最新の412-79v10問題集で試験を準備する

EC-COUNCIL 412-79v10 試験概要:

EC-COUNCIL 412-79v10 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) V10 認定 412-79v10 試験問題：

1. Rules of Engagement (ROE) document provides certain rights and restriction to the test team for performing the test and helps testers to overcome legal, federal, and policy-related restrictions to use different penetration testing tools and techniques.

What is the last step in preparing a Rules of Engagement (ROE) document?

A) Have pre-contract discussions with different pen-testers
B) Decide the desired depth for penetration testing
C) Conduct a brainstorming session with top management and technical teams
D) Conduct a brainstorming session with top management and technical teams

2. Security auditors determine the use of WAPs on their networks with Nessus vulnerability scanner which identifies the commonly used WAPs.
One of the plug-ins that the Nessus Vulnerability Scanner uses is ID #11026 and is named "Access Point Detection". This plug-in uses four techniques to identify the presence of a WAP.
Which one of the following techniques is mostly used for uploading new firmware images while upgrading the WAP device?

A) SNMP fingerprinting
B) HTTP fingerprinting
C) NMAP TCP/IP fingerprinting
D) FTP fingerprinting

3. External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

Which of the following types of penetration testing is performed with no prior knowledge of the site?

A) Blue box testing
B) Grey box testing
C) Black box testing
D) White box testing

4. Which of the following external pen testing tests reveals information on price, usernames and passwords, sessions, URL characters, special instructors, encryption used, and web page behaviors?

A) Check for Directory Consistency and Page Naming Syntax of the Web Pages
B) Examine Server Side Includes (SSI)
C) Examine E-commerce and Payment Gateways Handled by the Web Server
D) Examine Hidden Fields

5. Wireless communication allows networks to extend to places that might otherwise go untouched by the wired networks. When most people say 'Wireless' these days, they are referring to one of the 802.11 standards.
There are three main 802.11 standards: B, A, and G.
Which one of the following 802.11 types uses DSSS Modulation, splitting the 2.4ghz band into channels?

A) 802.11b
B) 802.11n
C) 802.11g
D) 802.11-Legacy

質問と回答：