SANS Hacker Tools, Techniques, Exploits and Incident Handling은 SANS의 공인 역량을 입증하는 자격으로 취업과 이직 시장에서 높은 가치를 인정받습니다. Fast2test의 SEC504 모의고사 330문항으로 체계적으로 준비하여 자격 취득에 한 걸음 더 가까워지시기 바랍니다.

SANS SEC504 시험 개요:

SANS SEC504 시험 요강 주제:

SANS SEC504 관련 궁금증 해결 가이드

최신 Certified Incident Handler SEC504 무료샘플문제

문제 #1

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

A. Non persistent
B. Document Object Model (DOM)
C. Persistent
D. SAX

문제 #2

Which of the following can be used as a countermeasure against the SQL injection attack?
Each correct answer represents a complete solution. Choose two.

A. session_regenerate_id()
B. Prepared statement
C. mysql_real_escape_string()
D. mysql_escape_string()

문제 #3

Which of the following statements are true about firewalking?
Each correct answer represents a complete solution. Choose all that apply.

A. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
B. A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
C. Firewalking works on the UDP packets.
D. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.

문제 #4

Adam works as an Incident Handler for Umbrella Inc. He has been sent to the California unit to train the members of the incident response team. As a demo project he asked members of the incident response team to perform the following actions:
Remove the network cable wires.
Isolate the system on a separate VLAN
Use a firewall or access lists to prevent communication into or out of the system.
Change DNS entries to direct traffic away from compromised system
Which of the following steps of the incident handling process includes the above actions?

A. Identification
B. Recovery
C. Eradication
D. Containment

문제 #5

Which of the following tools can be used for steganography?
Each correct answer represents a complete solution. Choose all that apply.

A. Image hide
B. Anti-x
C. Stegbreak
D. Snow.exe

질문과 대답: