EC-COUNCIL 412-79v8 問題集

質問 1：
Internet Control Message Protocol (ICMP) messages occur in many situations, such as whenever a datagram cannot reach the destination or the gateway does not have the buffering capacity to forward a datagram. Each ICMP message contains three fields: type, code, and checksum. Different types of Internet Control Message Protocols (ICMPs) are identified by a type and code field.

Which of the following ICMP messages will be generated if the destination port is not reachable?
A. ICMP Type 3 code 2
B. ICMP Type 11 code 1
C. ICMP Type 3 code 3
D. ICMP Type 5 code 3
正解：C

質問 2：
Which of the following pen testing reports provides detailed information about all the tasks performed during penetration testing?

A. Vulnerability Report
B. Host Report
C. Activity Report
D. Client-Side Test Report
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Today, most organizations would agree that their most valuable IT assets reside within applications and databases. Most would probably also agree that these are areas that have the weakest levels of security, thus making them the prime target for malicious activity from system administrators, DBAs, contractors, consultants, partners, and customers.

Which of the following flaws refers to an application using poorly written encryption code to securely encrypt and store sensitive data in the database and allows an attacker to steal or modify weakly protected data such as credit card numbers, SSNs, and other authentication credentials?
A. Insecure cryptographic storage attack
B. Man-in-the-Middle attack
C. SSI injection attack
D. Hidden field manipulation attack
正解：A

質問 4：
An antenna is a device that is designed to transmit and receive the electromagnetic waves that are generally called radio waves. Which one of the following types of antenna is developed from waveguide technology?
A. Leaky Wave Antennas
B. Aperture Antennas
C. Reflector Antenna
D. Directional Antenna
正解：B

質問 5：
Which of the following documents helps in creating a confidential relationship between the pen tester and client to protect critical and confidential information or trade secrets?
A. Non-Disclosure Agreement
B. Penetration Testing Agreement
C. Rules of Behavior Agreement
D. Liability Insurance
正解：A

質問 6：
What is the maximum value of a "tinyint" field in most database systems?
A. 222
B. 225 or more
C. 224 or more
D. 240 or less
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A WHERE clause in SQL specifies that a SQL Data Manipulation Language (DML) statement should only affect rows that meet specified criteria. The criteria are expressed in the form of predicates. WHERE clauses are not mandatory clauses of SQL DML statements, but can be used to limit the number of rows affected by a SQL DML statement or returned by a query.

A pen tester is trying to gain access to a database by inserting exploited query statements with a WHERE clause. The pen tester wants to retrieve all the entries from the database using the WHERE clause from a particular table (e.g. StudentTable).
What query does he need to write to retrieve the information?
A. RETRIVE* FROM StudentTable WHERE roll_number = 1'#
B. SELECT * FROM StudentTable WHERE roll_number = '' or '1' = '1'
C. EXTRACT* FROM StudentTable WHERE roll_number = 1 order by 1000
D. DUMP * FROM StudentTable WHERE roll_number = 1 AND 1=1-
正解：B

質問 8：
A framework is a fundamental structure used to support and resolve complex issues. The framework that delivers an efficient set of technologies in order to develop applications which are more secure in using Internet and Intranet is:
A. Microsoft Internet Security Framework
B. The IBM Security Framework
C. Information System Security Assessment Framework (ISSAF)
D. Bell Labs Network Security Framework
正解：A

質問 9：
John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?
A. C:\Windows\System32\restore
B. C:\Windows\System32\Boot
C. C:\WINDOWS\system32\cmd.exe
D. C:\WINNT\system32\drivers\etc
正解：D
解説: (Topexam メンバーにのみ表示されます)