ECCouncil 312-50v13 問題集

質問 1：
Which results will be returned with the following Google search query? site:target.com - site:Marketing.
target.com accounting
A. Results matching "accounting" in domain target.com but not on the site Marketing.target.com
B. Results for matches on target.com and Marketing.target.com that include the word "accounting"
C. Results matching all words in the query.
D. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting.
正解：A

質問 2：
An IT security team is conducting an internal review of security protocols in their organization to identify potential vulnerabilities. During their investigation, they encounter a suspicious program running on several computers. Further examination reveals that the program has been logging all user keystrokes. How can the security team confirm the type of program and what countermeasures should be taken to ensure the same attack does not occur in the future?
A. The program is a keylogger; the team should employ intrusion detection systems and regularly update the system software
B. The program is a keylogger; the team should educate employees about phishing attacks and maintain regular backups
C. The program is spyware; the team should use password managers and encrypt sensitive data
D. The program is a Trojan; the tearm should regularly update antivirus software and install a reliable firewall
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?
A. hping2 -i host.domain.com
B. hping2 host.domain.com
C. hping2 --set-ICMP host.domain.com
D. hping2 -1 host.domain.com
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are an ethical hacker tasked with conducting an enumeration of a company's network. Given a Windows system with NetBIOS enabled, port 139 open, and file and printer sharing active, you are about to run some nbtstat commands to enumerate NetBIOS names. The company uses |Pv6 for its network. Which of the following actions should you take next?
A. Utilize Nmap Scripting Engine (NSE) for NetBIOS enumeration
B. Switch to an enumeration tool that supports IPv6
C. use nbtstat -a followed by the IPv6 address of the target machine
D. Use nbtstat -c to get the contents of the NetBIOS name cache
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
How does a denial-of-service attack work?
A. A hacker uses every character, word, or letter he or she can think of to defeat authentication
B. A hacker attempts to imitate a legitimate user by confusing a computer or even another person
C. A hacker tries to decipher a password by using a system, which subsequently crashes the network
D. A hacker prevents a legitimate user (or group of users) from accessing a service
正解：D

質問 6：
You have been hired as an intern at a start-up company. Your first task is to help set up a basic web server for the company's new website. The team leader has asked you to make sure the server is secure from common - threats. Based on your knowledge from studying for the CEH exam, which of the following actions should be your priority to secure the web server?
A. Installing a web application firewall
B. Encrypting the company's website with SSL/TLS
C. Regularly updating and patching the server software
D. limiting the number of concurrent connections to the server
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Taylor, a security professional, uses a tool to monitor her company's website, analyze the website's traffic, and track the geographical location of the users visiting the company's website. Which of the following tools did Taylor employ in the above scenario?
A. web-Stat
B. WAFW00F
C. Webroot
D. WebSite Watcher
正解：A
解説: (Topexam メンバーにのみ表示されます)