GCIH practice questions 21–30

1. Question 21 · 213 in bank

   Which of the following is the best method of accurately identifying the services running on a victim host?

   • AUse of the manual method of telnet to each of the open ports.
   • BUse of a port scanner to scan each port to confirm the services running.
   • CUse of hit and trial method to guess the services and ports of the victim host.
   • DUse of a vulnerability scanner to try to probe each port to verify which service is running.

   Show answer

   Answer: A

   Next question

2. Question 22 · 213 in bank

   You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network. What method would be best for finding such flaws?

   • AManual penetration testing
   • BCode review
   • CAutomated penetration testing
   • DVulnerability scanning

   Show answer

   Answer: D

   Next question

3. Question 23 · 213 in bank

   Select 2

   Your company has been hired to provide consultancy, development, and integration services for a company named Brainbridge International. You have prepared a case study to plan the upgrade for the company. Based on the case study, which of the following steps will you suggest for configuring WebStore1? Each correct answer represents a part of the solution. (Choose two.)

   • ACustomize IIS 6.0 to display a legal warning page on the generation of the 404.2 and 404.3 errors.
   • BMove the WebStore1 server to the internal network.
   • CConfigure IIS 6.0 on WebStore1 to scan the URL for known buffer overflow attacks.
   • DMove the computer account of WebStore1 to the Remote organizational unit (OU).

   Show answer

   Answer: AC

   Next question

4. Question 24 · 213 in bank

   Which of the following tools can be used to detect the steganography?

   • ADskprobe
   • BBlindside
   • CImageHide
   • DSnow

   Show answer

   Answer: A

   Next question

5. Question 25 · 213 in bank

   You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?

   • ATripwire
   • BSubSeven
   • CNetstat
   • DFport

   Show answer

   Answer: D

   Next question

6. Question 26 · 213 in bank

   The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook's preview pane. The Klez worm gathers email addresses from the entries of the default Windows Address Book (WAB). Which of the following registry values can be used to identify this worm?

   • AHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
   • BHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
   • CHKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name = "file and pathname of the WAB file"
   • DHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

   Show answer

   Answer: C

   Next question

7. Question 27 · 213 in bank

   Select 3

   Which of the following tools can be used to perform brute force attack on a remote database? Each correct answer represents a complete solution. (Choose all that apply.)

   • ASQLBF
   • BSQLDict
   • CFindSA
   • Dnmap

   Show answer

   Answer: ABC

   Next question

8. Question 28 · 213 in bank

   Select 3

   Which of the following are open-source vulnerability scanners?

   • ANessus
   • BHackbot
   • CNetRecon
   • DNikto

   Show answer

   Answer: ABD

   Next question

9. Question 29 · 213 in bank

   Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered only when the algorithm compares the changed cover with the original cover. Which of the following Steganography methods is Victor using to accomplish the task?

   • AThe distortion technique
   • BThe spread spectrum technique
   • CThe substitution technique
   • DThe cover generation technique

   Show answer

   Answer: A

   Next question

10. Question 30 · 213 in bank

    As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to retrieve as many different protocols as possible being used by the secureserver.com so that you could get the accurate knowledge about what services were being used by the secure server.com. Which of the following nmap switches have you used to accomplish the task?

    • Anmap -vO
    • Bnmap -sS
    • Cnmap -sT
    • Dnmap -sO

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

GCIH practice, question 21. 213 questions available.