412-79v10無料問題集「EC-COUNCIL EC-Council Certified Security Analyst (ECSA) V10」

質問 1

Security auditors determine the use of WAPs on their networks with Nessus vulnerability scanner which identifies the commonly used WAPs.
One of the plug-ins that the Nessus Vulnerability Scanner uses is ID #11026 and is named "Access Point Detection". This plug-in uses four techniques to identify the presence of a WAP.
Which one of the following techniques is mostly used for uploading new firmware images while upgrading the WAP device?

（A）NMAP TCP/IP fingerprinting

（B）SNMP fingerprinting

（C）HTTP fingerprinting

（D）FTP fingerprinting

正解：D 解答を投票する

質問 2

Which of the following statement holds true for TCP Operation?

（A）Flow control shows the trend of a transmitting host overflowing the buffers in the receiving host

（B）Data transfer begins even before the connection is established

（C）Sequence numbers are used to track the number of packets lost in transmission

（D）Port numbers are used to know which application the receiving host should pass the data to

正解：B 解答を投票する

質問 3

Amazon, an IT based company, conducts a survey on the usage of the Internet. They found that company employees spend most of the time at work surfing the web for their personal use and for inappropriate web site viewing. Management decide to block all such web sites using URL filtering software.

How can employees continue to see the blocked websites?

（A）Using encryption

（B）Using proxy servers

（C）Using authentication

（D）Using session hijacking

正解：B 解答を投票する

質問 4

What is the target host IP in the following command?

（A）10.10.150.1

（B）172.16.28.95

（C）This command is using FIN packets, which cannot scan target hosts

（D）Firewalk does not scan target hosts

正解：D 解答を投票する

質問 5

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing. Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.

Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?

（A）A list of employees in the client organization

（B）Specific IP addresses/ranges to be tested

（C）Points of contact for the penetration testing team

（D）A list of acceptable testing techniques

正解：A 解答を投票する

質問 6

Identify the port numbers used by POP3 and POP3S protocols.

（A）111 and 982

（B）113 and 981

（C）110 and 995

（D）109 and 973

正解：C 解答を投票する

質問 7

Identify the type of firewall represented in the diagram below:

（A）Circuit level gateway

（B）Packet filter

（C）Stateful multilayer inspection firewall

（D）Application level gateway

正解：C 解答を投票する

質問 8

Which of the following shields Internet users from artificial DNS data, such as a deceptive or mischievous address instead of the genuine address that was requested?

（A）DNSSEC

（B）Packet filtering

（C）Firewall

（D）IPSec

正解：A 解答を投票する

質問 9

Which one of the following is a supporting tool for 802.11 (wireless) packet injections, it spoofs 802.11 packets to verify whether the access point is valid or not?

（A）Airpwn

（B）Airsnort

（C）WEPCrack

（D）Aircrack

正解：A 解答を投票する

質問 10

Which of the following attributes has a LM and NTLMv1 value as 64bit + 64bit + 64bit and NTLMv2 value as
128 bits?

（A）C/R Key Length

（B）Hash Key Length

（C）C/R Value Length

（D）Hash Value Length

正解：C 解答を投票する

質問 11

Which of the following will not handle routing protocols properly?

（A）"Internet-firewall-router-net architecture"

（B）"Internet-router-firewall-net architecture"

（C）"Internet-firewall -net architecture"

（D）"Internet-firewall/router(edge device)-net architecture"

正解：A 解答を投票する

質問 12

Identify the type of testing that is carried out without giving any information to the employees or administrative head of the organization.

（A）Announced Testing

（B）Double Blind Testing

（C）Unannounced Testing

（D）Blind Testing

正解：B 解答を投票する

質問 13

What are placeholders (or markers) in an HTML document that the web server will dynamically replace with data just before sending the requested documents to a browser?

（A）Slide Server Includes

（B）Sort Server Includes

（C）Server Sort Includes

（D）Server Side Includes

正解：D 解答を投票する

412-79v10 無料問題集「EC-COUNCIL EC-Council Certified Security Analyst (ECSA) V10」

弊社を連絡する

関連リンク

トップ試験