GCIH We-are-secure Practice Questions
The free GCIH: GIAC Certified Incident Handler questions that deal with we-are-secure, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #5
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.
Correct answer: A
Explanation
IPP printing is handled by the msw3prt ISAPI extension in IIS, whose buffer overflow allowed remote code execution, so removing the IPP printing capability is the countermeasure against that IIS buffer overflow.
Question #7
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and successfully logs in to the user page of the Web site. The we-are-secure login page is vulnerable to a __________.
Correct answer: B
Explanation
Supplying quote and OR characters that alter the login query's logic so it always evaluates true is classic SQL injection, exploiting unsanitized input passed to the database.
Continue with GCIH: GIAC Certified Incident Handler
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in GCIH: GIAC Certified Incident Handler, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All GCIH: GIAC Certified Incident Handler practice questions →
