Instant Access GIAC.GCIH.v2022-10-17.q354 Actual Practice Test Engine for Free (Page 30)

Question 141

US Garments wants all encrypted data communication between corporate office and remote location.
They want to achieve following results:
* Authentication of users
* Anti-replay
* Anti-spoofing
* IP packet encryption
They implemented IPSec using Authentication Headers (AHs). Which results does this solution provide?
(Click the Exhibit button on the toolbar to see the case study.)
Each correct answer represents a complete solution. Choose all that apply.

A.Anti-spoofing
B.Authentication of users
C.Anti-replay
D.IP packet encryption

Question 142

Which of the following statements are true about session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

A.It is used to slow the working of victim's network resources.
B.Use of a long random number or string as the session key reduces session hijacking.
C.It is the exploitation of a valid computer session to gain unauthorized access to information or services in a
computer system.
D.TCP session hijacking is when a hacker takes over a TCP session between two machines.

Question 143

Adam, a malicious hacker purposely sends fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65,536 bytes. On the basis of above information, which of the following types of attack is Adam attempting to perform?

A.Fraggle attack
B.Ping of death attack
C.SYN Flood attack
D.Land attack

Question 144

Which of the following attacks allows an attacker to retrieve crucial information from a Web server's database?

A.Database retrieval attack
B.Server data attack
C.SQL injection attack
D.PHP injection attack

Question 145

Which of the following characters will you use to check whether an application is vulnerable to an SQL injection
attack?

A.Semi colon (;)
B.Double quote (")
C.Dash (-)
D.Single quote (')

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File