EC-COUNCIL 312-50v10 問題集

質問 1：
A large mobile telephony and data network operator has a data that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems. What is the best security policy concerning this setup?
A. Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
B. There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
C. As long as the physical access to the network elements is restricted, there is no need for additional measures.
D. The operator knows that attacks and down time are inevitable and should have a backup site.
正解：A

質問 2：
Your business has decided to add credit card numbers to the data it backs up to tape. Which of the following represents the best practice your business should observe?
A. Back up the hashes of the credit card numbers not the actual credit card numbers.
B. Hire a security consultant to provide direction.
C. Encrypt backup tapes that are sent off-site.
D. Do not back up cither the credit card numbers or then hashes.
正解：B

質問 3：
Which of the following types of firewall inspects only header information in network traffic?
A. Packet filter
B. Application-level gateway
C. Circuit-level gateway
D. Stateful inspection
正解：A

質問 4：
How can rainbow tables be defeated?
A. Use of non-dictionary words
B. Password salting
C. All uppercase character passwords
D. Lockout accounts under brute force password cracking attempts
正解：B

質問 5：
What is the difference between the AES and RSA algorithms?
A. Both are symmetric algorithms, but AES uses 256-bit keys.
B. RSA is asymmetric, which is used to create a public/private key pair; AES is symmetric, which is used to encrypt data.
C. Both are asymmetric algorithms, but RSA uses 1024-bit keys.
D. AES is asymmetric, which is used to create a public/private key pair; RSA is symmetric, which is used to encrypt data.
正解：B

質問 6：
Study the log below and identify the scan type.

A. nmap -sO -T 192.168.1.10
B. nmap -sS 192.168.1.10
C. nmap -sR 192.168.1.10
D. nmap -sV 192.168.1.10
正解：A

質問 7：
A covert channel is a channel that
A. transfers information over, within a computer system, or network that is outside of the security policy.
B. transfers information over, within a computer system, or network that is encrypted.
C. transfers information over, within a computer system, or network that is within the security policy.
D. transfers information via a communication path within a computer system, or network for transfer of data.
正解：A

質問 8：
You are looking for SQL injection vulnerability by sending a special character to web applications. Which of the following is the most useful for quick validation?
A. Backslash
B. Double quotation
C. Single quotation
D. Semicolon
正解：C