GCIH Exam Dumps - GIAC Security Administration Questions and Answers

In which of the following attacks does the attacker gather information to perform an access attack?

You send SYN packets with the exact TTL of the target system starting at port 1 and going up to port 1024 using hping2 utility. This attack is known as __________.

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:

nmap -PN -p- -sI IP_Address_of_Company_Server

He analyzes that the server's TCP ports 21, 25, 80, and 111 are open.

Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?

Which of the following can be used as a Trojan vector to infect an information system?

Each correct answer represents a complete solution. Choose all that apply.

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

In which of the following malicious hacking steps does email tracking come under?

You are the Administrator for a corporate network. You are concerned about denial of service attacks.

Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?

Which of the following statements about reconnaissance is true?

Which of the following types of malware does not replicate itself but can spread only when the circumstances are beneficial?