最新の412-79問題集で試験を準備する

EC-COUNCIL 412-79 試験概要:

EC-COUNCIL 412-79 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 412-79 試験問題：

問題 #1

Which type of security policy applies to the below configuration?
i)Provides maximum security while allowing known, but necessary, dangers ii)All services are blocked; nothing is allowed iii)Safe and necessary services are enabled individually iv)Non-essential services and procedures that cannot be made safe are NOT allowed v)Everything is logged

A. Paranoid Policy
B. Permissive Policy
C. Promiscuous Policy
D. Prudent Policy

問題 #2

Which of the following has an offset field that specifies the length of the header and data?

A. UDP Header
B. TCP Header
C. ICMP Header
D. IP Header

問題 #3

Identify the attack represented in the diagram below:

A. Input Validation
B. Denial-of-Service
C. SQL Injection
D. Session Hijacking

問題 #4

TCP/IP provides a broad range of communication protocols for the various applications on the network. The TCP/IP model has four layers with major protocols included within each layer. Which one of the following protocols is used to collect information from all the network devices?

A. Simple Network Management Protocol (SNMP)
B. Network File system (NFS)
C. Transmission Control Protocol (TCP)
D. Internet Control Message Protocol (ICMP)

問題 #5

A directory traversal (or path traversal) consists in exploiting insufficient security validation/sanitization of user-supplied input file names, so that characters representing "traverse to parent directory" are passed through to the file APIs.
The goal of this attack is to order an application to access a computer file that is not intended to be accessible.
This attack exploits a lack of security (the software is acting exactly as it is supposed to) as opposed to exploiting a bug in the code.

To perform a directory traversal attack, which sequence does a pen tester need to follow to manipulate variables of reference files?

A. SQL Injection sequence
B. Brute force sequence
C. Denial-of-Service sequence
D. dot-dot-slash (../) sequence

解説：