EC-COUNCIL 412-79v10 問題集

質問 1：
In Linux, what is the smallest possible shellcode?
A. 80 bytes
B. 800 bytes
C. 8 bytes
D. 24 bytes
正解：D

質問 2：
HTTP protocol specifies that arbitrary binary characters can be passed within the URL by using %xx notation, where 'xx' is the
A. Decimal value of the character
B. ASCII value of the character
C. Hex value of the character
D. Binary value of the character
正解：C

質問 3：
When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?
A. Avoid over-saturation of wireless signals
B. So that the access points will work on different frequencies
C. Avoid cross talk
D. Multiple access points can be set up on the same channel without any issues
正解：C

質問 4：
Besides the policy implications of chat rooms, Internet Relay Chat (IRC) is frequented by attackers and used as a command and control mechanism. IRC normally uses which one of the following TCP ports?
A. 6771 TCP port
B. 6566 TCP port
C. 6667 TCP port
D. 6257 TCP port
正解：C

質問 5：
One needs to run "Scan Server Configuration" tool to allow a remote connection to Nessus from the remote Nessus clients. This tool allows the port and bound interface of the Nessus daemon to be configured.
By default, the Nessus daemon listens to connections on which one of the following?
A. Localhost (127.0.0.1) and port 1241
B. Localhost (127.0.0.1) and port 1240
C. Localhost (127.0.0.0) and port 1243
D. Localhost (127.0.0.1) and port 1246
正解：A

質問 6：
You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network.
Why would you want to initiate a DoS attack on a system you are testing?
A. List weak points on their network
B. Use attack as a launching point to penetrate deeper into the network
C. Demonstrate that no system can be protected against DoS attacks
D. Show outdated equipment so it can be replaced
正解：A

質問 7：
The framework primarily designed to fulfill a methodical and organized way of addressing five threat classes to network and that can be used to access, plan, manage, and maintain secure computers and communication networks is:
A. Microsoft Internet Security Framework
B. The IBM Security Framework
C. Nortells Unified Security Framework
D. Bell Labs Network Security Framework
正解：D

質問 8：
ARP spoofing is a technique whereby an attacker sends fake ("spoofed") Address Resolution Protocol (ARP) messages onto a Local Area Network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host (such as the default gateway), causing any traffic meant for that IP address to be sent to the attacker instead.
ARP spoofing attack is used as an opening for other attacks.

What type of attack would you launch after successfully deploying ARP spoofing?
A. Parameter Filtering
B. Social Engineering
C. Session Hijacking
D. Input Validation
正解：C