EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 412-79v8 試験問題:

1. Which one of the following log analysis tools is used for analyzing the server's log files?

A) Event Log Tracker tool
B) Ka Log Analyzer tool
C) Network Sniffer Interface Test tool
D) Performance Analysis of Logs tool

2. An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?

A) XPath Injection Attack
B) Frame Injection Attack
C) SOAP Injection Attack
D) LDAP Injection Attack

3. Amazon, an IT based company, conducts a survey on the usage of the Internet. They found that company employees spend most of the time at work surfing the web for their personal use and for inappropriate web site viewing. Management decide to block all such web sites using URL filtering software.

How can employees continue to see the blocked websites?

A) Using session hijacking
B) Using encryption
C) Using authentication
D) Using proxy servers

4. A wireless intrusion detection system (WIDS) monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools. The system monitors the radio spectrum used by wireless LANs, and immediately alerts a systems administrator whenever a rogue access point is detected.
Conventionally it is achieved by comparing the MAC address of the participating wireless devices.
Which of the following attacks can be detected with the help of wireless intrusion detection system (WIDS)?

A) Man-in-the-middle attack
B) Social engineering
C) Parameter tampering
D) SQL injection

5. Fuzz testing or fuzzing is a software/application testing technique used to discover coding errors and security loopholes in software, operating systems, or networks by inputting massive amounts of random data, called fuzz, to the system in an attempt to make it crash.
Fuzzers work best for problems that can cause a program to crash, such as buffer overflow, cross-site scripting, denial of service attacks, format bugs, and SQL injection.
Fuzzer helps to generate and submit a large number of inputs supplied to the application for testing it against the inputs. This will help us to identify the SQL inputs that generate malicious output.
Suppose a pen tester knows the underlying structure of the database used by the application (i.e., name, number of columns, etc.) that she is testing.
Which of the following fuzz testing she will perform where she can supply specific data to the application to discover vulnerabilities?

A) Dumb Fuzz Testing
B) Complete Fuzz Testing
C) Clever Fuzz Testing
D) Smart Fuzz Testing

質問と回答：