EC-COUNCIL EC-Council Certified Security Analyst (ECSA) V10 認定 412-79v10 試験問題:

1. Which one of the following Snort logger mode commands is associated to run a binary log file through Snort in sniffer mode to dump the packets to the screen?

A) ./snort -dev -l ./log
B) ./snort -dv -r packet.log
C) ./snort -l ./log -b
D) ./snort -dvr packet.log icmp

2. Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set.
What is Terri trying to accomplish by sending this IP packet?

A) Enable tunneling feature on the switch
B) Trick the switch into thinking it already has a session with Terri's computer
C) Poison the switch's MAC address table by flooding it with ACK bits
D) Crash the switch with a DoS attack since switches cannot send ACK bits

3. Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

A) Open
B) Filtered
C) Closed
D) Stealth

4. Before performing the penetration testing, there will be a pre-contract discussion with different pen-testers (the team of penetration testers) to gather a quotation to perform pen testing.

Which of the following factors is NOT considered while preparing a price quote to perform pen testing?

A) Total number of employees in the client organization
B) The budget required
C) Expected time required to finish the project
D) Type of testers involved

5. Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

A) Sawmill
B) Event Log Tracker
C) Syslog Manager
D) Event Log Explorer

質問と回答：