ECCouncil 312-50v12 問題集

質問 1：
Abel, a security professional, conducts penetration testing in his client organization to check for any security loopholes. He launched an attack on the DHCP servers by broadcasting forged DHCP requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. This led to a Dos attack, and as a result, legitimate employees were unable to access the clients network. Which of the following attacks did Abel perform in the above scenario?
A. Rogue DHCP server attack
B. VLAN hopping
C. STP attack
D. DHCP starvation
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which utility will tell you in real time which ports are listening or in another state?
A. Netstat
B. Nmap
C. TCPView
D. Loki
正解：C

質問 3：
Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization. An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?
A. SMishing attack
B. Reconnaissance attack
C. Spear-phishing attack
D. HMI-based attack
正解：C

質問 4：
Which among the following is the best example of the third step (delivery) in the cyber kill chain?
A. An intruder's malware is installed on a target's machine.
B. An intruder's malware is triggered when a target opens a malicious email attachment.
C. An intruder sends a malicious attachment via email to a target.
D. An intruder creates malware to be used as a malicious attachment to an email.
正解：C

質問 5：
Dorian Is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It?
A. Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian's public key.
B. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key.
C. Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian's private key.
D. Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian's public key.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are the chief security officer at AlphaTech, a tech company that specializes in data storage solutions.
Your company is developing a new cloud storage platform where users can store their personal files. To ensure data security, the development team is proposing to use symmetric encryption for data at rest. However, they are unsure of how to securely manage and distribute the symmetric keys to users. Which of the following strategies would you recommend to them?
A. implement the Diffie-Hellman protocol for secure key exchange.
B. Use digital signatures to encrypt the symmetric keys.
C. Use hash functions to distribute the keys.
D. Use HTTPS protocol for secure key transfer.
正解：D
解説: (Topexam メンバーにのみ表示されます)