Online Access Free GCIH Exam Questions

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we- are-secure Website login page from the SQL injection attack?

• A.Use the session_regenerate_id() function
• B.Use the mysql_real_escape_string() function for escaping input
• C.Use the escapeshellarg() function
• D.Use the escapeshellcmd() function

Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?

• A.Hypervisor rootkit
• B.Kernel level rootkit
• C.Library rootkit
• D.Boot loader rootkit

Maria works as the Chief Security Officer for PassGuide Inc. She wants to send secret messages to the CEO of the company. To secure these messages, she uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'. What technique is Maria using?

• A.Steganography
• B.RSA algorithm
• C.Encryption
• D.Public-key cryptography

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is this?

• A.Impersonation attack
• B.Denial-of-Service attack
• C.Social Engineering attack
• D.Vulnerability attack

TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during standard layer 4 network communications. The combination of parameters may then be used to infer the remote operating system (OS fingerprinting), or incorporated into a device fingerprint.
Which of the following Nmap switches can be used to perform TCP/IP stack fingerprinting?

• A.nmap -sS
• B.nmap -O -p
• C.nmap -sT
• D.nmap -sU -p