EC0-350無料問題集「EC-COUNCIL Ethical hacking and countermeasures」

質問 1

E-mail tracking is a method to monitor and spy the delivered e-mails to the intended recipient.

Select a feature, which you will NOT be able to accomplish with this probe?

（A）Set messages to expire after specified time

（B）Time spent on reading the e-mails

（C）GPS location and map of the recipient

（D）Track PDF and other types of attachments

（E）Whether or not the recipient visited any links sent to them

（F）When the e-mail was received and read

（G）Remote control the User's E-mail client application and hijack the traffic

（H）Send destructive e-mails

正解：G 解答を投票する

質問 2

WWW wanderers or spiders are programs that traverse many pages in the World Wide Web by recursively retrieving linked pages. Search engines like Google, frequently spider web pages for indexing. How will you stop web spiders from crawling certain directories on your website?

（A）Place robots.txt file in the root of your website with listing of directories that you don't want to be crawled

（B）Place "HTTP:NO CRAWL" on the html pages that you don't want the crawlers to index

（C）Place authentication on root directories that will prevent crawling from these spiders

（D）Enable SSL on the restricted directories which will block these spiders from crawling

正解：A 解答を投票する

質問 3

You are the security administrator for a large network. You want to prevent attackers from running any sort of traceroute into your DMZ and discovering the internal structure of publicly accessible areas of the network. How can you achieve this?

（A）Block UDP at the firewall

（B）Block TCP at the firewall

（C）Block ICMP at the firewall

（D）There is no way to completely block tracerouting into this area

正解：D 解答を投票する

質問 4

An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

（A）Classified

（B）Covert

（C）Encrypted

（D）Overt

正解：B 解答を投票する

質問 5

What file system vulnerability does the following command take advantage of?
type c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe

（A）HFS

（B）NTFS

（C）ADS

（D）Backdoor access

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Consider the following code:
URL:http://www.certified.com/search.pl?
text=<script>alert(document.cookie)</script>
If an attacker can trick a victim user to click a link like this, and the Web application does not validate input, then the victim's browser will pop up an alert showing the users current set of cookies. An attacker can do much more damage, including stealing passwords, resetting your home page, or redirecting the user to another Web site.
What is the countermeasure against XSS scripting?

（A）Create an IP access list and restrict connections based on port number

（B）Connect to the server using HTTPS protocol instead of HTTP

（C）Replace "<" and ">" characters with "& l t;" and "& g t;" using server scripts

（D）Disable Javascript in IE and Firefox browsers

正解：C 解答を投票する

質問 7

John is the network administrator of XSECURITY systems. His network was recently compromised. He analyzes the log files to investigate the attack. Take a look at the following Linux log file snippet. The hacker compromised and "owned" a Linux machine. What is the hacker trying to accomplish here?

（A）The hacker is running a buffer overflow exploit to lock down the system

（B）The hacker is trying to cover his tracks

（C）The hacker is planting a rootkit

（D）The hacker is attempting to compromise more machines on the network

正解：B 解答を投票する

質問 8

Vulnerability mapping occurs after which phase of a penetration test?

（A）Host scanning

（B）Passive information gathering

（C）Analysis of host scanning

（D）Network level discovery

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Stephanie works as a records clerk in a large office building in downtown Chicago. On Monday, she went to a mandatory security awareness class (Security5) put on by her company's IT department. During the class, the IT department informed all employees that everyone's Internet activity was thenceforth going to be monitored.
Stephanie is worried that her Internet activity might give her supervisor reason to write her up, or worse get her fired. Stephanie's daily work duties only consume about four hours of her time, so she usually spends the rest of the day surfing the web. Stephanie really enjoys surfing the Internet but definitely does not want to get fired for it.
What should Stephanie use so that she does not get in trouble for surfing the Internet?

（A）Stealth IE

（B）Stealth Firefox

（C）Stealth Anonymizer

（D）Cookie Disabler

正解：C 解答を投票する

EC0-350 無料問題集「EC-COUNCIL Ethical hacking and countermeasures」

弊社を連絡する

関連リンク

トップ試験