EC-COUNCIL 312-50v8 問題集

質問 1：
In Trojan terminology, what is required to create the executable file chess.exe as shown below?

A. Mixer
B. Wrapper
C. Converter
D. Zipper
正解：B

質問 2：
What is the most secure way to mitigate the theft of corporate information from a laptop that was left in a hotel room?
A. Set a BIOS password.
B. Back up everything on the laptop and store the backup in a safe place.
C. Use a strong logon password to the operating system.
D. Encrypt the data on the hard drive.
正解：D

質問 3：
Clive has been hired to perform a Black-Box test by one of his clients.
How much information will Clive obtain from the client before commencing his test?
A. Only the IP address range.
B. All that is available from the client site.
C. IP Range,OS,and patches installed.
D. Nothing but corporate name.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
If an attacker's computer sends an IPID of 24333 to a zombie (Idle Scanning) computer on a closed port, what will be the response?
A. The zombie computer will not send a response.
B. The zombie computer will respond with an IPID of 24334.
C. The zombie computer will respond with an IPID of 24335.
D. The zombie computer will respond with an IPID of 24333.
正解：B

質問 5：
While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?
A. Attempt to crack the WEP key using Airsnort.
B. Steel a client computer and use it to access the wireless network.
C. Sniff traffic if the WLAN and spoof your MAC address to one that you captured.
D. Attempt to brute force the access point and update or delete the MAC ACL.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following steganography utilities exploits the nature of white space and allows the user to conceal information in these white spaces?
A. Snow
B. Gif-It-Up
C. Image Hide
D. NiceText
正解：A

質問 7：
In the context of Windows Security, what is a 'null' user?
A. A user that has no skills
B. A pseudo account that has no username and password
C. An account that has been suspended by the admin
D. A pseudo account that was created for security administration purpose
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
How would you describe a simple yet very effective mechanism for sending and receiving unauthorized information or data between machines without alerting any firewalls and IDS's on a network?
A. Covert Channel
B. Crafted Channel
C. Deceptive Channel
D. Bounce Channel
正解：A
解説: (Topexam メンバーにのみ表示されます)