EC-COUNCIL 412-79v8 問題集

質問 1：
A penetration tester performs OS fingerprinting on the target server to identify the operating system used on the target server with the help of ICMP packets.

While performing ICMP scanning using Nmap tool, message received/type displays "3 - Destination Unreachable[5]" and code 3.
Which of the following is an appropriate description of this response?
A. Destination port unreachable
B. Destination host unreachable
C. Destination protocol unreachable
D. Destination host unavailable
正解：A

質問 2：
When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?
A. Passive IDS
B. Active IDS
C. NIPS
D. Progressive IDS
正解：B

質問 3：
A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product." It is generally the motherboard chips or the chips used on the expansion card. Which one of the following is well supported in most wireless applications?
A. Cisco chipset
B. Atheros Chipset
C. Orinoco chipsets
D. Prism II chipsets
正解：D

質問 4：
What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?
A. Stealth Scanning Techniques
B. Connect Scanning Techniques
C. SYN Scanning Techniques
D. Port Scanning Techniques
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?
A. Fraggle
B. Trinoo
C. SYN flood
D. Smurf
正解：D

質問 6：
What is a goal of the penetration testing report?

A. The penetration testing report allows you to increase sales performance by effectively communicating with the internal security team.
B. The penetration testing report allows you to sleep better at night thinking your organization is protected
C. The penetration testing report helps you comply with local laws and regulations related to environmental conditions in the organization.
D. The pen testing report helps executive management to make decisions on implementing security controls in the organization and helps the security team implement security controls and patch any flaws discovered during testing.
正解：D

質問 7：
Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?
A. Post-Assessment Phase
B. Pre-Assessment Phase
C. Threat-Assessment Phase
D. Assessment Phase
正解：B

質問 8：
Identify the policy that defines the standards for the organizational network connectivity and security standards for computers that are connected in the organizational network.
A. Special-AccessPolicy
B. Acceptable-Use Policy
C. Information-Protection Policy
D. Remote-Access Policy
正解：D

質問 9：
Why is a legal agreement important to have before launching a penetration test?

A. Guarantees your consultant fees
B. It establishes the legality of the penetration test by documenting the scope of the project and the consent of the company.
C. Allows you to perform a penetration test without the knowledge and consent of the organization's upper management
D. It is important to ensure that the target organization has implemented mandatory security policies
正解：B