GCIHのPDF問題集で2023年02月16日試験問題 有効なGCIH問題集 [Q150-Q170]

質問150、 Which of the following netcat parameters makes netcat a listener that automatically restarts itself when a connection is dropped?

質問151、 Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

質問152、 Adam is a novice Web user. He chooses a 22 letters long word from the dictionary as his password.
How long will it take to crack the password by an attacker?

質問153、 Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or stop the traffic altogether?

質問154、 Which of the following wireless network security solutions refers to an authentication process in which a user can connect wireless access points to a centralized server to ensure that all hosts are properly authenticated?

質問155、 In which of the following attacking methods does an attacker distribute incorrect IP address?

質問156、 Which of the following incident response team members ensures that the policies of the organization are enforced during the incident response?

質問157、 Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All computers run on
Windows XP. Manager of the Sales department complains Adam about the unusual behavior of his computer. He told
Adam that some pornographic contents are suddenly appeared on his computer overnight. Adam suspects that some
malicious software or Trojans have been installed on the computer. He runs some diagnostics programs and Port
scanners and found that the Port 12345, 12346, and 20034 are open. Adam also noticed some tampering with the
Windows registry, which causes one application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?

質問158、 Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform.
Which of the following steps should Adam take to overcome this problem with the least administrative effort?

質問159、 Which of the following are countermeasures to prevent unauthorized database access attacks?
Each correct answer represents a complete solution. Choose all that apply.

質問160、 You send SYN packets with the exact TTL of the target system starting at port 1 and going up to port 1024 using hping2 utility. This attack is known as __________.

質問161、 Which of the following attacks capture the secret value like a hash and reuse it later to gain access to a system without ever decrypting or decoding the hash?

質問162、 Which of the following is the most common vulnerability that can affect desktop applications written in native code?

質問163、 Which of the following attacks allows an attacker to retrieve crucial information from a Web server’s database?

質問164、 You are the Security Consultant and have been hired to check security for a client’s network. Your client has stated that he has many concerns but the most critical is the security of Web applications on their Web server. What should be your highest priority then in checking his network?

質問165、 You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of
various companies. Recently, Secure Inc. has assigned you a project to test the security of a Web site. You go to the
Web site login page and you run the following SQL query:
SELECT email, passwd, login_id, full_name
FROM members
WHERE email = ‘[email protected]’; DROP TABLE members; –‘
What task will the above SQL query perform?

質問166、 Which of the following is a version of netcat with integrated transport encryption capabilities?

質問167、 The IT administrator wants to implement a stronger security policy. What are the four most important security priorities for PassGuide Software Systems Pvt. Ltd.?

質問168、 Which of the following statements is true about the difference between worms and Trojan horses?

質問169、 Mark works as a Network Administrator for Perfect Inc. The company has both wired and wireless networks. An
attacker attempts to keep legitimate users from accessing services that they require. Mark uses IDS/IPS sensors on the
wired network to mitigate the attack. Which of the following attacks best describes the attacker’s intentions?

質問170、 Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise?