ECSAv10無料問題集「EC-COUNCIL EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing」

質問 1

Amazon, an IT based company, conducts a survey on the usage of the Internet. They found that company employees spend most of the time at work surfing the web for their personal use and for inappropriate web site viewing. Management decide to block all such web sites using URL filtering software.

How can employees continue to see the blocked websites?

（A）Using encryption

（B）Using proxy servers

（C）Using authentication

（D）Using session hijacking

正解：B 解答を投票する

質問 2

Which of the following documents helps in creating a confidential relationship between the pen tester and client to protect critical and confidential information or trade secrets?

（A）Rules of Behavior Agreement

（B）Liability Insurance

（C）Penetration Testing Agreement

（D）Non-Disclosure Agreement

正解：D 解答を投票する

質問 3

Which one of the following acts related to the information security in the US fix the responsibility of management for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

（A）California SB 1386

（B）Sarbanes-Oxley 2002

（C）USA Patriot Act 2001

（D）Gramm-Leach-Bliley Act (GLBA)

正解：B 解答を投票する

質問 4

Hackers today have an ever-increasing list of weaknesses in the web application structure at their disposal, which they can exploit to accomplish a wide variety of malicious tasks.

New flaws in web application security measures are constantly being researched, both by hackers and by security professionals. Most of these flaws affect all dynamic web applications whilst others are dependent on specific application technologies.
In both cases, one may observe how the evolution and refinement of web technologies also brings about new exploits which compromise sensitive databases, provide access to theoretically secure networks, and pose a threat to the daily operation of online businesses.
What is the biggest threat to Web 2.0 technologies?

（A）Inside Attacks

（B）SQL Injection Attacks

（C）Service Level Configuration Attacks

（D）URL Tampering Attacks

正解：B 解答を投票する

質問 5

STION NO: 23
Identify the framework that comprises of five levels to guide agency assessment of their security programs and assist in prioritizing efforts for improvement:

（A）Microsoft Internet Security Framework

（B）Information System Security Assessment Framework (ISSAF)

（C）Federal Information Technology Security Assessment Framework

（D）Nortells Unified Security Framework

正解：C 解答を投票する

質問 6

Identify the type of authentication mechanism represented below:

（A）NTLMv2

（B）NTLMv1

（C）LAN Manager Hash

（D）Kerberos

正解：D 解答を投票する

質問 7

How many bits is Source Port Number in TCP Header packet?

（A）64

（B）16

（C）32

（D）48

正解：B 解答を投票する

質問 8

From where can clues about the underlying application environment can be collected?

（A）From file types and directories

（B）From source code

（C）From executable file

（D）From the extension of the file

正解：D 解答を投票する

ECSAv10 無料問題集「EC-COUNCIL EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing」

弊社を連絡する

関連リンク

トップ試験