最新の412-79v8問題集で試験を準備する

EC-COUNCIL 412-79v8 試験概要:

EC-COUNCIL 412-79v8 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 412-79v8 試験問題：

1. The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control.
This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them.

What is the best way to protect web applications from parameter tampering attacks?

A) Using an easily guessable hashing algorithm
B) Minimizing the allowable length of parameters
C) Validating some parameters of the web application
D) Applying effective input field filtering parameters

2. What are placeholders (or markers) in an HTML document that the web server will dynamically replace with data just before sending the requested documents to a browser?

A) Server Sort Includes
B) Server Side Includes
C) Sort Server Includes
D) Slide Server Includes

3. Which one of the following Snort logger mode commands is associated to run a binary log file through Snort in sniffer mode to dump the packets to the screen?

A) ./snort -dev -l ./log
B) ./snort -dv -r packet.log
C) ./snort -l ./log -b
D) ./snort -dvr packet.log icmp

4. Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?

A) Success Factors
B) Project Goal
C) Assumptions
D) Objectives

5. John, the penetration tester in a pen test firm, was asked to find whether NTP services are opened on the target network (10.0.0.7) using Nmap tool.

Which one of the following Nmap commands will he use to find it?

A) nmap -sU -p 389 10.0.0.7
B) nmap -sU -p 135 10.0.0.7
C) nmap -sU -p 123 10.0.0.7
D) nmap -sU -p 161 10.0.0.7

質問と回答：