GCIH Exam Question 141

Mark works as a Network Administrator for Net Perfect Inc. The company has a Windows-based network.
The company uses Check Point SmartDefense to provide security to the network. Mark uses SmartDefense on the HTTP servers of the company to fix the limitation for the maximum response header length. Which of the following attacks can be blocked by defining this limitation?
  • GCIH Exam Question 142

    You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?
  • GCIH Exam Question 143

    Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?
  • GCIH Exam Question 144

    Which of the following hacking tools provides shell access over ICMP?
  • GCIH Exam Question 145

    Which of the following types of skills are required in the members of an incident handling team?
    Each correct answer represents a complete solution. Choose all that apply.