Latest Mar 03, 2023 GCIH Brain Dump A Study Guide with Tips & Tricks for passing Exam [Q182-Q197]

Rate this post

Latest Mar 03, 2023 GCIH Brain Dump: A Study Guide with Tips & Tricks for passing Exam

GCIH Question Bank: Free PDF Download Recently Updated Questions

The benefit in Obtaining the GCIH Exam Certification

IT manager, etc
E-commerce security professional
Legal professional,
A GCIH certified candidate can work as an incident manager
Systems administrator

Many business sectors are recruiting incident managers to protect their digital infrastructure and take appropriate measures against security breaches and other cybercrimes within an organization.

Q182. Which of the following attacks capture the secret value like a hash and reuse it later to gain access to a system without ever decrypting or decoding the hash?

Cross Site Scripting attack

Replay attack

Rainbow attack

Hashing attack

Q183. A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth consumption attack. Attackers perform DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS attack are as follows:
l Saturation of network resources

l Disruption of connections between two computers, thereby preventing communications between

services
l Disruption of services to a specific computer

l Failure to access a Web site

l Increase in the amount of spam

Which of the following can be used as countermeasures against DoS attacks?
Each correct answer represents a complete solution. Choose all that apply.

Blocking undesired IP addresses

Applying router filtering

Disabling unneeded network services

Permitting network access only to desired traffic

Q184. You work as a System Engineer for Cyber World Inc. Your company has a single Active Directory domain.
All servers in the domain run Windows Server 2008. The Microsoft Hyper-V server role has been installed on one of the servers, namely uC1. uC1 hosts twelve virtual machines. You have been given the task to configure the Shutdown option for uC1, so that each virtual machine shuts down before the main Hyper-V server shuts down. Which of the following actions will you perform to accomplish the task?

Enable the Shut Down the Guest Operating System option in the Automatic Stop Action Properties on each virtual machine.

Manually shut down each of the guest operating systems before the server shuts down.

Create a batch file to shut down the guest operating system before the server shuts down.

Create a logon script to shut down the guest operating system before the server shuts down.

Q185. Which of the following Denial-of-Service (DoS) attacks employ IP fragmentation mechanism?
Each correct answer represents a complete solution. Choose two.

Land attack

SYN flood attack

Teardrop attack

Ping of Death attack

Section: Volume A
Explanation

Q186. You work as a System Engineer for Cyber World Inc. Your company has a single Active Directory domain. All servers in
the domain run Windows Server 2008. The Microsoft Hyper-V server role has been installed on one of the servers,
namely uC1. uC1 hosts twelve virtual machines. You have been given the task to configure the Shutdown option for
uC1, so that each virtual machine shuts down before the main Hyper-V server shuts down. Which of the following
actions will you perform to accomplish the task?

Enable the Shut Down the Guest Operating System option in the Automatic Stop Action Properties on each virtual
machine.

Manually shut down each of the guest operating systems before the server shuts down.

Create a batch file to shut down the guest operating system before the server shuts down.

Create a logon script to shut down the guest operating system before the server shuts down.

Q187. Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows-based network. Jason successfully enters the target system remotely by using the advantage of vulnerability. He places a Trojan to maintain future access and then disconnects the remote session. The employees of the company complain to Mark, who works as a Professional Ethical Hacker for DataSoft Inc., that some computers are very slow. Mark diagnoses the network and finds that some irrelevant log files and signs of Trojans are present on the computers. He suspects that a malicious hacker has accessed the network. Mark takes the help from Forensic Investigators and catches Jason.
Which of the following mistakes made by Jason helped the Forensic Investigators catch him?

Jason did not perform a vulnerability assessment.

Jason did not perform OS fingerprinting.

Jason did not perform foot printing.

Jason did not perform covering tracks.

Jason did not perform port scanning.

Q188. Which of the following tools is used to attack the Digital Watermarking?

Active Attacks

2Mosaic

Steg-Only Attack

Gifshuffle

Section: Volume B
Explanation

Q189. In which of the following attacks does an attacker use packet sniffing to read network traffic between two parties to steal the session cookie?

Session fixation

Cross-site scripting

Session sidejacking

ARP spoofing

Section: Volume C

Q190. Which of the following can be used to perform session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

Cross-site scripting

Session fixation

ARP spoofing

Session sidejacking

Section: Volume B

Q191. Maria works as a professional Ethical Hacker. She has been assigned the project of testing the security of www.gentech.com. She is using dumpster diving to gather information about Gentech Inc.
In which of the following steps of malicious hacking does dumpster diving come under?

Multi-factor authentication

Role-based access control

Mutual authentication

Reconnaissance

Q192. Which of the following actions is performed by the netcat command given below?
nc 55555 < /etc/passwd

It changes the /etc/passwd file when connected to the UDP port 55555.

It resets the /etc/passwd file to the UDP port 55555.

It fills the incoming connections to /etc/passwd file.

It grabs the /etc/passwd file when connected to UDP port 55555.

Section: Volume B
Explanation

Q193. Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish
this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered
only when the algorithm compares the changed cover with the original cover. Which of the following Steganography
methods is Victor using to accomplish the task?

The distortion technique

The spread spectrum technique

The substitution technique

The cover generation technique

Q194. Adam works as a Security administrator for Umbrella Inc. He runs the following traceroute and notices that hops 19 and 20 both show the same IP address.
1 172.16.1.254 (172.16.1.254) 0.724 ms 3.285 ms 0.613 ms 2 ip68-98-176-1.nv.nv.cox.net
(68.98.176.1)
12.169 ms 14.958 ms 13.416 ms 3 ip68-98-176-1.nv.nv.cox.net
(68.98.176.1)
13.948 ms ip68-100-0-1.nv.nv. cox.net (68.100.0.1) 16.743 ms 16.207 ms 4 ip68100-0-137.nv.nv.cox.net (68.100.0.137) 17.324 ms 13.933 ms 20.938 ms 5 68.1.1.4
(68.1.1.4) 12.439 ms 220.166 ms 204.170 ms
6 so-6-0-0.gar2.wdc1.Level3.net (67.29.170.1) 16.177 ms 25.943 ms 14.104 ms 7
unknown.Level3.net (209.247.9.173) 14.227 ms 17.553 ms 15.415 ms “PassGuide” – 8 so-0-10.bbr1.NewYork1.level3.net (64.159.1.41) 17.063 ms 20.960 ms 19.512 ms 9 so-7-0-0.gar1.
NewYork1.Level3.net (64.159.1.182) 20.334 ms 19.440 ms 17.938 ms 10 so-4-00.edge1.NewYork1.Level3.
net (209.244.17.74) 27.526 ms 18.317 ms 21.202 ms 11 uunet-level3oc48.NewYork1.Level3.net
(209.244.160.12) 21.411 ms 19.133 ms 18.830 ms 12 0.so-6-0-0.XL1.NYC4.ALTER.NET
(152.63.21.78)
21.203 ms 22.670 ms 20.111 ms 13 0.so-2-0-0.TL1.NYC8.ALTER.NET (152.63.0.153) 30.929 ms 24.858 ms
23.108 ms 14 0.so-4-1-0.TL1.ATL5.ALTER.NET (152.63.10.129) 37.894 ms 33.244 ms
33.910 ms 15 0.so-7-0-0.XL1.MIA4.ALTER.NET (152.63.86.189) 51.165 ms 49.935 ms
49.466 ms 16 0.so-3-0-0.XR1.MIA4.ALTER.
NET (152.63.101.41) 50.937 ms 49.005 ms 51.055 ms 17 117.ATM6- 0.GW5.MIA1.ALTER.NET
(152.63.82.73) 51.897 ms 50.280 ms 53.647 ms 18 PassGuidegw1. customer.alter.net
(65.195.239.14) 51.921 ms 51.571 ms 56.855 ms 19 www.PassGuide.com (65.195.239.22)
52.191 ms 52.571 ms 56.855 ms 20 www.PassGuide.com (65.195.239.22) 53.561 ms 54.121 ms 58.333 ms
Which of the following is the most like cause of this issue?

An application firewall

Intrusion Detection System

Network Intrusion system

A stateful inspection firewall

Topic 2, Volume B

Q195. Which of the following describes network traffic that originates from the inside of a network perimeter and progresses towards the outside?

Ingress network

Inwards network

Egress network

Outwards network

Section: Volume C
Explanation/Reference:

Q196. You execute the following netcat command:
c:targetnc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?

Listen the incoming data and performing port scanning

Capture data on port 53 and performing banner grabbing

Capture data on port 53 and delete the remote shell

Listen the incoming traffic on port 53 and execute the remote shell

Q197. Which of the following would allow you to automatically close connections or restart a server or service when a DoS attack is detected?

Signature-based IDS

Network-based IDS

Passive IDS

Active IDS

Loading …

Candidates for GCIH Certification Exam

The GCIH test is intended for different categories of specialists such as the incident handlers or the leaders of incident handling teams. System administrators, security architects, or practitioners are also part of the groups of individuals targeted by this exam. Another group of candidates is formed by any individual who has a security-related role as the first responder and wants to leverage his/her skills in incident handling. Then, the GIAC GCIH certification evaluation is suitable for any professional who wants to validate his/her skills in detecting, responding, and finding solutions for any computer security issue and wants to learn how to work with different security tools. Besides, this test is dedicated to any specialists who want to understand different types of attack techniques alongside tools and want to know how to respond quickly and effectively whenever such an attack occurs.

New GCIH Exam Dumps with High Passing Rate: https://www.dumpsreview.com/GCIH-exam-dumps-review.html