QUESTION: 53

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

Answer(s): C

Reveal Solution Next Question

QUESTION: 54

Which of the following is the best method of accurately identifying the services running on a victim host?

Use of the manual method of telnet to each of the open ports.
Use of a port scanner to scan each port to confirm the services running.
Use of hit and trial method to guess the services and ports of the victim host.
Use of a vulnerability scanner to try to probe each port to verify which service is running.

Answer(s): A

Reveal Solution Next Question

QUESTION: 55

Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows-based network. Jason successfully enters the target system remotely by using the advantage of vulnerability. He places a Trojan to maintain future access and then disconnects the remote session. The employees of the company complain to Mark, who works as a Professional Ethical Hacker for DataSoft Inc., that some computers are very slow. Mark diagnoses the network and finds that some irrelevant log files and signs of Trojans are present on the computers. He suspects that a malicious hacker has accessed the network. Mark takes the help from Forensic Investigators and catches Jason.
Which of the following mistakes made by Jason helped the Forensic Investigators catch him?

Jason did not perform a vulnerability assessment.
Jason did not perform OS fingerprinting.
Jason did not perform foot printing.
Jason did not perform covering tracks.
Jason did not perform port scanning.

Answer(s): D

Reveal Solution Next Question

QUESTION: 56

Which of the following functions can be used as a countermeasure to a Shell Injection attack? Each correct answer represents a complete solution. (Choose all that apply.)

escapeshellarg()
mysql_real_escape_string()
regenerateid()
escapeshellcmd()

Answer(s): A,D

Reveal Solution Next Question

GIAC Certified Incident Handler GCIH Exam

QUESTION: 53

QUESTION: 54

QUESTION: 55

QUESTION: 56

GIAC Certified Incident Handler
GCIH Exam