EC-COUNCIL EC-Council Certified Security Analyst (ECSA) - 412-79무료 덤프문제 풀어보기
A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.
What are the two types of 'white-box' penetration testing?
What are the two types of 'white-box' penetration testing?
정답: C
If a web application sends HTTP cookies as its method for transmitting session tokens, it may be vulnerable which of the following attacks?
정답: A
The amount of data stored in organizational databases has increased rapidly in recent years due to the rapid advancement of information technologies. A high percentage of these data is sensitive, private and critical to the organizations, their clients and partners.
Therefore, databases are usually installed behind internal firewalls, protected with intrusion detection mechanisms and accessed only by applications. To access a database, users have to connect to one of these applications and submit queries through them to the database. The threat to databases arises when these applications do not behave properly and construct these queries without sanitizing user inputs first.
Identify the injection attack represented in the diagram below:
Therefore, databases are usually installed behind internal firewalls, protected with intrusion detection mechanisms and accessed only by applications. To access a database, users have to connect to one of these applications and submit queries through them to the database. The threat to databases arises when these applications do not behave properly and construct these queries without sanitizing user inputs first.
Identify the injection attack represented in the diagram below:
정답: D
Software firewalls work at which layer of the OSI model?
정답: A
Which of the following appendices gives detailed lists of all the technical terms used in the report?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
Output modules allow Snort to be much more flexible in the formatting and presentation of output to its users.
Snort has 9 output plug-ins that push out data in different formats. Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?
Snort has 9 output plug-ins that push out data in different formats. Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?
정답: D
Snort, an open source network-based intrusion detection sensor, is the most widely installed NIDS in the world. It can be configured to run in the four modes. Which one of the following modes reads the packets off the network and displays them in a continuous stream on the console (screen)?
정답: B
Which of the following protocol's traffic is captured by using the filter tcp.port==3389 in the Wireshark tool?
정답: B
Which one of the following is a useful formatting token that takes an int * as an argument, and writes the number of bytes already written, to that location?
정답: A
A framework for security analysis is composed of a set of instructions, assumptions, and limitations to analyze and solve security concerns and develop threat free applications. Which of the following frameworks helps an organization in the evaluation of the company's information security with that of the industrial standards?
정답: A
Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?
정답: A
A man enters a PIN number at an ATM machine, being unaware that the person next to him was watching.
Which of the following social engineering techniques refers to this type of information theft?
Which of the following social engineering techniques refers to this type of information theft?
정답: A
Which of the following scan option is able to identify the SSL services?
정답: B
Which one of the following architectures has the drawback of internally considering the hosted services individually?
정답: C
A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product." It is generally the motherboard chips or the chips used on the expansion card. Which one of the following is well supported in most wireless applications?
정답: D