EC-COUNCIL ECSAv8 問題集

質問 1：
Transmission control protocol accepts data from a data stream, divides it into chunks, and adds a TCP header creating a TCP segment.
The TCP header is the first 24 bytes of a TCP segment that contains the parameters and state of an end-to-end TCP socket. It is used to track the state of communication between two TCP endpoints.
For a connection to be established or initialized, the two hosts must synchronize. The synchronization requires each side to send its own initial sequence number and to receive a confirmation of exchange in an acknowledgment (ACK) from the other side
The below diagram shows the TCP Header format:

How many bits is a acknowledgement number?
A. 32 bits
B. 16 bits
C. 8 bits
D. 24 bits
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?
A. Increases detection and reaction time
B. Both a and c
C. Increases response time
D. Decreases consumed employee time and increases system uptime
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
The term social engineering is used to describe the various tricks used to fool people (employees, business partners, or customers) into voluntarily giving away information that would not normally be known to the general public.

What is the criminal practice of social engineering where an attacker uses the telephone system in an attempt to scam the user into surrendering private information?
A. Phishing
B. Vishing
C. Tapping
D. Spoofing
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control.
This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them.

What is the best way to protect web applications from parameter tampering attacks?
A. Using an easily guessable hashing algorithm
B. Applying effective input field filtering parameters
C. Validating some parameters of the web application
D. Minimizing the allowable length of parameters
正解：D

質問 5：
Which of the following scan option is able to identify the SSL services?
A. -sU
B. -sS
C. -sT
D. -sV
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
The amount of data stored in organizational databases has increased rapidly in recent years due to the rapid advancement of information technologies. A high percentage of these data is sensitive, private and critical to the organizations, their clients and partners.
Therefore, databases are usually installed behind internal firewalls, protected with intrusion detection mechanisms and accessed only by applications. To access a database, users have to connect to one of these applications and submit queries through them to the database. The threat to databases arises when these applications do not behave properly and construct these queries without sanitizing user inputs first.
Identify the injection attack represented in the diagram below:

A. SOAP Injection Attack
B. LDAP Injection Attack
C. XPath Injection Attack
D. Frame Injection Attack
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM.
NTLM and LM authentication protocols are used to securely store a user's password in the SAM database using different hashing methods.

The SAM file in Windows Server 2008 is located in which of the following locations?
A. c:\windows\system32\drivers\SAM
B. c:\windows\system32\config\SAM
C. c:\windows\system32\Setup\SAM
D. c:\windows\system32\Boot\SAM
正解：B