EC-COUNCIL 412-79v10 問題集

質問 1：
If a web application sends HTTP cookies as its method for transmitting session tokens, it may be vulnerable which of the following attacks?
A. Parameter tampering Attack
B. Sql injection attack
C. Session Hijacking
D. Cross-site request attack
正解：D

質問 2：
Which of the following pen testing reports provides detailed information about all the tasks performed during penetration testing?

A. Vulnerability Report
B. Host Report
C. Activity Report
D. Client-Side Test Report
正解：D

質問 3：
Which one of the following Snort logger mode commands is associated to run a binary log file through Snort in sniffer mode to dump the packets to the screen?
A. ./snort -dvr packet.log icmp
B. ./snort -dev -l ./log
C. ./snort -dv -r packet.log
D. ./snort -l ./log -b
正解：C

質問 4：
Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set.
What is Terri trying to accomplish by sending this IP packet?
A. Enable tunneling feature on the switch
B. Crash the switch with a DoS attack since switches cannot send ACK bits
C. Poison the switch's MAC address table by flooding it with ACK bits
D. Trick the switch into thinking it already has a session with Terri's computer
正解：D

質問 5：
A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?
A. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system
B. Firewalls implemented on a hardware firewall are highly scalable
C. Appliance based firewalls cannot be upgraded
D. Operating system firewalls are highly configured
正解：C

質問 6：
In the context of penetration testing, what does blue teaming mean?

A. It is the most expensive and most widely used
B. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management
C. It may be conducted with or without warning
D. A penetration test performed with the knowledge and consent of the organization's IT staff
正解：D

質問 7：
Which one of the following tools of trade is a commercial shellcode and payload generator written in Python by Dave Aitel?
A. CORE Impact
B. Canvas
C. Microsoft Baseline Security Analyzer (MBSA)
D. Network Security Analysis Tool (NSAT)
正解：B

質問 8：
Identify the framework that comprises of five levels to guide agency assessment of their security programs and assist in prioritizing efforts for improvement:
A. Microsoft Internet Security Framework
B. Nortells Unified Security Framework
C. Information System Security Assessment Framework (ISSAF)
D. Federal Information Technology Security Assessment Framework
正解：D