GIAC Certified Incident Handler (GCIH) Free Practice Exam Questions

178 real GIAC Certified Incident Handler (GCIH) exam questions with answers and AI explanations. GIAC certification prep — page 2 of 18.

1. Question 11: Which of the following Volatility commands will display the date and time an image was collected?
2. Question 12: Which UNIX log file contains information about currently logged in users?
3. Question 14: Failing DNS, what will modern Windows systems use to resolve names of other systems?
4. Question 15: What is a DNS zone transfer?
5. Question 16: If an accounting department's computer system was compromised, who should make the decision about when that system is put back into production?
6. Question 17: Which Microsoft tool can be used to mitigate the risk of an adversary reusing a stolen local administrator password hash?
7. Question 18: Which of the following types of attack can guess a hashed password?
8. Question 19: Which special character or character sequence is often used in SQL injection attacks because it acts as a SQL comment delimiter?
9. Question 21: Which of the following attacks come under the category of layer 2 Denial-of-Service attacks? Each correct answer represents a complete solution. (Choose all th…
10. Question 22: Which endpoint security bypass technique modifies the assembly of an executable?