412-79無料問題集「EC-COUNCIL EC-Council Certified Security Analyst (ECSA)」

質問 1

Which one of the following is false about Wireshark? (Select all that apply)

（A）Packet Sniffer Mode

（B）It does not support decrypting the TKIP or CCMP packets

（C）Wireshark offers some options to analyze the WEP-decrypted data

（D）In order for Wireshark to decrypt the contents of the WEP-encrypted packets, it must be given the appropriate WEP key for the network

正解：C 解答を投票する

質問 2

A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.

What are the two types of 'white-box' penetration testing?

（A）Announced testing and blind testing

（B）Blind testing and double blind testing

（C）Blind testing and unannounced testing

（D）Announced testing and unannounced testing

正解：D 解答を投票する

質問 3

What is the maximum value of a "tinyint" field in most database systems?

（A）240 or less

（B）224 or more

（C）222

（D）225 or more

正解：D 解答を投票する

質問 4

Which among the following information is not furnished by the Rules of Engagement (ROE) document?

（A）Details on how data should be transmitted during and after the test

（B）Details on how organizational data is treated throughout and after the test

（C）Techniques for data exclusion from systems upon termination of the test

（D）Techniques for data collection from systems upon termination of the test

正解：D 解答を投票する

質問 5

A pen tester has extracted a database name by using a blind SQL injection. Now he begins to test the table inside the database using the below query and finds the table:
http://juggyboy.com/page.aspx?id=1;
IF (LEN(SELECT TOP 1 NAME from sysobjects where xtype
'U')=3) WAITFOR DELAY '00:00:10'--
http://juggyboy.com/page.aspx?id=1;
IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),1,1)))=101) WAITFOR DELAY
'00:00:10'--
http://juggyboy.com/page.aspx?id=1;
IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),2,1)))=109) WAITFOR DELAY
'00:00:10'--
http://juggyboy.com/page.aspx?id=1;
IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),3,1)))=112) WAITFOR DELAY
'00:00:10'-
What is the table name?

（A）CTS

（B）QRT

（C）EMP

（D）ABC

正解：C 解答を投票する

質問 6

Internet Control Message Protocol (ICMP) messages occur in many situations, such as whenever a datagram cannot reach the destination or the gateway does not have the buffering capacity to forward a datagram. Each ICMP message contains three fields: type, code, and checksum. Different types of Internet Control Message Protocols (ICMPs) are identified by a type and code field.

Which of the following ICMP messages will be generated if the destination port is not reachable?

（A）ICMP Type 3 code 3

（B）ICMP Type 3 code 2

（C）ICMP Type 11 code 1

（D）ICMP Type 5 code 3

正解：A 解答を投票する

質問 7

Which of the following acts is a proprietary information security standard for organizations that handle cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards and applies to all entities involved in payment card processing?

（A）PCI DSS

（B）Data Protection Act 1998

（C）PIPEDA

（D）Human Rights Act 1998

正解：A 解答を投票する

質問 8

What information can be collected by dumpster diving?

（A）Customer contact information

（B）Sensitive documents

（C）All the above

（D）Email messages

正解：B 解答を投票する

質問 9

The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control.
This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them.

What is the best way to protect web applications from parameter tampering attacks?

（A）Validating some parameters of the web application

（B）Applying effective input field filtering parameters

（C）Minimizing the allowable length of parameters

（D）Using an easily guessable hashing algorithm

正解：B 解答を投票する

質問 10

Logs are the record of the system and network activities. Syslog protocol is used for delivering log information across an IP network. Syslog messages can be sent via which one of the following?

（A）TCP and SMTP

（B）UDP and SMTP

（C）UDP and TCP

（D）SMTP

正解：C 解答を投票する

412-79 無料問題集「EC-COUNCIL EC-Council Certified Security Analyst (ECSA)」

弊社を連絡する

関連リンク

トップ試験