EC-COUNCIL 412-79v10 問題集

質問 1：
You are a security analyst performing a penetration tests for a company in the Midwest. After some initial reconnaissance, you discover the IP addresses of some Cisco routers used by the company. You type in the following URL that includes the IP address of one of the routers:
http://172.168.4.131/level/99/exec/show/config
After typing in this URL, you are presented with the entire configuration file for that router. What have you discovered?
A. Cisco IOS Arbitrary Administrative Access Online Vulnerability
B. HTML Configuration Arbitrary Administrative Access Vulnerability
C. URL Obfuscation Arbitrary Administrative Access Vulnerability
D. HTTP Configuration Arbitrary Administrative Access Vulnerability
正解：D

質問 2：
Choose the correct option to define the Prefix Length.

A. Prefix Length = Network + Subnet + Host portions
B. Prefix Length = Network + Subnet portions
C. Prefix Length = Network + Host portions
D. Prefix Length = Subnet + Host portions
正解：B

質問 3：
An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?
A. SOAP Injection Attack
B. LDAP Injection Attack
C. XPath Injection Attack
D. Frame Injection Attack
正解：A

質問 4：
What is the difference between penetration testing and vulnerability testing?

A. Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities
B. Vulnerability testing is more expensive than penetration testing
C. Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of 'in-depth ethical hacking'
D. Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans
正解：C

質問 5：
Which of the following attributes has a LM and NTLMv1 value as 64bit + 64bit + 64bit and NTLMv2 value as
128 bits?
A. C/R Key Length
B. C/R Value Length
C. Hash Key Length
D. Hash Value Length
正解：B

質問 6：
Frank is working on a vulnerability assessment for a company on the West coast. The company hired Frank to assess its network security through scanning, pen tests, and vulnerability assessments. After discovering numerous known vulnerabilities detected by a temporary IDS he set up, he notices a number of items that show up as unknown but questionable in the logs.
He looks up the behavior on the Internet, but cannot find anything related. What organization should Frank submit the log to find out if it is a new vulnerability or not?
A. CVE
B. IANA
C. APIPA
D. RIPE
正解：A

質問 7：
What does ICMP Type 3/Code 13 mean?
A. Administratively Blocked
B. Host Unreachable
C. Port Unreachable
D. Protocol Unreachable
正解：A

質問 8：
You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitive information about the company clients. You have rummaged through their trash and found very little information.
You do not want to set off any alarms on their network, so you plan on performing passive foot printing against their Web servers. What tool should you use?
A. Ping sweep
B. Netcraft
C. Nmap
D. Dig
正解：B