EC-COUNCIL 412-79v8 問題集

質問 1：
Assessing a network from a hacker's point of view to discover the exploits and vulnerabilities that are accessible to the outside world is which sort of vulnerability assessment?
A. Network Assessments
B. Application Assessments
C. External Assessment
D. Wireless Network Assessments
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which one of the following tools of trade is a commercial shellcode and payload generator written in Python by Dave Aitel?
A. CORE Impact
B. Canvas
C. Microsoft Baseline Security Analyzer (MBSA)
D. Network Security Analysis Tool (NSAT)
正解：B

質問 3：
Which of the following are the default ports used by NetBIOS service?
A. 134, 135, 136, 137
B. 137, 138, 139, 140
C. 133, 134, 139, 142
D. 135, 136, 139, 445
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?
A. UDP evasion technique
B. IDS evasion technique
C. TTL evasion technique
D. IPS evasion technique
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Port numbers are used to keep track of different conversations crossing the network at the same time. Both TCP and UDP use port (socket) numbers to pass information to the upper layers. Port numbers have the assigned ranges. The port numbers above 1024 are considered as which one of the following? (Select all that apply)
A. Unregistered port numbers
B. Statically assigned port numbers
C. Dynamically assigned port numbers
D. Well-known port numbers
正解：C

質問 6：
Nessus can test a server or a network for DoS vulnerabilities. Which one of the following script tries to kill a service?
A. ACT_ATTACK
B. ACT_KILL_HOST
C. ACT_DENIAL
D. ACT_FLOOD
正解：C

質問 7：
Network scanning is used to identify the available network resources. Which one of the following is also known as a half-open scan, because a full TCP connection is never completed and it is used to determine which ports are open and listening on a target device?
A. Null Scan
B. XMAS Scan
C. TCP Connect Scan
D. SYN Scan
正解：D

質問 8：
Identify the attack represented in the diagram below:

A. Denial-of-Service
B. Session Hijacking
C. Input Validation
D. SQL Injection
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 9：
The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control.
This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them.

What is the best way to protect web applications from parameter tampering attacks?
A. Using an easily guessable hashing algorithm
B. Applying effective input field filtering parameters
C. Validating some parameters of the web application
D. Minimizing the allowable length of parameters
正解：B