[2024年01月05日]ECSSv9試験問題集でリアル試験と100%同じ問題と解答
ECSSv9テストエンジン問題集トレーニングには95問あります
ECSSV9（EC-Council Certified Security Specialist V9）は、サイバーセキュリティでのキャリアを追求することに関心のあるIT専門家向けに設計されたエントリーレベルの認定です。この認定は、国際電子商業コンサルタント（ECカウンシル）によって提供され、世界中の組織や政府によって認められています。
質問 # 48
Modern encryption is classified as _____ or _____.
- A. Public or Private
- B. Encrypted or Decrypted
- C. Algorithmic or Manual
- D. Symmetric or Asymmetric
正解：D
解説：
Explanation: Modern encryption uses many of these methods in combination and in conjunction with algorithms that use a series of programmed calculations and transformations to derive strong keys. Modern encryption is classified as Symmetric or Asymmetric. Symmetric encryption allows the use of the same key (a single key) to encrypt and to decrypt the data/message; Asymmetric encryption allows the use of a split (two-part) key to encrypt and to decrypt the data/message. Using asymmetric encryption algorithms, the owner of the key gives out a 'public' key that may be used by anyone to encrypt a message; the second half of the key (private key) is only know to the owner of the key and is used by asymmetric encryption algorithms to decrypt the message. Using two-part (public and private) keys provides a greater degree of flexibility, while maintaining a high degree of security, since anyone may use the public key and only the owner of the private key may read the message.
質問 # 49
Cryptography is used to conceal data in transmission by the use of _____.
- A. authentication
- B. encryption
- C. checksum
- D. decryption
正解：B
解説：
Explanation: Encryption encodes data in transmission making it unreadable to unauthorised users.
質問 # 50
Bluesnarfing requires which of these?
- A. The BD_ADDR identifier
- B. Authentication by the target
- C. Wifi access
- D. Device passcode
正解：A
解説：
Explanation: For Bluesnarfing, the BD_ADDR is needed. This can be obtained by a brute-force attack, but there are 8.4 Million possible combinations.
質問 # 51
A/An _____ can happen if you're not careful when using public Wi-Fi.
- A. DDoS attack
- B. SSID launch
- C. encryption lapse
- D. man-in-the-middle attack
正解：D
解説：
Explanation: A man-in-the-middle is when a hacker broadcasts a phoney SSID to fool a public Wi-Fi user.
質問 # 52
A phishing attack that incorporates personal information about the user is known as which of the following?
- A. DNS copying.
- B. Spear phishing.
- C. Spam filtering.
- D. Website spoofing.
正解：B
解説：
Explanation: Spear phishing schemes use personal information of the victim to increase the probability of the success of the attack.
質問 # 53
Evidence is said to be reliable when _____
- A. it remains unchanged prior to or after collection.
- B. its chain of custody is not monitored.
- C. it is presented by more than one witness.
- D. data is similar to the original.
正解：A
質問 # 54
Which of the following intrusion detection methods deals with known patterns or attributes?
- A. Reactive
- B. Passive
- C. Signature
- D. Anomaly
正解：C
解説：
Explanation: Signature is the intrusion detection method that deals with known patterns or attributes. Passive, anomaly, and reactive deal with other things.
質問 # 55
Symmetric encryption uses:
- A. A key for encryption, but no key for decryption.
- B. A key for decryption, but no key for encryption.
- C. The same key for encryption and decryption.
- D. Different keys for encryption and decryption.
正解：C
解説：
Explanation: Symmetric encryption uses the same key for encryption and decryption. The remaining items either don't describe symmetric encryption, or produce unreadable information.
質問 # 56
Which organisation created the suggested standard for communications that describes how data is sent and received over a network?
- A. Federal Communications Commission (FCC)
- B. World Wide Web Consortium (W3C)
- C. International Organisation for Standardisation (ISO)
- D. American Communication Consortium (ACC)
正解：C
解説：
Explanation: The OSI model is a suggested standard for communication that was developed by the International Organisation for Standardisation (ISO). It describes how data is sent and received over a network and breaks down data transmission over a series of seven layers.
質問 # 57
Which of the following devices store data?
- A. All of the answers are correct
- B. Laptops
- C. Computers
- D. Smartphones
正解：A
解説：
Explanation: Computers, laptops, tablets, smartphones and other devices all store data.
The methods and technologies used may vary, but the basic concept is always the same:
information is kept so that it can be accessed again later.
質問 # 58
An IPv4 address contains _____ digits in _____ sets separated by a _____.
- A. 3, 4 ; comma
- B. 4; 3; comma
- C. 4; 3; period
- D. 3; 4; period
正解：D
解説：
Explanation: IPv4 addresses are a system of a set of 3 digits, each separated by a period.
They appear like this 127.255.0.12
質問 # 59
The operating system's role in the protection of the system from physical threats involves:
- A. providing port scanning mechanisms
- B. providing tools to enable system firewall deployments
- C. triggering denial of service attacks to prevent malicious users from using the system
- D. providing tools to enable system backups and restoration of the OS itself, files, programs and data
正解：D
解説：
Explanation: The physical security of a system is external to the OS and has to be ensured by physical or external security measures. The OS comprises systems that enable users to create backups of programs and data that will facilitate a successful restore following any physical threat.
質問 # 60
Which internet protocol is responsible for moving data packets along the Internet network?
- A. OSI
- B. IP
- C. HTML
- D. TPC
正解：B
質問 # 61
Fire is an example of a _____ information security threat.
- A. Internal
- B. External
- C. Physical
- D. Logical
正解：C
解説：
Explanation: Fire is an example of a physical information security threat. Internal are external threat categories, and logic is not related to threats.
質問 # 62
HTTPS _____ the data sent between your web browser and the web site.
- A. encrypts
- B. encapsulates
- C. intercepts
- D. authenticates
正解：A
質問 # 63
The CIA model of information security contains what three principles?
- A. Authentication, Corroboration, and Integrity
- B. Confidentiality, Integrity, and Authorization
- C. Integrity, Confidentiality, and Availability
- D. Completion, Invisibility, and Accuracy
正解：C
解説：
Explanation: The CIA model relies on confidentiality, integrity, and availability to secure and protect information.
質問 # 64
A key is:
- A. An external piece of information used in the encryption and decryption process.
- B. Different for encryption and decryption in asymmetric encryption.
- C. All of these answers are correct.
- D. The same for encryption and decryption in symmetric encryption.
正解：C
解説：
Explanation: Each describes a characteristic of a key, in certain situations.
質問 # 65
Which term is used to describe initial communication between two Bluetooth devices?
- A. Twinning
- B. Pairing
- C. Matching
- D. Binding
正解：B
解説：
Explanation: Bluetooth connections are initiated by pairing two devices, and after an acceptance procedure they communicate.
質問 # 66
Requiring you to sign a contract uses the principle of _____ to secure the contract.
- A. confidentiality
- B. non-repudiation
- C. availability
- D. integrity
正解：B
解説：
Explanation: If someone signs a contract and the signature can be verified to be theirs, they cannot deny (repudiate) that they signed the contract.
質問 # 67
Copies of originals of digital evidence are used as best evidence to ensure _____.
- A. photocopiers, scanners and other replicating devices are properly utilised.
- B. the original evidence is kept hidden from the culprit.
- C. there is no misrepresentation or damage to the original evidence.
- D. every member of the courtroom has a copy of the evidence.
正解：C
質問 # 68
One of the main points of vulnerability of a system is that data in _____ is not encrypted.
- A. transmission
- B. use
- C. storage
- D. devices
正解：B
解説：
Explanation: Data in use on the system is not encrypted. There is a point of vulnerability of the system while files are in use.
質問 # 69
Which of the following is NOT direct evidence?
- A. Julia testifies in court that she got an email that Tim killed her husband.
- B. Julia was found in possession of illegal copies of copyrighted software.
- C. Julia's login details were used to steal money from the bank and CCTV captured it the same moment she was using the computer.
- D. Julia confesses to killing her husband.
正解：A
解説：
Explanation: The email could be hacked so it could not prove that Tim actually killed her husband.
質問 # 70
_____ is anything that can negatively affect information.
- A. An information security threat
- B. A threat
- C. A rule
- D. None of these answers are correct
正解：A
解説：
Explanation: An information security threat is anything that can negatively affect information. A threat doesn't deal specifically with information, and a rule is used to protect information.
質問 # 71
Digital evidence is said to be authentic when _____.
- A. it is unchanged, originates from the purported device, and timestamps associated with the data are inconsistent.
- B. it is based on hearsay, unchanged and similar to the original.
- C. it is similar to the original, originates from the purported device, and timestamps associated with the data are correct.
- D. it is unchanged, originates from the purported device, and timestamps associated with the data are correct.
正解：D
質問 # 72
The roots of modern encryption can be traced back almost _____ years.
- A. 0
- B. 1
- C. 4,000
- D. 2,000
正解：C
解説：
Explanation: The roots of modern encryption can be traced back almost 4,000 years.
Encryption allows a person to hide the meaning of information, or messages in such a way that only those who know the secret method may read them. For a very long time, people have had many different reasons for wanting to hide information from others. The earliest historic examples were for hiding trade secrets, military secrets, and secret correspondences between spies and lovers. These same encryption principles are now used to safeguard your internet communications.
質問 # 73
......
ECSSv9練習テストPDF試験材料：https://www.jpntest.com/shiken/ECSSv9-mondaishu
ECSSv9問題で一発合格させる問題集にはE-Commerce Architect認定問題を使おう：https://drive.google.com/open?id=195kp_hbFuovprdDWnt9XjXp1unpOLob-