EC-COUNCIL 412-79v9 問題集

質問 1：
Which of the following has an offset field that specifies the length of the header and data?
A. IP Header
B. UDP Header
C. ICMP Header
D. TCP Header
正解：D

質問 2：
Rules of Engagement (ROE) document provides certain rights and restriction to the test team for performing the test and helps testers to overcome legal, federal, and policy-related restrictions to use different penetration testing tools and techniques.

What is the last step in preparing a Rules of Engagement (ROE) document?
A. Conduct a brainstorming session with top management and technical teams
B. Have pre-contract discussions with different pen-testers
C. Conduct a brainstorming session with top management and technical teams
D. Decide the desired depth for penetration testing
正解：A

質問 3：
What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?
A. Stealth Scanning Techniques
B. Connect Scanning Techniques
C. SYN Scanning Techniques
D. Port Scanning Techniques
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A framework for security analysis is composed of a set of instructions, assumptions, and limitations to analyze and solve security concerns and develop threat free applications.
Which of the following frameworks helps an organization in the evaluation of the company's information security with that of the industrial standards?
A. Microsoft Internet Security Framework
B. Nortell's Unified Security Framework
C. Information System Security Assessment Framework
D. The IBM Security Framework
正解：C

質問 5：
Which of the following information gathering techniques collects information from an organization's web-based calendar and email services?
A. Private Information Gathering
B. Active Information Gathering
C. Passive Information Gathering
D. Anonymous Information Gathering
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
In Linux, /etc/shadow file stores the real password in encrypted format for user's account with added properties associated with the user's password.

In the example of a /etc/shadow file below, what does the bold letter string indicate?
Vivek: $1$fnffc$GteyHdicpGOfffXX40w#5:13064:0:99999:7
A. Minimum number of days required between password changes
B. Last password changed
C. Maximum number of days the password is valid
D. Number of days the user is warned before the expiration date
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which of the following documents helps in creating a confidential relationship between the pen tester and client to protect critical and confidential information or trade secrets?
A. Non-Disclosure Agreement
B. Penetration Testing Agreement
C. Rules of Behavior Agreement
D. Liability Insurance
正解：A