EC-COUNCIL EC0-479 問題集

質問 1：
You are the network administrator for a small bank in Dallas, Texas. To ensure network security, you enact a security policy that requires all users to have 14 character passwords. After giving your users 2 weeks notice, you change the Group Policy to force 14 character passwords. A week later you dump the SAM database from the standalone server and run a password-cracking tool against it. Over 99% of the passwords are broken within an hour. Why were these passwords cracked so quickly?
A. The passwords that were cracked are local accounts on the Domain Controller
B. Networks using Active Directory never use SAM databases so the SAM database pulled was empty
C. Passwords of 14 characters or less are broken up into two 7-character hashes
D. A password Group Policy change takes at least 3 weeks to completely replicate throughout a network
正解：C

質問 2：
Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florida. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa. She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information. After hearing the name of the CEO, the receptionist gave Julia all the information she asked for.
What principal of social engineering did Julia use?
A. Social Validation
B. Friendship/Liking
C. Scarcity
D. Reciprocation
正解：D

質問 3：
While working for a prosecutor, What do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense ?
A. Bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge
B. Destroy the evidence
C. Keep the information of file for later review
D. Present the evidence to the defense attorney
正解：A

質問 4：
The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.
A. HIPAA
B. Gramm-Leach-Bliley Act
C. California SB 1386
D. Sarbanes-Oxley 2002
正解：B

質問 5：
In the context of file deletion process, which of the following statement holds true?
A. When files are deleted, the data is overwritten and the cluster marked as available
B. Secure delete programs work by completely overwriting the file in one go
C. The longer a disk is inuse, the less likely it is that deleted files will be overwritten
D. While booting, the machine may create temporary files that can delete evidence
正解：B,D

質問 6：
Bob has been trying to penetrate a remote production system for the past tow weeks. This time however, he is able to get into the system. He was able to use the System for a period of three weeks. However law enforcement agencies were recoding his every activity and this was later presented as evidence. The organization had used a Virtual Environment to trap BoB. What is a Virtual Environment?
A. An environment set up after the user logs in
B. A system Using Trojaned commands
C. A Honeypot that traps hackers
D. An environment set up before an user logs in
正解：C

質問 7：
You are working for a large clothing manufacturer as a computer forensics investigator and are called in to investigate an unusual case of an employee possibly stealing clothing designs from the company and selling them under a different brand name for a different company. What you discover during the course of the investigation is that the clothing designs are actually original products of the employee and the company has no policy against an employee selling his own designs on his own time. The only thing that you can find that the employee is doing wrong is that his clothing design incorporates the same graphic symbol as that of the company with only the wording in the graphic being different. What area of the law is the employee violating?
A. brandmark law
B. printright law
C. trademark law
D. copyright law
正解：C