最新の412-79v8問題集で試験を準備する

EC-COUNCIL 412-79v8 試験概要:

EC-COUNCIL 412-79v8 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 412-79v8 試験問題：

問題 #1

Which of the following policy forbids everything with strict restrictions on all usage of the company systems and network?

A. Paranoid Policy
B. Promiscuous Policy
C. Prudent Policy
D. Information-Protection Policy

問題 #2

Black-box testing is a method of software testing that examines the functionality of an application
(e.g. what the software does) without peering into its internal structures or workings. Black-box testing is used to detect issues in SQL statements and to detect SQL injection vulnerabilities.

Most commonly, SQL injection vulnerabilities are a result of coding vulnerabilities during the Implementation/Development phase and will likely require code changes.
Pen testers need to perform this testing during the development phase to find and fix the SQL injection vulnerability.
What can a pen tester do to detect input sanitization issues?

A. Send double quotes as the input data to catch instances where the user input is not sanitized
B. Send single quotes as the input data to catch instances where the user input is not sanitized
C. Send long strings of junk data, just as you would send strings to detect buffer overruns
D. Use a right square bracket (the "]" character) as the input data to catch instances where the user input is used as part of a SQL identifier without any input sanitization

問題 #3

What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

A. Connect Scanning Techniques
B. Port Scanning Techniques
C. Stealth Scanning Techniques
D. SYN Scanning Techniques

問題 #4

Which one of the following acts makes reputational risk of poor security a reality because it requires public disclosure of any security breach that involves personal information if it is unencrypted or if it is reasonably believed that the information has been acquired by an unauthorized person?

A. Gramm-Leach-Bliley Act (GLBA)
B. California SB 1386
C. USA Patriot Act 2001
D. Sarbanes-Oxley 2002

問題 #5

Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM.
NTLM and LM authentication protocols are used to securely store a user's password in the SAM database using different hashing methods.

The SAM file in Windows Server 2008 is located in which of the following locations?

A. c:\windows\system32\Boot\SAM
B. c:\windows\system32\drivers\SAM
C. c:\windows\system32\Setup\SAM
D. c:\windows\system32\config\SAM

解説：