Free GIAC GCIH Exam Dumps Questions & Answers

Which of the following rootkits is able to load the original operating system as a virtual machine, thereby enabling it to intercept all hardware calls made by the original operating system?

• A.Kernel level rootkit
• B.Boot loader rootkit
• C.Hypervisor rootkit
• D.Library rootkit

You discover that all available network bandwidth is being used by some unknown service. You discover that UDP packets are being used to connect the echo service on one machine to the chargen service on another machine. What kind of attack is this?

• A.Denial of Service
• B.Smurf
• C.Virus
• D.Evil Twin

Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.

• A.The attacker must target a site that doesn't check the referrer header.
• B.The target site should authenticate in GET and POST parameters, not only cookies.
• C.The attacker must determine the right values for all the form inputs.
• D.The target site should have limited lifetime authentication cookies.

Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Adam assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs.
Which of the following types of attack is Adam performing?

• A.Replay attack
• B.MAC Spoofing attack
• C.Caffe Latte attack
• D.Network injection attack

Which of the following penetration testing phases involves gathering data from whois, DNS, and network scanning, which helps in mapping a target network and provides valuable information regarding the operating system and applications running on the systems?

• A.Post-attack phase
• B.Pre-attack phase
• C.Attack phase
• D.On-attack phase