Category GIAC

NO.155 Which of the following types of skills are required in the members of an incident handling team?
Each correct answer represents a complete solution. Choose all that apply.

NO.156 Which of the following is used to determine the range of IP addresses that are mapped to a live hosts?

NO.157 Which of the following is used to determine the operating system on the remote computer in a network
environment?

NO.158 Which of the following ensures that a party to a dispute cannot deny the authenticity of their signature on a document or the sending of a message that they originated?

NO.159 Which of the following Linux rootkits allows an attacker to hide files, processes, and network connections?
Each correct answer represents a complete solution. Choose all that apply.

NO.160 Which of the following netcat parameters makes netcat a listener that automatically restarts itself when a connection is dropped?

NO.161 CORRECT TEXT
Fill in the blank with the correct numeric value.
ARP poisoning is achieved in ______ steps.

NO.162 John works as a C programmer. He develops the following C program:
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
int buffer(char *str) {
char buffer1[10];
strcpy(buffer1, str);
return 1;
}
int main(int argc, char *argv[]) {
buffer (argv[1]);
printf(“Executedn”);
return 1;
}
His program is vulnerable to a __________ attack.

NO.163 Which of the following tools can be used to perform brute force attack on a remote database?
Each correct answer represents a complete solution. Choose all that apply.

NO.164 Which of the following types of attacks come under the category of hacker attacks?
Each correct answer represents a complete solution. Choose all that apply.

NO.165 Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-
encrypted TCP/IP utility?

NO.166 Which of the following statements are true about netcat?
Each correct answer represents a complete solution. Choose all that apply.

NO.167 Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point.
Which of the following type of scans would be most accurate and reliable?

NO.168 You check performance logs and note that there has been a recent dramatic increase in the amount of broadcast traffic. What is this most likely to be an indicator of?

NO.169 Which of the following types of attack can guess a hashed password?

NO.170 Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs
when a particular operation/function writes more data into a variable than the variable was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.

NO.171 Which of the following rootkits patches, hooks, or replaces system calls with versions that hide information about the attacker?

NO.172 Jane works as a Consumer Support Technician for ABC Inc. The company provides troubleshooting support to users. Jane is troubleshooting the computer of a user who has installed software that automatically gains full permissions on his computer. Jane has never seen this software before. Which of the following types of malware is the user facing on his computer?

NO.173 Which of the following are the primary goals of the incident handling team?
Each correct answer represents a complete solution. Choose all that apply.

NO.174 An attacker sends a large number of packets to a target computer that causes denial of service.
Which of the following type of attacks is this?

NO.175 Which of the following is the most common vulnerability that can affect desktop applications written in native code?