[May 06, 2022] Valid GCIH Test Answers & GIAC GCIH Exam PDF [Q193-Q210]

Q193. Which of the following is the method of hiding data within another media type such as graphic or document?

Q194. Which of the following characters will you use to check whether an application is vulnerable to an SQL injection attack?

Q195. Adam, a malicious hacker is running a scan. Statistics of the scan is as follows:
Scan directed at open port: ClientServer
192.5.2.92:4079 ———FIN———>192.5.2.110:23192.5.2.92:4079 <—-NO RESPONSE—
—192.5.2.110:23
Scan directed at closed port:
ClientServer
192.5.2.92:4079 ———FIN———>192.5.2.110:23
192.5.2.92:4079<—–RST/ACK———-192.5.2.110:23
Which of the following types of port scan is Adam running?

Q196. Which of the following hacking tools provides shell access over ICMP?

Q197. Which of the following is designed to protect the Internet resolvers (clients) from forged DNS data created by DNS cache poisoning?

Q198. Which of the following are the automated tools that are used to perform penetration testing?
Each correct answer represents a complete solution. Choose two.

Q199. Which of the following languages are vulnerable to a buffer overflow attack?
Each correct answer represents a complete solution. Choose all that apply.

Q200. Which of the following tools combines two programs, and also encrypts the resulting package in an attempt to foil
antivirus programs?

Q201. Which of the following services CANNOT be performed by the nmap utility?
Each correct answer represents a complete solution. Choose all that apply.

Q202. John works as a Network Security Professional. He is assigned a project to test the security of
www.we-are-secure.com. He establishes a connection to a target host running a Web service with netcat and sends a
bad html request in order to retrieve information about the service on the host.

Which of the following attacks is John using?

Q203. You want to create an SSH tunnel for POP and SMTP protocols. Which of the following commands will you run?

Q204. Which of the following controls is described in the statement given below?
“It ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at.”

Q205. The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in
Microsoft Outlook’s preview pane. The Klez worm gathers email addresses from the entries of the default Windows
Address Book (WAB). Which of the following registry values can be used to identify this worm?

Q206. Firewalking is a technique that can be used to gather information about a remote network protected by a firewall.
This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a
crafted packet with a TTL value that is set to expire one hop past the firewall. Which of the following are pre-requisites
for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.

Q207. Which of the following attacks allows an attacker to retrieve crucial information from a Web server’s database?

Q208. You want to scan your network quickly to detect live hosts by using ICMP ECHO Requests. What type of scanning will you perform to accomplish the task?

Q209. Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice’s password read from the last session, which Bob accepts. Which of the following attacks is being used by Eve?

Q210. John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare- secure.com. He is working on the Linux operating system. He wants to sniff the we-are-secure network and intercept a conversation between two employees of the company through session hijacking. Which of the following tools will John use to accomplish the task?