Vce GCIH Questions Latest

GIAC Certified Incident Handler Questions and Answers

Question 17

Which of the following programs is used for bypassing normal authentication for securing remote access to a computer?

Backdoor

Worm

Adware

Spyware

Question 18

Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?

Rainbow attack

Brute Force attack

Dictionary attack

Hybrid attack

Question 19

Which of the following statements are true about tcp wrappers?

Each correct answer represents a complete solution. Choose all that apply.

tcp wrapper provides access control, host address spoofing, client username lookups, etc.

When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server program directly.

tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to filter for access control purposes.

tcp wrapper protects a Linux server from IP address spoofing.

Question 20

Which of the following methods can be used to detect session hijacking attack?

nmap

Brutus

ntop

sniffer