最新の312-50v10問題集で試験を準備する

EC-COUNCIL 312-50v10 試験概要:

EC-COUNCIL 312-50v10 試験シラバストピック:

EC-COUNCIL Certified Ethical Hacker Exam (CEH v10) 認定 312-50v10 試験問題：

問題 #1

You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are staring an investigation to roughly analyze the severity of the situation. Which of the following is appropriate to analyze?

A. Event logs on the PC
B. Event logs on domain controller
C. IDS log
D. Internet Firewall/Proxy log

問題 #2

When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

A. Social engineering
B. Network sniffing
C. Application security testing
D. Vulnerability scanning

問題 #3

Which of the following Bluetooth hacking techniques does an attacker use to send messages to users without the recipient's consent, similar to email spamming?

A. Bluesmacking
B. Bluejacking
C. Bluesnarfing
D. Bluesniffing

問題 #4

A company's Web development team has become aware of a certain type of security vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the software requirements to disallow users from entering HTML as input into their Web application.
What kind of Web application vulnerability likely exists in their software?

A. Cross-site Request Forgery vulnerability
B. Cross-site scripting vulnerability
C. SQL injection vulnerability
D. Web site defacement vulnerability

問題 #5

Which initial procedure should an ethical hacker perform after being brought into an organization?

A. Turn over deliverables.
B. Begin security testing.
C. Assess what the organization is trying to protect.
D. Sign a formal contract with non-disclosure.

解説：