EC-COUNCIL 312-50v10 問題集

質問 1：
Which of the following is the BEST approach to prevent Cross-site Scripting (XSS) flaws?
A. Verify access right before allowing access to protected information and UI controls.
B. Use digital certificates to authenticate a server prior to sending data.
C. Validate and escape all information sent to a server.
D. Verify access right before allowing access to protected information and UI controls.
正解：C

質問 2：
Which type of Nmap scan is the most reliable, but also the most visible, and likely to be picked up by and IDS?
A. Connect scan
B. FIN scan
C. RST scan
D. SYN scan
E. ACK scan
正解：A

質問 3：
Which protocol and port number might be needed in order to send log messages to a log analysis tool that resides behind a firewall?
A. UDP 514
B. UDP 123
C. UDP 541
D. UDP 415
正解：A

質問 4：
It has been reported to you that someone has caused an information spillage on their computer. You go to the computer, disconnect it from the network, remove the keyboard and mouse, and power it down. What step in incident handling did you just complete?
A. Recovery
B. Eradication
C. Containment
D. Discovery
正解：C

質問 5：
Rebecca commonly sees an error on her Windows system that states that a Data Execution Prevention (DEP) error has taken place. Which of the following is most likely taking place?
A. Malware is executing in either ROM or a cache memory area.
B. Malicious code is attempting to execute instruction in a non-executable memory region.
C. A page fault is occurring, which forces the operating system to write data from the hard drive.
D. A race condition is being exploited, and the operating system is containing the malicious process.
正解：B

質問 6：
Which of the following is a vulnerability in GNU's bash shell (discovered in September of 2014) that gives attackers access to run remote commands on a vulnerable system?
A. Shellshock
B. Rootshock
C. Rootshell
D. Shellbash
正解：A

質問 7：
An incident investigator asks to receive a copy of the event logs from all firewalls, proxy servers, and Intrusion Detection Systems (IDS) on the network of an organization that has experienced a possible breach of security. When the investigator attempts to correlate the information in all of the logs, the sequence of many of the logged events do not match up.
What is the most likely cause?
A. The network devices are not all synchronized.
B. The attacker altered or erased events from the logs.
C. Proper chain of custody was not observed while collecting the logs.
D. The security breach was a false positive.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. What do you want to
""know"" to prove yourself that it was Bob who had send a mail?
A. Integrity
B. Non-Repudiation
C. Confidentiality
D. Authentication
正解：B