EC-COUNCIL 312-50v8 問題集

質問 1：
This packet was taken from a packet sniffer that monitors a Web server.

This packet was originally 1514 bytes long, but only the first 512 bytes are shown here. This is the standard hexdump representation of a network packet, before being decoded. A hexdump has three columns: the offset of each line, the hexadecimal data, and the ASCII equivalent. This packet contains a 14-byte Ethernet header, a 20-byte IP header, a 20-byte TCP header, an HTTP header ending in two line-feeds (0D 0A 0D 0A) and then the data. By examining the packet identify the name and version of the Web server?
A. IIS 4.0
B. Apache 1.2
C. IIS 5.0
D. Linux WServer 2.3
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
What is SYSKEY # of bits used for encryption?
A. 40
B. 256
C. 128
D. 64
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
What is the problem with this ASP script (login.asp)?

A. The ASP script is vulnerable to XSS attack
B. The ASP script is vulnerable to SQL Injection attack
C. The ASP script is vulnerable to Cross Site Scripting attack
D. The ASP script is vulnerable to Session Splice attack
正解：B

質問 4：
War dialing is a very old attack and depicted in movies that were made years ago.
Why would a modem security tester consider using such an old technique?
A. It allows circumvention of the company PBX.
B. A good security tester would not use such a derelict technique.
C. It allows circumvention of protection mechanisms by being on the internal network.
D. It is cool,and if it works in the movies it must work in real life.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which of the following is the best way an attacker can passively learn about technologies used in an organization?
A. By sending web bugs to key personnel
B. By performing a port scan on the organization's web site
C. By searching regional newspapers and job databases for skill sets technology hires need to possess in the organization
D. By webcrawling the organization web site
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
What happens during a SYN flood attack?
A. A TCP SYN packet,which is a connection initiation,is sent to a target machine,giving the target host's address as both source and destination,and is using the same port on the target host as both source and destination.
B. A TCP packet is received with both the SYN and the FIN bits set in the flags field.
C. A TCP packet is received with the FIN bit set but with no ACK bit set in the flags field.
D. TCP connection requests floods a target machine is flooded with randomized source address & ports for the TCP ports.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
To scan a host downstream from a security gateway, Firewalking:
A. Sends an ICMP ''administratively prohibited'' packet to determine if the gateway will drop the packet without comment.
B. Uses the TTL function to send packets with a TTL value set to expire one hop past the identified security gateway
C. Assesses the security rules that relate to the target system before it sends packets to any hops on the route to the gateway
D. Sends a UDP-based packet that it knows will be blocked by the firewall to determine how specifically the firewall responds to such packets
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the corporate network. What tool should the analyst use to perform a Blackjacking attack?
A. BBCrack
B. BBProxy
C. Blooover
D. Paros Proxy
正解：B