EC-COUNCIL 312-50v9 問題集

質問 1：
When you return to your desk after a lunch break, you notice a strange email in your inbox. The senders is someone you did business with recently but the subject line has strange characters in it.
What should you do?
A. Forward the message to your supervisor andask for her opinion on how to handle the situation.
B. Reply to the sender and ask them for more information about the message contents.
C. Forward the message to your company's security response team and permanently delete the message from your computer.
D. Delete the email and pretend nothing happened.
正解：C

質問 2：
In 2007, this wireless security algorithm was rendered useless by capturing packets and discovering the passkey in a matter of seconds. This security flaw led to a network invasion of TJ Maxx and data theft through a technique known wardriving.
Which algorithm is this referring to?
A. Wi-Fi Protected Access 2(WPA2)
B. Wired Equivalent Privacy (WEP)
C. Temporal Key Integrity Protocol (TRIP)
D. Wi-Fi Protected Access (WPA)
正解：B

質問 3：
Which method of password cracking takes the most time and effect?
A. Rainbow Tables
B. Shoulder surfing
C. Directory attack
D. Bruce force
正解：D

質問 4：
You are performing a penetration test. You achieved access via a bufferoverflow exploit and you proceed to find interesting data, such as files with usernames and passwords. You find a hidden folder that has the administrator's bank account password and login information for the administrator's bitcoin account.
What should you do?
A. Report immediately to the administrator.
B. Do not report it and continue the penetration test.
C. Transfer money from the administrator's account to another account.
D. Do not transfer the money but steal the bitcoins.
正解：A

質問 5：
Which of the following is the structure designed to verify and authenticate the identity of individuals within the enterprise taking part in a data exchange?
A. SOA
B. biometrics
C. single sign on
D. PKI
正解：D

質問 6：
You just set up a security system in your network. In what kind of system would you find thefollowing string of characters used as a rule within its configuration?
alert tcp any any ->192.168.100.0/24 21 (msg: "FTP on the network!";)
A. An Intrusion Detection System
B. A Router IPTable
C. A firewall IPTable
D. FTP Server rule
正解：A

質問 7：
A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shallscript files, and the third is a binary file is named "nc." The FTP server's access logs show that the anonymous user account logged in the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function providedby the FTP server's software. The ps command shows that the nc file is running as process, and the netstat command shows the nc process is listening on a network port.
Which kind of vulnerability must be present to make this remote attack possible?
A. Brute Force Login
B. Directory Traversal
C. Filesystem permissions
D. Privilege Escalation
正解：B