EC-COUNCIL 312-50v8 問題集

質問 1：
Scanning for services is an easy job for Bob as there are so many tools available from the Internet. In order for him to check the vulnerability of XYZ, he went through a few scanners that are currently available. Here are the scanners that he uses:
1.Axent's NetRecon (http://www.axent.com)
2.SARA, by Advanced Research Organization (http://www-arc.com/sara)
3.VLAD the Scanner, by Razor (http://razor.bindview.com/tools/)
However, there are many other alternative ways to make sure that the services that have been scanned will be more accurate and detailed for Bob.
What would be the best method to accurately identify the services running on a victim host?
A. Using the manual method of telnet to each of the open ports ofXYZ.
B. Using the default port and OS to make a best guess of what services are running on each port forXYZ.
C. Using a vulnerability scanner to try to probe each port to verify or figure out which service is running forXYZ.
D. Using Cheops-ng to identify the devices ofXYZ.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Cyber Criminals have long employed the tactic of masking their true identity. In IP spoofing,
an attacker gains unauthorized access to a computer or a network by making it appear that a malicious message has come from a trusted machine, by "spoofing" the IP address of that machine.
How would you detect IP spoofing?
A. Sending a packet to the claimed host will result in a reply. If the TTL in the reply is not the same as the packet being checked then it is a spoofed packet
B. Probe a SYN Scan on the claimed host and look for a response SYN/FIN packet,if the connection completes then it is a spoofed packet
C. Check the IPID of the spoofed packet and compare it with TLC checksum. If the numbers match then it is spoofed packet
D. Turn on 'Enable Spoofed IP Detection' in Wireshark,you will see a flag tick if the packet is spoofed
正解：A

質問 3：
The following exploit code is extracted from what kind of attack?

A. Distributed Denial of Service
B. Remote password cracking attack
C. Buffer Overflow
D. Cross Site Scripting
E. SQL Injection
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which of the following examples best represents a logical or technical control?
A. Smoke and fire alarms
B. Corporate security policy
C. Security tokens
D. Heating and air conditioning
正解：C

質問 5：
A security policy will be more accepted by employees if it is consistent and has the support of
A. coworkers.
B. executive management.
C. the security officer.
D. a supervisor.
正解：B

質問 6：
You receive an email with the following message:
Hello Steve,
We are having technical difficulty in restoring user database record after the recent
blackout. Your account data is corrupted. Please logon to the SuperEmailServices.com and change your password.
http://[email protected]/support/logon.htm If you do not reset your password within 7 days, your account will be permanently disabled locking you out from our e-mail services.
Sincerely,
Technical Support SuperEmailServices From this e-mail you suspect that this message was sent by some hacker since you have
been using their e-mail services for the last 2 years and they have never sent out an e-mail such as this. You also observe the URL in the message and confirm your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal numbers. You immediately enter the following at Windows 2000 command prompt:
Ping 0xde.0xad.0xbe.0xef
You get a response with a valid IP address.
What is the obstructed IP address in the e-mail URL?
A. 233.34.45.64
B. 222.173.190.239
C. 199.223.23.45
D. 54.23.56.55
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
What is the purpose of conducting security assessments on network resources?
A. Implementation
B. Documentation
C. Management
D. Validation
正解：D

質問 8：
One of the most common and the best way of cracking RSA encryption is to begin to derive the two prime numbers, which are used in the RSA PKI mathematical process. If the two numbers p and q are discovered through a _____________ process, then the private key can be derived.
A. Hashing
B. Brute-forcing
C. Factorization
D. Prime Detection
正解：C