Pass the GIAC Security Administration GCIH Questions and answers with ExamsMirror

Which of the following is spy software that records activity on Macintosh systems via snapshots, keystrokes, and Web site logging?

Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

Which of the following statements about buffer overflow is true?

Your network is being flooded by ICMP packets. When you trace them down they come from multiple different IP addresses. What kind of attack is this?

Which of the following statements are true about session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

Fill in the blank with the appropriate word.

StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use ______ defense against buffer overflow attacks.

You run the following bash script in Linux:

for i in 'cat hostlist.txt' ;do

nc -q 2 -v $i 80 < request.txt done

Where, hostlist.txt file contains the list of IP addresses and request.txt is the output file. Which of the following tasks do you want to perform by running this script?

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are-secure Website login page from the SQL injection attack?

Which of the following tools combines two programs, and also encrypts the resulting package in an attempt to foil antivirus programs?

Which of the following statements are true about worms?

Each correct answer represents a complete solution. Choose all that apply.