Real GIAC GCIH Exam Dumps with Correct 335 Questions and Answers [Q18-Q33]

QUESTION 18
You discover that your network routers are being flooded with broadcast packets that have the return address of one
of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and
flooding it. What is this called?

QUESTION 19
Which of the following refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system?

QUESTION 20
Which of the following provides packet-level encryption between hosts in a LAN?

QUESTION 21
Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?

QUESTION 22
Which of the following can be used to perform session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 23
Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to test the network security of the company. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a company’s icon to mark the progress of the test. Adam successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access.
How was security compromised and how did the firewall respond?

QUESTION 24
Which of the following scanning tools is also a network analysis tool that sends packets with nontraditional IP stack parameters and allows the scanner to gather information from the response packets generated?

QUESTION 25
You work as a System Administrator in SunSoft Inc. You are running a virtual machine on Windows Server
2003. The virtual machine is protected by DPM. Now, you want to move the virtual machine to another host.
Which of the following steps can you use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

QUESTION 26
Choose the correct six-step process of threat modeling from the list of different steps.

QUESTION 27
Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 28
Which of the following is designed to protect the Internet resolvers (clients) from forged DNS data created by DNS cache poisoning?

QUESTION 29
Which of the following are countermeasures to prevent unauthorized database access attacks?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 30
Which of the following HTTP requests is the SQL injection attack?

QUESTION 31
Victor works as a professional Ethical Hacker for SecureEnet Inc. He has been assigned a job to test an image, in which some secret information is hidden, using Steganography. Victor performs the following techniques to accomplish the task:
1. Smoothening and decreasing contrast by averaging the pixels of the area where significant color transitions occurs.
2. Reducing noise by adjusting color and averaging pixel value.
3. Sharpening, Rotating, Resampling, and Softening the image.
Which of the following Steganography attacks is Victor using?

QUESTION 32
Which of the following is designed to protect the Internet resolvers (clients) from forged DNS data created by DNS cache poisoning?

QUESTION 33
Which of the following types of channels is used by Trojans for communication?