最新の412-79問題集で試験を準備する

EC-COUNCIL 412-79 試験概要:

EC-COUNCIL 412-79 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 412-79 試験問題：

1. A wireless intrusion detection system (WIDS) monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools. The system monitors the radio spectrum used by wireless LANs, and immediately alerts a systems administrator whenever a rogue access point is detected.
Conventionally it is achieved by comparing the MAC address of the participating wireless devices.
Which of the following attacks can be detected with the help of wireless intrusion detection system (WIDS)?

A) Man-in-the-middle attack
B) Social engineering
C) Parameter tampering
D) SQL injection

2. You work as an IT security auditor hired by a law firm in Boston. You have been assigned the responsibility to audit the client for security risks. When assessing the risk to the clients network, what step should you take first?

A) Checking for a written security policy
B) Analyzing, categorizing and prioritizing resources
C) Evaluating the existing perimeter and internal security
D) Analyzing the use of existing management and control architecture

3. Which of the following scan option is able to identify the SSL services?

A) -sU
B) -sV
C) -sT
D) -sS

4. Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

A) Tree-based Assessment
B) Service-based Assessment Solutions
C) Inference-based Assessment
D) Product-based Assessment Solutions

5. Identify the injection attack represented in the diagram below:

A) XML Injection Attack
B) XPath Injection Attack
C) Frame Injection Attack
D) XML Request Attack

質問と回答：