EC-COUNCIL EC0-479 問題集

質問 1：
From the following spam mail header, identify the host IP that sent this spam? From [email protected] [email protected] Tue Nov 27 17:27:11 2001 Received: from viruswall.ie.cuhk.edu.hk (viruswall [137.189.96.52]) by eng.ie.cuhk.edu.hk (8.11.6/8.11.6) with ESMTP id fAR9RAP23061 for ; Tue, 27 Nov 2001 17:27:10 +0800 (HKT) Received: from mydomain.com (pcd249020.netvigator.com [203.218.39.20]) by viruswall.ie.cuhk.edu.hk (8.12.1/8.12.1) with SMTP id fAR9QXwZ018431 for ; Tue, 27 Nov 2001 17:26:36 +0800 (HKT) Message-Id: >[email protected]
From: "china hotel web"
To: "Shlam"
Subject: SHANGHAI (HILTON HOTEL) PACKAGE Date: Tue, 27 Nov 2001 17:25:58 +0800 MIME-Version: 1.0 X-Priority: 3 X-MSMail- Priority: Normal Reply-
To: "china hotel web"
A. 8.12.1.0
B. 203.218.39.20
C. 203.218.39.50
D. 137.189.96.52
正解：B

質問 2：
Area density refers to:
A. the amount of data per disk
B. the amount of data per square inch
C. the amount of data per partition
D. the amount of data per platter
正解：A

質問 3：
As a security analyst you setup a false survey website that will require users to create a username and a strong password. You send the link to all the employees of the company. What information will you be able to gather?
A. Bank account numbers and the corresponding routing numbers
B. The IP address of the employees computers
C. The employees network usernames and passwords
D. The MAC address of the employees?computers
正解：C

質問 4：
Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer. Where should Harold navigate on the computer to find the file?
A. %systemroot%\system32\drivers\etc
B. %systemroot%\system32\LSA
C. %systemroot%\LSA
D. %systemroot%\repair
正解：D

質問 5：
This organization maintains a database of hash signatures for known software:
A. American National standards Institute
B. National Software Reference Library
C. International Standards Organization
D. Institute of Electrical and Electronics Engineers
正解：B

質問 6：
You are called in to assist the police in an investigation involving a suspected drug dealer. The suspects house was searched by the police after a warrant was obtained and they located a floppy disk in the suspects bedroom. The disk contains several files, but they appear to be password protecteD. What are two common methods used by password cracking software that you can use to obtain the password?
A. Maximum force and thesaurus Attack
B. Limited force and library attack
C. Brute Force and dictionary Attack
D. Minimum force and appendix Attack
正解：C

質問 7：
Jonathan is a network administrator who is currently testing the internal security of his network. He is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will Jonathan not succeed?
A. Only FTP traffic can be hijacked
B. Only DNS traffic can be hijacked
C. HTTP protocol does not maintain session
D. Only an HTTPS session can be hijacked
正解：C