312-50v9無料問題集「EC-COUNCIL Certified Ethical Hacker v9」

質問 1

Which of the following describes the characteristics of a Boot Sector Virus?

（A）Overwrites the original MBR and only executes the new virus code

（B）Modifies directory table entries so that directory entries point to the virus code instead of the actual program

（C）Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

（D）Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

正解：C 解答を投票する

質問 2

A company's security states that all web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?

（A）Attempts by attackers to determine the user's Web browser usage patterns, including when sites were visited and for how long.

（B）Attempts by attacks to access the user and password information stores in the company's SQL database.

（C）Attempts by attackers to access Web sites that trust the Web browser user by stealing the user's authentication credentials.

（D）Attempts by attackers to access passwords stored on the user's computer without the user's knowledge.

正解：C 解答を投票する

質問 3

The "Gray box testing" methodology enforces what kind of restriction?

（A）Only the internal operation of a system is known to the tester.

（B）The internal operation of a system is only partly accessible to the tester.

（C）Only the external operation of a system is accessible to the tester.

（D）The internal operation of a system is completely known to the tester.

正解：B 解答を投票する

質問 4

Jimmy is standing outside a secure entrance to a facility. He is pretending to having a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it beginsto close.
What just happened?

（A）Phishing

（B）Piggybacking

（C）Masquading

（D）Whaling

正解：B 解答を投票する

質問 5

You have compromised a server on a network and successfully open a shell. You aimed to identify all operating systems running on the network. However, as you attemptto fingerprint all machines in the machines in the network using the nmap syntax below, it is not going through.
invictus@victim_server:~$nmap -T4 -O 10.10.0.0/24
TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxxx.
QUITTING!
What seems to be wrong?

（A）This is a common behavior for a corrupted nmap application.

（B）The outgoing TCP/IP fingerprinting is blocked by the host firewall.

（C）The nmap syntax is wrong.

（D）OS Scan requires root privileged.

正解：C 解答を投票する

質問 6

It is a vulnerability in GNU's bash shell, discovered in September of 2004, that gives attackers access to run remote commands on a vulnerable system. The malicious software can take control of an infected machine, launch denial-of service attacks to disrupt websites, and scan for other vulnerable devices (including routers).
Which of the following vulnerabilities is being described?

（A）Shellbash

（B）Rootshock

（C）Rootshell

（D）Shellshock

正解：D 解答を投票する

質問 7

Which of these options is the most secure procedure for strong backup tapes?

（A）Inside the data center for faster retrieval in afireproof safe

（B）In a cool dry environment

（C）In a climate controlled facility offsite

（D）On a different floor in the same building

正解：C 解答を投票する

質問 8

You are tasked to perform a penetration test. While you are performinginformation gathering, you find ab employee list in Google. You find receptionist's email, and you send her an email changing the source email to her boss's email ( boss@company ). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don't work. She reads your email, opens the links, and her machine gets infected.
What testing method did you use?

（A）Evesdropping

（B）Tailgating

（C）Social engineering

（D）Piggybacking

正解：C 解答を投票する

質問 9

A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shallscript files, and the third is a binary file is named "nc." The FTP server's access logs show that the anonymous user account logged in the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function providedby the FTP server's software. The ps command shows that the nc file is running as process, and the netstat command shows the nc process is listening on a network port.
Which kind of vulnerability must be present to make this remote attack possible?

（A）Brute Force Login

（B）Filesystem permissions

（C）Privilege Escalation

（D）Directory Traversal

正解：D 解答を投票する

質問 10

Nation-state threat actors often discover vulnerabilitiesand hold on to them until they want to launch a sophisticated attack. The Stuxnet attack was an unprecedented style of attack because it used four types of this vulnerability.
What is this style of attack called?

（A）zero-hour

（B）zero-sum

（C）zero-day

（D）no-day

正解：C 解答を投票する

312-50v9 無料問題集「EC-COUNCIL Certified Ethical Hacker v9」

弊社を連絡する

関連リンク

トップ試験