Question 161 · 213 in bank
Which malware investigation approach provides a detailed log of a system’s file system, network, registry and process activities?
Show answer
Answer: A
GCIHProfessionalGIACAll questions freePage 17 of 22
GCIH practice questions 161–170
GIAC Certified Incident Handler213 questions across 22 pages are complete and free, with no account or card.
Official study references
213 questions in this bank
Free access · progress saved on this device
Question 162 · 213 in bank
Which PowerShell cmdlet will display the command line parameters used to launch a Windows process?
Show answer
Answer: C
Question 163 · 213 in bank
Which of the following logs could be queried to identify Azure, Amazon and Google storage use in an organization?
Show answer
Answer: D
Question 164 · 213 in bank
What is the outcome of the command below? hashcat -m 0 -a 3 ntds.dat --potfile-path ntds.potfile -1 ?d?d?d?d?d?d
Show answer
Answer: B
Question 165 · 213 in bank
What hash type is being cracked in the command below? hashcat -m 1800 -a 0 customer.ntds wordlist.txt --potfile-path ./hashcat.potfile
Show answer
Answer: D
Question 166 · 213 in bank
What UNIX component can be used to enforce password complexity requirements?
Show answer
Answer: A
Question 167 · 213 in bank
Which web application log keyword would be associated with a SQL injection attack?
Show answer
Answer: A
Question 168 · 213 in bank
Which endpoint security bypass technique leverages existing system tools instead of adding executable?
Show answer
Answer: C
Question 169 · 213 in bank
Based on the nmap data in the screenshot the analyst would choose which IP address for a DNS attack?
Show answer
Answer: C
Question 170 · 213 in bank
An attacker is hoping to discover as many IP addresses associated with a target domain as possible. Which command would be helpful?
Show answer
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
GCIH practice, question 161. 213 questions available.
About this question bank
Version 1.0.0. How we source questions