← Back to exam page

Free GCIH – GIAC Certified Incident Handler Practice Test Question

Loading demo links...

Showing 10–12 of 20 questions

Question 10 (Volume A)

Which of the following statements are true about firewalking?

Each correct answer represents a complete solution. (Choose all that apply.)

Select all that apply, then click Submit answer.

  • ○

    To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
  • ○

    In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.
  • ○

    A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
  • ○

    Firewalking works on the UDP packets.
Question 11 (Volume B)

What is the purpose of configuring a password protected screen saver on a computer?

Select an option, then click Submit answer.

  • ○

    For preventing unauthorized access to a system.
  • ○

    For preventing a system from a Denial of Service (DoS) attack.
  • ○

    For preventing a system from a social engineering attack.
  • ○

    For preventing a system from a back door attack.
Question 12 (Volume C)

Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or stop the traffic altogether?

Select an option, then click Submit answer.

  • ○

    Port scanning
  • ○

    ARP spoofing
  • ○

    Man-in-the-middle
  • ○

    Session hijacking