Updated Dec 10, 2023 GCIH Exam Dumps - PDF Questions and Testing Engine
New (2023) GIAC GCIH Exam Dumps
The GCIH exam is a challenging certification program that requires candidates to have a strong background in information security and incident handling. GCIH exam consists of 150 multiple-choice questions that test the candidate’s knowledge and skills in various areas of incident handling. Candidates are required to achieve a passing score of 70% or higher to earn the certification. The GCIH certification program is a valuable investment for professionals who want to advance their careers in the information security field and demonstrate their skills and expertise in incident handling.
To prepare for the GIAC GCIH certification exam, candidates can enroll in a training course or study on their own. GIAC offers an official course that covers all the topics on the exam and provides hands-on experience with incident handling tools and techniques. Candidates can also purchase study materials, such as books, practice exams, and online courses, to supplement their learning.
NEW QUESTION # 112
You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network. Which of the following phases of the Incident handling process should you follow next to handle this incident?
- A. Recovery
- B. Containment
- C. Preparation
- D. Identification
Answer: B
NEW QUESTION # 113
Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?
- A. Kernel level rootkit
- B. Boot loader rootkit
- C. Library rootkit
- D. Hypervisor rootkit
Answer: C
NEW QUESTION # 114
Which of the following options scans the networks for vulnerabilities regarding the security of a network?
- A. Network enumerators
- B. System enumerators
- C. Port enumerators
- D. Vulnerability enumerators
Answer: A
NEW QUESTION # 115
Which of the following tools are used as a network traffic monitoring tool in the Linux operating system?
Each correct answer represents a complete solution. Choose all that apply.
- A. IPTraf
- B. MRTG
- C. Ntop
- D. Netbus
Answer: A,B,C
NEW QUESTION # 116
Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps
is NOT a part of manual network mapping?
- A. Collecting employees information
- B. Banner grabbing
- C. Gathering private and public IP addresses
- D. Performing Neotracerouting
Answer: D
NEW QUESTION # 117
Which of the following is the Web 2.0 programming methodology that is used to create Web pages that are dynamic and interactive?
- A. RSS
- B. UML
- C. XML
- D. Ajax
Answer: D
NEW QUESTION # 118
Which of the following is a version of netcat with integrated transport encryption capabilities?
- A. Encat
- B. Socat
- C. Nikto
- D. Cryptcat
Answer: D
Explanation:
Section: Volume B
NEW QUESTION # 119
Which of the following US Acts emphasized a "risk-based policy for cost-effective security" and makes mandatory for agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency's information security program and report the results to Office of Management and Budget?
- A. The Fair Credit Reporting Act (FCRA)
- B. The Electronic Communications Privacy Act of 1986 (ECPA)
- C. The Equal Credit Opportunity Act (ECOA)
- D. Federal Information Security Management Act of 2002 (FISMA)
Answer: D
Explanation:
Section: Volume B
NEW QUESTION # 120
Maria works as the Chief Security Officer for PassGuide Inc. She wants to send secret messages to the CEO of the company. To secure these messages, she uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'. What technique is Maria using?
- A. Public-key cryptography
- B. RSA algorithm
- C. Encryption
- D. Steganography
Answer: D
NEW QUESTION # 121
You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution?
Each correct answer represents a part of the solution. Choose all that apply.
- A. Recovery
- B. Contamination
- C. Eradication
- D. Preparation
- E. Identification
Answer: A,B,C
NEW QUESTION # 122
Which of the following procedures is designed to enable security personnel to identify, mitigate, and recover from malicious computer incidents, such as unauthorized access to a system or data, denialof- service, or unauthorized changes to system hardware, software, or data?
- A. Cyber Incident Response Plan
- B. Crisis Communication Plan
- C. Disaster Recovery Plan
- D. Occupant Emergency Plan
Answer: A
NEW QUESTION # 123
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linux-based server. Recently,
you have updated the password policy of the company in which the server will disable passwords after four trials.
What type of attack do you want to stop by enabling this policy?
- A. Cookie poisoning
- B. XSS
- C. Replay
- D. Brute force
Answer: D
NEW QUESTION # 124
Which of the following tools can be used for stress testing of a Web server?
Each correct answer represents a complete solution. Choose two.
- A. Spyware
- B. Anti-virus software
- C. Internet bots
- D. Scripts
Answer: C,D
Explanation:
Section: Volume A
Explanation
NEW QUESTION # 125
Which of the following are types of access control attacks?
Each correct answer represents a complete solution. Choose all that apply.
- A. Brute force attack
- B. Spoofing
- C. Dictionary attack
- D. Mail bombing
Answer: A,B,C
NEW QUESTION # 126
Which of the following programming languages are NOT vulnerable to buffer overflow attacks?
Each correct answer represents a complete solution. Choose two.
- A. C++
- B. Java
- C. Perl
- D. C
Answer: B,C
NEW QUESTION # 127
Which of the following is an Internet mapping technique that relies on various BGP collectors that collect information such as routing updates and tables and provide this information publicly?
- A. Firewalking
- B. AS Route Inference
- C. AS PATH Inference
- D. Path MTU discovery (PMTUD)
Answer: C
NEW QUESTION # 128
Mark works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The
company uses Check Point SmartDefense to provide security to the network. Mark uses SmartDefense on the HTTP
servers of the company to fix the limitation for the maximum response header length. Which of the following attacks
can be blocked by defining this limitation?
- A. Ramen worm attack
- B. HTR Overflow worms and mutations
- C. Shoulder surfing attack
- D. Melissa virus attack
Answer: B
NEW QUESTION # 129
......
Updated Verified Pass GCIH Exam - Real Questions and Answers: https://validdumps.free4torrent.com/GCIH-valid-dumps-torrent.html