EC-COUNCIL ECSAv10 問題集

質問 1：
A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?
A. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system
B. Firewalls implemented on a hardware firewall are highly scalable
C. Appliance based firewalls cannot be upgraded
D. Operating system firewalls are highly configured
正解：C

質問 2：
Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?
A. Project Goal
B. Objectives
C. Success Factors
D. Assumptions
正解：D

質問 3：
You just passed your ECSA exam and are about to start your first consulting job running security audits for a financial institution in Los Angeles. The IT manager of the company you will be working for tries to see if you remember your ECSA class. He asks about the methodology you will be using to test the company's network.
How would you answer?
A. LPT Methodology
B. Microsoft Methodology
C. IBM Methodology
D. Google Methodology
正解：A

質問 4：
Metasploit framework in an open source platform for vulnerability research, development, and penetration testing. Which one of the following metasploit options is used to exploit multiple systems at once?
A. NinjaDontKill
B. NinjaHost
C. EnablePython
D. RandomNops
正解：A

質問 5：
A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.

What are the two types of 'white-box' penetration testing?
A. Blind testing and double blind testing
B. Announced testing and blind testing
C. Blind testing and unannounced testing
D. Announced testing and unannounced testing
正解：D

質問 6：
Which of the following is not a characteristic of a firewall?
A. Examines all traffic routed between the two networks to see if it meets certain criteria
B. Routes packets between the networks
C. Manages public access to private networked resources
D. Filters only inbound traffic but not outbound traffic
正解：D