EC-COUNCIL 312-50v8 問題集

質問 1：
When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?
A. The key entered is a symmetric key used to encrypt the wireless data.
B. The key entered is based on the Diffie-Hellman method.
C. The key entered is a hash that is used to prove the integrity of the wireless data.
D. The key is an RSA key used to encrypt the wireless data.
正解：A

質問 2：
Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network's IDS?
A. Fingerprinting to identify which operating systems are running on the network
B. ICMP ping sweep to determine which hosts on the network are not available
C. Timing options to slow the speed that the port scan is conducted
D. Traceroute to control the path of the packets sent during the scan
正解：C

質問 3：
Which tool/utility can help you extract the application layer data from each TCP connection from a log file into separate files?
A. Tcpdump
B. TCPflow
C. Snort
D. argus
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are trying to hijack a telnet session from a victim machine with IP address 10.0.0.5 to Cisco router at 10.0.0.1. You sniff the traffic and attempt to predict the sequence and acknowledgement numbers to successfully hijack the telnet session.
Here is the captured data in tcpdump.

What are the next sequence and acknowledgement numbers that the router will send to the victim machine?
A. Sequence number: 82980070 Acknowledgement number: 17768885
B. Sequence number: 87000070 Acknowledgement number: 85320085
C. Sequence number: 17768729 Acknowledgement number: 82980070
D. Sequence number: 82980010 Acknowledgement number: 17768885
正解：A

質問 5：
What happens during a SYN flood attack?
A. A TCP SYN packet,which is a connection initiation,is sent to a target machine,giving the target host's address as both source and destination,and is using the same port on the target host as both source and destination.
B. A TCP packet is received with both the SYN and the FIN bits set in the flags field.
C. A TCP packet is received with the FIN bit set but with no ACK bit set in the flags field.
D. TCP connection requests floods a target machine is flooded with randomized source address & ports for the TCP ports.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Every company needs a formal written document which spells out to employees precisely what they are allowed to use the company's systems for, what is prohibited, and what will happen to them if they break the rules. Two printed copies of the policy should be given to every employee as soon as possible after they join the organization. The employee should be asked to sign one copy, which should be safely filed by the company. No one should be allowed to use the company's computer systems until they have signed the policy in acceptance of its terms. What is this document called?
A. Information Audit Policy (IAP)
B. Company Compliance Policy (CCP)
C. Information Security Policy (ISP)
D. Penetration Testing Policy (PTP)
正解：C

質問 7：
A newly discovered flaw in a software application would be considered which kind of security vulnerability?
A. Input validation flaw
B. HTTP header injection vulnerability
C. Time-to-check to time-to-use flaw
D. 0-day vulnerability
正解：D

質問 8：
Which definition below best describes a covert channel?
A. Making use of a protocol in a way it was not intended to be used
B. A server program using a port that is not well known
C. It is the multiplexing taking place on a communication link
D. It is one of the weak channels used by WEP that makes it insecure
正解：A