SEC504無料問題集「SANS Hacker Tools, Techniques, Exploits and Incident Handling」

質問 1

Which of the following wireless network security solutions refers to an authentication process in which a user can connect wireless access points to a centralized server to ensure that all hosts are properly authenticated?

（A）Remote Authentication Dial-In User Service (RADIUS)

（B）Wired Equivalent Privacy (WEP)

（C）Wi-Fi Protected Access 2 (WPA2)

（D）IEEE 802.1x

正解：D 解答を投票する

質問 2

Which of the following statements is true about the difference between worms and Trojan horses?

（A）Worms can be distributed through emails while Trojan horses cannot.

（B）Trojan horses are harmful to computers while worms are not.

（C）Trojan horses are a form of malicious codes while worms are not.

（D）Worms replicate themselves while Trojan horses do not.

正解：D 解答を投票する

質問 3

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

（A）Ethereal

（B）Nmap

（C）Netcraft

（D）Ettercap

正解：C 解答を投票する

質問 4

Which of the following types of rootkits replaces regular application binaries with Trojan fakes and modifies the behavior of existing applications using hooks, patches, or injected code?

（A）Boot loader rootkit

（B）Kernel level rootkit

（C）Application level rootkit

（D）Hypervisor rootkit

正解：C 解答を投票する

質問 5

Adam works as a Security Administrator for the Umbrella Inc. A project has been assigned to him to strengthen the security policies of the company, including its password policies. However, due to some old applications, Adam is only able to enforce a password group policy in Active Directory with a minimum of 10 characters. He informed the employees of the company, that the new password policy requires that everyone must have complex passwords with at least 14 characters. Adam wants to ensure that everyone is using complex passwords that meet the new security policy requirements. He logged on to one of the network's domain controllers and runs the following command:

Which of the following actions will this command take?

（A）The password history file is transferred to pwd.txt

（B）Dumps the Active Directory password hashes to pwd.txt

（C）Dumps the SAM password file to pwd.txt

（D）Dumps the SAM password hashes to pwd.txt

正解：D 解答を投票する

質問 6

Which of the following applications is an example of a data-sending Trojan?

（A）Firekiller 2000

（B）SubSeven

（C）Senna Spy Generator

（D）eBlaster

正解：D 解答を投票する

質問 7

Many organizations create network maps of their network system to visualize the network and understand the relationship between the end devices and the transport layer that provide services.
Which of the following are the techniques used for network mapping by large organizations?
Each correct answer represents a complete solution. Choose three.

（A）Active Probing

（B）SNMP-based approaches

（C）Route analytics

（D）Packet crafting

正解：A、B、C 解答を投票する

質問 8

Which of the following tools combines two programs, and also encrypts the resulting
package in an attempt to foil antivirus programs?

（A）EliteWrap

（B）Trojan Man

（C）NetBus

（D）Tiny

正解：B 解答を投票する

質問 9

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems. You use Nessus as a vulnerability scanning program to fix the vulnerabilities. Which of the following vulnerabilities can be fixed using Nessus?
Each correct answer represents a complete solution. Choose all that apply.

（A）Misconfiguration (e.g. open mail relay, missing patches, etc.)

（B）Vulnerabilities that allow a remote cracker to access sensitive data on a system

（C）Vulnerabilities that allow a remote cracker to control sensitive data on a system

（D）Vulnerabilities that help in Code injection attacks

正解：A、B、C 解答を投票する

SEC504 無料問題集「SANS Hacker Tools, Techniques, Exploits and Incident Handling」

弊社を連絡する

関連リンク

トップ試験