EC-COUNCIL 412-79v9 問題集

質問 1：
Which of the following is an ARP cache poisoning technique aimed at network switches?
A. Replay Attack
B. Man-in-the Middle Attack
C. Mac Flooding
D. DNS Poisoning
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
What sort of vulnerability assessment approach starts by building an inventory of protocols found on the machine?
A. Inference-based Assessment
B. Product-based Assessment Solutions
C. Service-based Assessment Solutions
D. Tree-based Assessment
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Identify the data security measure which defines a principle or state that ensures that an action or transaction cannot be denied.
A. Integrity
B. Availability
C. Non-Repudiation
D. Authorization
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Many security and compliance projects begin with a simple idea: assess the organization's risk, vulnerabilities, and breaches. Implementing an IT security risk assessment is critical to the overall security posture of any organization.
An effective security risk assessment can prevent breaches and reduce the impact of realized breaches.

What is the formula to calculate risk?
A. Risk = Loss x Exposure factor
B. Risk = Threats x Attacks
C. Risk = Goodwill x Reputation
D. Risk = Budget x Time
正解：A

質問 5：
Traceroute is a computer network diagnostic tool for displaying the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network. It sends a sequence of three Internet Control Message Protocol (ICMP) echo request packets addressed to a destination host.
The time-to-live (TTL) value, also known as hop limit, is used in determining the intermediate routers being traversed towards the destination.

During routing, each router reduces packets' TTL value by
A. 2
B. 3
C. 4
D. 1
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to-understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?
A. Idl2wrs
B. Tcpdump
C. Tshark
D. Capinfos
正解：D

質問 7：
External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

Which of the following types of penetration testing is performed with no prior knowledge of the site?
A. White box testing
B. Blue box testing
C. Grey box testing
D. Black box testing
正解：D
解説: (Topexam メンバーにのみ表示されます)