GIAC Certified Incident Handler (GCIH) Free Practice Exam Questions

178 real GIAC Certified Incident Handler (GCIH) exam questions with answers and AI explanations. GIAC certification prep — page 13 of 18.

1. Question 147: Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. (Choose all that apply.)
2. Question 148: An analyst finds that a malicious program contains the instructions add 10, eax followed by sub 10, eax. What technique was the attacker likely using?
3. Question 149: Which file is critical to remove from a domain controller after a password audit?
4. Question 151: Session splicing is an IDS evasion technique in which an attacker delivers data in multiple small-sized packets to the target computer. Hence, it becomes very…
5. Question 152: You are the leader of an incident handling team for a mid-size manufacturer in the United States. Several of your company's products are patented and several p…
6. Question 153: The incident response team has been working with the various systems teams to find a way to gain root access to systems in event of an incident. It has been pr…
7. Question 154: To defend against network mapping, which of the following packets should be denied at the border router?
8. Question 155: Which of the following logs could be queried to identify Azure, Amazon and Google storage use in an organization?
9. Question 156: What is one of the functions CyberCPR performs?
10. Question 157: What can you do to proactively protect against DLL injection on your organization's Exchange server?