EC-COUNCIL 312-50v9 問題集

質問 1：
Which of the followingtypes of firewalls ensures that the packets are part of the established session?
A. Switch-level firewall
B. Circuit-level firewall
C. Application-level firewall
D. Stateful inspection firewall
正解：D

質問 2：
Which of the following is the BEST way to defend against network sniffing?
A. Restrict Physical Access to Server Rooms hosting Critical Servers
B. Using encryption protocols to secure network communications
C. Use Static IP Address
D. Register all machines MAC Address in a centralized Database
正解：B

質問 3：
A Regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server.
Based on this information, what should be one of your key recommendations to the bank?
A. Require all employees to change their passwords immediately
B. Issue new certificates to the web servers from the root certificate authority
C. Move the financial data to another server on the same IP subnet
D. Place a front-end web server in a demilitarized zone that only handles external web traffic
正解：C

質問 4：
The Open Web Application Security Project (OWASP) isthe worldwide not-for-profit charitable organization focused on improving the security of software. What item is the primary concern on OWASP's Top Ten Project most Critical Web application Security Rules?
A. Injection
B. Path Disclosure
C. Cross site Scripting
D. Cross site Request Forgery
正解：A

質問 5：
The purpose of a ____________ is to deny network access to local area networks and other information assets by unauthorized wireless devices.
A. Wireless Intrusion Prevention System
B. Wireless Access Control list
C. Wireless Analyzer
D. Wireless Access Point
正解：A

質問 6：
env x= '(){ :;};echo exploit ' bash -c 'cat/etc/passwd
What is the Shellshock bash vulnerability attempting to do on an vulnerable Linux host?
A. Change all password in passwd
B. Remove the passwd file.
C. Display passwd contents to prompt
D. Add new user to the passwd file
正解：C

質問 7：
You have successfully gained access to a linux server and would like to ensure that the succeeding outgoing traffic from the server will not be caught by a Network Based Intrusion Detection System (NIDS).
Which is the best way to evade the NIDS?
A. Alternate Data Streams
B. Protocol Isolation
C. Out of band signaling
D. Encryption
正解：D