Latest Success Metrics For Actual GCIH Exam 2023 Realistic Dumps [Q117-Q134]

QUESTION 117
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following steps of the pre-attack phase:
l Information gathering
l Determining network range
l Identifying active machines
l Finding open ports and applications
l OS fingerprinting
l Fingerprinting services
Now John wants to perform network mapping of the We-are-secure network. Which of the following tools can he use to accomplish his task?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 118
Adam, a malicious hacker is running a scan. Statistics of the scan is as follows:
Scan directed at open port:
ClientServer
192.5.2.92:4079 ———FIN———>192.5.2.110:23192.5.2.92:4079 <—-NO RESPONSE—
—192.5.2.110:23
Scan directed at closed port:
ClientServer
192.5.2.92:4079 ———FIN———>192.5.2.110:23
192.5.2.92:4079<—–RST/ACK———-192.5.2.110:23
Which of the following types of port scan is Adam running?

QUESTION 119
Which of the following protocols is a maintenance protocol and is normally considered a part of the IP layer, but has also been used to conduct denial-of-service attacks?

QUESTION 120
Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

QUESTION 121
Which of the following rootkits adds additional code or replaces portions of an operating system, including both the kernel and associated device drivers?

QUESTION 122
Adam, a malicious hacker has successfully gained unauthorized access to the Linux system of Umbrella Inc. Web
server of the company runs on Apache. He has downloaded sensitive documents and database files from the
computer.
After performing these malicious tasks, Adam finally runs the following command on the Linux command box before
disconnecting.
for (( i = 0;i<11;i++ )); do
dd if=/dev/random of=/dev/hda && dd if=/dev/zero of=/dev/hda done
Which of the following actions does Adam want to perform by the above command?

QUESTION 123
In which of the following methods does an hacker use packet sniffing to read network traffic between two parties to steal the session cookies?

QUESTION 124
You have inserted a Trojan on your friend’s computer and you want to put it in the startup so that whenever the
computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to
accomplish the task?

QUESTION 125
Which of the following attacks is specially used for cracking a password?

QUESTION 126
Which of the following is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems, and fax machines?

QUESTION 127
Which of the following are open-source vulnerability scanners?

QUESTION 128
Which of the following techniques does an attacker use to sniff data frames on a local area network and modify the traffic?

QUESTION 129
Which of the following programming languages are NOT vulnerable to buffer overflow attacks?
Each correct answer represents a complete solution. Choose two.

QUESTION 130
Which of the following is a method of gaining access to a system that bypasses normal authentication?

QUESTION 131
When you conduct the XMAS scanning using Nmap, you find that most of the ports scanned do not give a response. What can be the state of these ports?

QUESTION 132
Which of the following refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system?

QUESTION 133
In which of the following attacks does an attacker use packet sniffing to read network traffic between two parties to steal the session cookie?

QUESTION 134
You want to add a netbus Trojan in the chess.exe game program so that you can gain remote access to a friend’s computer. Which of the following tools will you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.