EC-COUNCIL 312-50v8 問題集

質問 1：
Vulnerability mapping occurs after which phase of a penetration test?
A. Passive information gathering
B. Analysis of host scanning
C. Host scanning
D. Network level discovery
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You work as security technician at XYZ.com. While doing web application testing, you might be required to look through multiple web pages online which can take a long time. Which of the processes listed below would be a more efficient way of doing this type of validation?
A. Use wget to download all pages locally for further inspection.
B. Use mget to download all pages locally for further inspection.
C. Use get* to download all pages locally for further inspection.
D. Use get() to download all pages locally for further inspection.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
LAN Manager Passwords are concatenated to 14 bytes, and split in half. The two halves are hashed individually. If the password is 7 characters or less, than the second half of the hash is always:
A. 0xAAD3B435B51404EE
B. 0xAAD3B435B51404BB
C. 0xAAD3B435B51404CC
D. 0xAAD3B435B51404AA
正解：A

質問 4：
Neil is a network administrator working in Istanbul. Neil wants to setup a protocol analyzer on his network that will receive a copy of every packet that passes through the main office switch. What type of port will Neil need to setup in order to accomplish this?
A. Neil will need to setup SPAN port that will copy all network traffic to the protocol analyzer.
B. He should setup a MODS port which will copy all network traffic.
C. Neil will have to configure a Bridged port that will copy all packets to the protocol analyzer.
D. He will have to setup an Ether channel port to get a copy of all network traffic to the analyzer.
正解：A

質問 5：
Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enumeration he is looking for?
Select the best answers.
A. SNScan
B. NMap
C. SNMPScan
D. SNMPUtil
E. Solarwinds IP Network Browser
正解：A,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You establish a new Web browser connection to Google. Since a 3-way handshake is required for any TCP connection, the following actions will take place.

Which of the following packets represent completion of the 3-way handshake?
A. 5thpacket
B. 4thpacket
C. 3rdpacket
D. 6thpacket
正解：A

質問 7：
Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command.
For /f "tokens=1 %%a in (hackfile.txt) do net use * \\10.1.2.3\c$ /user:"Administrator" %%a
What is Eve trying to do?
A. Eve is trying to connect as an user with Administrator privileges
B. Eve is trying to escalate privilege of the null user to that of Administrator
C. Eve is trying to carry out a password crack for user Administrator
D. Eve is trying to enumerate all users with Administrative privileges
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Exhibit:
Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?
A. wwwroot
B. har.txt
C. Repair file
D. SAM file
正解：D
解説: (Topexam メンバーにのみ表示されます)