EC-COUNCIL 412-79v10 問題集

質問 1：
Firewall and DMZ architectures are characterized according to its design. Which one of the following architectures is used when routers have better high-bandwidth data stream handling capacity?
A. Strong Screened-Subnet Architecture
B. "Inside Versus Outside" Architecture
C. "Three-Homed Firewall" DMZ Architecture
D. Weak Screened Subnet Architecture
正解：D

質問 2：
Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to-understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?
A. Idl2wrs
B. Tcpdump
C. Tshark
D. Capinfos
正解：D

質問 3：
Identify the policy that defines the standards for the organizational network connectivity and security standards for computers that are connected in the organizational network.
A. Acceptable-Use Policy
B. Information-Protection Policy
C. Special-Access Policy
D. Remote-Access Policy
正解：D

質問 4：
You just passed your ECSA exam and are about to start your first consulting job running security audits for a financial institution in Los Angeles. The IT manager of the company you will be working for tries to see if you remember your ECSA class. He asks about the methodology you will be using to test the company's network.
How would you answer?
A. LPT Methodology
B. Microsoft Methodology
C. IBM Methodology
D. Google Methodology
正解：A

質問 5：
SQL injection attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application. A successful SQL injection attack can:
i) Read sensitive data from the database
iii) Modify database data (insert/update/delete)
iii) Execute administration operations on the database (such as shutdown the DBMS) iV) Recover the content of a given file existing on the DBMS file system or write files into the file system v) Issue commands to the operating system

Pen tester needs to perform various tests to detect SQL injection vulnerability. He has to make a list of all input fields whose values could be used in crafting a SQL query, including the hidden fields of POST requests and then test them separately, trying to interfere with the query and to generate an error.
In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?
A. Function Testing
B. Dynamic Testing
C. Automated Testing
D. Static Testing
正解：D

質問 6：
Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set.
What is Terri trying to accomplish by sending this IP packet?
A. Enable tunneling feature on the switch
B. Crash the switch with a DoS attack since switches cannot send ACK bits
C. Poison the switch's MAC address table by flooding it with ACK bits
D. Trick the switch into thinking it already has a session with Terri's computer
正解：D

質問 7：
Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and Zombies? What type of Penetration Testing is Larry planning to carry out?
A. Firewall Penetration Testing
B. DoS Penetration Testing
C. Internal Penetration Testing
D. Router Penetration Testing
正解：B

質問 8：
Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?
A. CORE Impact
B. Canvas
C. Sunbelt Network Security Inspector (SNSI)
D. Microsoft Baseline Security Analyzer (MBSA)
正解：B