EC-COUNCIL 312-50v9 問題集

質問 1：
You have successfully gained access to your client's internal network and successfully comprised a linux server which is part of the internal IP network. You want to know which Microsoft Windows workstation have the sharing enabled.
Which port would you see listeningon these Windows machines in the network?
A. 1443
B. 445
C. 161
D. 3389
正解：B

質問 2：
When you are testing a web application, it is very useful to employ a prosy tool to save every request and response.Nyou can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners.
What proxy tool will help you find web vulnerabilities?
A. Proxychains
B. Dimitry
C. Burpsuite
D. Maskgen
正解：C

質問 3：
Which of the following is a low-tech way of gaining unauthorized access to systems?
A. Eavesdropping
B. Scanning
C. Social engineering
D. Sniffing
正解：C

質問 4：
A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing inconcluding the Operating System (OS) version
installed. Considering the NMAP result below, which of the follow is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80 /tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tec open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8
A. The host is likely a Windows machine.
B. The host is likely a Linux machine.
C. The host is likely a printer.
D. The host is likely a router.
正解：C

質問 5：
In Risk Management, how is the term "likelihood" related to the concept of "threat?"
A. Likelihood is the probability that a threat-source will exploit a vulnerability.
B. Likelihood is the likely source of a threat that could exploit a vulnerability.
C. Likelihood is a possible threat-source that may exploit a vulnerability.
D. Likelihood is the probability that a vulnerability is a threat-source.
正解：A

質問 6：
Using Windows CMD, how would an attacker list all the shares to which the current user context hasaccess?
A. NET VIEW
B. NET CONFIG
C. NET USE
D. NET FILE
正解：A

質問 7：
Which of the following is the BEST way to defend against network sniffing?
A. Restrict Physical Access to Server Rooms hosting Critical Servers
B. Using encryption protocols to secure network communications
C. Use Static IP Address
D. Register all machines MAC Address in a centralized Database
正解：B