EC-COUNCIL 312-50v8 問題集

質問 1：
Attacking well-known system defaults is one of the most common hacker attacks. Most software is shipped with a default configuration that makes it easy to install and setup the application. You should change the default settings to secure the system.
Which of the following is NOT an example of default installation?
A. Enabling firewall and anti-virus software on the local system
B. Many systems come with default user accounts with well-known passwords that administrators forget to change
C. Often,the default location of installation files can be exploited which allows a hacker to retrieve a file from the system
D. Many software packages come with "samples" that can be exploited,such as the sample programs on IIS web services
正解：A

質問 2：
Which of the following is an advantage of utilizing security testing methodologies to conduct a security audit?
A. Anyone can run the command line scripts.
B. They provide a repeatable framework.
C. They are subject to government regulation.
D. They are available at low cost.
正解：B

質問 3：
Which initial procedure should an ethical hacker perform after being brought into an organization?
A. Sign a formal contract with non-disclosure.
B. Begin security testing.
C. Turn over deliverables.
D. Assess what the organization is trying to protect.
正解：A

質問 4：
A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?
A. Ignore the problem completely and let someone else deal with it.
B. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.
C. Create a document that will crash the computer when opened and send it to friends.
D. Find an underground bulletin board and attempt to sell the bug to the highest bidder.
正解：B

質問 5：
Which of the following activities will NOT be considered as passive footprinting?
A. Scan the range of IP address found in the target DNS database.
B. Search on financial site such as Yahoo Financial to identify assets.
C. Go through the rubbish to find out any information that might have been discarded.
D. Perform multiples queries using a search engine.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following is NOT part of CEH Scanning Methodology?
A. Social Engineering attacks
B. Prepare Proxies
C. Banner Grabbing
D. Check for Open Ports
E. Scan for Vulnerabilities
F. Draw Network Diagrams
G. Check for Live systems
正解：A

質問 7：
Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your network?
A. 139 and 443
B. 137 and 443
C. 137 and 139
D. 139 and 445
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Anonymizer sites access the Internet on your behalf, protecting your personal information from disclosure. An anonymizer protects all of your computer's identifying information while it surfs for you, enabling you to remain at least one step removed from the sites you visit.
You can visit Web sites without allowing anyone to gather information on sites visited by you. Services that provide anonymity disable pop-up windows and cookies, and conceal visitor's IP address.
These services typically use a proxy server to process each HTTP request. When the user requests a Web page by clicking a hyperlink or typing a URL into their browser, the service retrieves and displays the information using its own server. The remote server (where the requested Web page resides) receives information on the anonymous Web surfing service in place of your information.
In which situations would you want to use anonymizer? (Select 3 answers)
A. Post negative entries in blogs without revealing your IP identity
B. To protect your privacy and Identity on the Internet
C. To bypass blocking applications that would prevent access to Web sites or parts of sites that you want to visit.
D. Increase your Web browsing bandwidth speed by using Anonymizer
正解：A,B,C