Question 1

Which of the following statements are true about tcp wrappers?

Each correct answer represents a complete solution. Choose all that apply.

Options :

A : tcp wrapper provides access control, host address spoofing, client username lookups, etc.

B : When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server program directly.

C : tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to filter for access control purposes.

D : tcp wrapper protects a Linux server from IP address spoofing.

Answer: A,B,C

Question 2

Which of the following are countermeasures to prevent unauthorized database access

attacks?

Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Session encryption

B : Removing all stored procedures

C : Applying strong firewall rules

D : Input sanitization

Answer: A,B,C,D

Question 3

Which of the following attacks are examples of Denial-of-service attacks (DoS)?

Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Fraggle attack

B : Smurf attack

C : Birthday attack

D : Ping flood attack

Answer: A,B,D

Question 4

Which of the following tools is an automated tool that is used to implement SQL injections

and to retrieve data from Web server databases?

Options :

A : Fragroute

B : Absinthe

C : Stick

D : ADMutate

Answer: B

Question 5

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling

process to handle the events and incidents. You identify Denial of Service attack (DOS)

from a network linked to your internal enterprise network. Which of the following phases of

the Incident handling process should you follow next to handle this incident?

Options :

A : Containment

B : Preparation

C : Recovery

D : Identification

Answer: A

Smartly Prepare Exam with Free Online GCIH Practice Test

Buying Options: