cable wires.
Isolate the system on a separate VLAN.
Use a firewall or access lists to prevent communication into or out of the system.
Change DNS entries to direct traffic away from compromised system.
Which of the following steps of the incident handling process includes the above actions?
A. Identification
B. Containment
C. Eradication
D. Recovery
Answer: B
GIAC GCIH시험문제 GCIH자격증 GCIH덤프
NO.13 Adam has installed and configured his wireless network. He has enabled numerous security features
such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless
router. Adam notices that when he uses his wireless connection, the speed is sometimes 16 Mbps and
sometimes it is only 8 Mbps or less. Adam connects to the management utility wireless router and finds
out that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the
router's logs and notices that the unfamiliar machine has the same MAC address as his laptop.
Which of the following attacks has been occurred on the wireless network of Adam?
A. NAT spoofing
B. DNS cache poisoning
C. MAC spoofing
D. ARP spoofing
Answer: C
GIAC GCIH GCIH GCIH인증 GCIH최신덤프
NO.14 Which of the following types of attacks is the result of vulnerabilities in a program due to poor
programming techniques?
A. Evasion attack
B. Denial-of-Service (DoS) attack
C. Ping of death attack
D. Buffer overflow attack
Answer: D
GIAC GCIH pdf GCIH시험문제
NO.15 Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet
forum for online discussion. When a user visits the infected Web page, code gets automatically executed
and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of
Cross-Site Scripting attack Ryan intends to do?
A. Non persistent
B. Document Object Model (DOM)
C. SAX
D. Persistent
Answer: D
GIAC자격증 GCIH시험문제 GCIH GCIH시험문제 GCIH
NO.16 Choose and reorder the steps of an incident handling process in their correct order.
A.
Answer: A
GIAC dumps GCIH GCIH인증 GCIH인증
NO.17 Which of the following statements are true about worms?
Each correct answer represents a complete solution. Choose all that apply.
A. Worms cause harm to the network by consuming bandwidth, whereas viruses almost always corrupt or
modify files on a targeted computer.
B. Worms can exist inside files such as Word or Excel documents.
C. One feature of worms is keystroke logging.
D. Worms replicate themselves from one system to another without using a host file.
Answer: A, B, D
GIAC인증 GCIH인증 GCIH자료
NO.18 Which of the following statements about Denial-of-Service (DoS) attack are true?
Each correct answer represents a complete solution. Choose three.
A. It disrupts services to a specific computer.
B. It changes the configuration of the TCP/IP protocol.
C. It saturates network resources.
D. It disrupts connections between two computers, preventing communications between services.
Answer: A, C, D
GIAC GCIH GCIH GCIH최신덤프
NO.19 Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not
concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?
A. UDP sacn
B. TCP Connect scan
C. ACK scan
D. Fin scan
Answer: B
GIAC GCIH GCIH GCIH GCIH인증 GCIH
NO.20 Which of the following applications is an example of a data-sending Trojan?
A. SubSeven
B. Senna Spy Generator
C. Firekiller 2000
D. eBlaster
Answer: D
GIAC시험문제 GCIH인증 GCIH기출문제 GCIH GCIH시험문제
NO.21 Which of the following types of attacks is only intended to make a computer resource unavailable to its
users?
A. Denial of Service attack
B. Replay attack
C. Teardrop attack
D. Land attack
Answer: A
GIAC GCIH GCIH시험문제 GCIH GCIH자료
NO.22 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and
successfully logs in to the user page of the Web site. The We-are-secure login page is vulnerable to a
__________.
A. Dictionary attack
B. SQL injection attack
C. Replay attack
D. Land attack
Answer: B
GIAC GCIH GCIH GCIH dump GCIH GCIH
NO.23 Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All
computers run on Windows XP. Manager of the Sales department complains Adam about the unusual
behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his
computer overnight. Adam suspects that some malicious software or Trojans have been installed on the
computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346,
and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one
application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?
A. Cheops-ng is installed on the computer.
B. Elsave is installed on the computer.
C. NetBus is installed on the computer.
D. NetStumbler is installed on the computer.
Answer: C
GIAC자료 GCIH GCIH GCIH GCIH
NO.24 Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary
attack?
A. Whishker
B. Nessus
C. SARA
D. Nmap
Answer: B
GIAC dumps GCIH pdf GCIH인증 GCIH
NO.25 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a
countermeasure, he suggests that the Network Administrator should remove the IPP printing capability
from the server. He is suggesting this as a countermeasure against __________.
A. IIS buffer overflow
B. NetBIOS NULL session
C. SNMP enumeration
D. DNS zone transfer
Answer: A
GIAC dump GCIH자료 GCIH GCIH GCIH최신덤프
NO.26 Fill in the blank with the appropriate word.
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use
______ defense against buffer overflow attacks.
A. canary
Answer: A
GIAC최신덤프 GCIH인증 GCIH
NO.27 Network mapping provides a security testing team with a blueprint of the organization. Which of the
following steps is NOT a part of manual network mapping?
A. Gathering private and public IP addresses
B. Collecting employees information
C. Banner grabbing
D. Performing Neotracerouting
Answer: D
GIAC시험문제 GCIH GCIH GCIH GCIH GCIH
NO.28 Adam, a novice computer user, works primarily from home as a medical professional. He just bought a
brand new Dual Core Pentium computer with over 3 GB of RAM. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Adam uses antivirus software,
anti-spyware software, and keeps the computer up-to-date with Microsoft patches. After another month of
working on the computer, Adam finds that his computer is even more noticeably slow. He also notices a
window or two pop-up on his screen, but they quickly disappear. He has seen these windows show up,
even when he has not been on the Internet. Adam notices that his computer only has about 10 GB of free
space available. Since his hard drive is a 200 GB hard drive, Adam thinks this is very odd.
Which of the following is the mostly likely the cause of the problem.?
A. Computer is infected with the stealth kernel level rootkit.
B. Computer is infected with stealth virus.
C. Computer is infected with the Stealth Trojan Virus.
D. Computer is infected with the Self-Replication Worm.
Answer: A
GIAC GCIH최신덤프 GCIH최신덤프
NO.29 Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer
overflow occurs when a particular operation/function writes more data into a variable than the variable
was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.
A. Dynamic buffer overflows
B. Stack based buffer overflow
C. Heap based buffer overflow
D. Static buffer overflows
Answer: B, C
GIAC GCIH자료 GCIH자격증 GCIH기출문제 GCIH덤프
NO.30 Which of the following is a technique of using a modem to automatically scan a list of telephone
numbers, usually dialing every number in a local area code to search for computers, Bulletin board
systems, and fax machines?
A. Demon dialing
B. Warkitting
C. War driving
D. Wardialing
Answer: D
GIAC GCIH GCIH기출문제 GCIH자료 GCIH dumps GCIH
ITexamdump의 MB7-701덤프의 VCE테스트프로그램과 JN0-380덤프는 한방에 시험을 패스하도록 도와드립니다. ITexamdump 에서는 최신버전의 ICYB시험에 대비한 고품질 덤프와 000-455시험 최신버전덤프를 제공해드립니다. 최고품질 000-226시험자료는 100% 간단하게 시험패스하도록 최선을 다하고 있습니다. IT인증시험패스는 이토록 간단합니다.
댓글 없음:
댓글 쓰기