412-79 Exam Details

  • Exam Code
    :412-79
  • Exam Name
    :EC-Council Certified Security Analyst (ECSA)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :232 Q&As
  • Last Updated
    :Jul 10, 2026

EC-COUNCIL 412-79 Online Questions & Answers

  • Question 211:

    Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

    A. Use a system that has a dynamic addressing on the network
    B. Use a system that is not directlyinteracing with the router
    C. Use it on a system in an external DMZ in front of the firewall
    D. It doesn t matter as all replies are faked

  • Question 212:

    Sectors in hard disks typically contain how many bytes?

    A. 256
    B. 512
    C. 1024
    D. 2048

  • Question 213:

    The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

    A. HIPAA
    B. Sarbanes-Oxley 2002
    C. Gramm-Leach-Bliley Act
    D. California SB 1386

  • Question 214:

    What does the acronym POST mean as it relates to a PC?

    A. Primary Operations Short Test
    B. Power On Self Test
    C. Pre Operational Situation Test
    D. Primary Operating System Test

  • Question 215:

    What operating system would respond to the following command?

    A. Mac OS X
    B. Windows XP
    C. Windows 95
    D. FreeBSD

  • Question 216:

    Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

    A. Filtered
    B. Stealth
    C. Closed
    D. Open

  • Question 217:

    A law enforcement officer may only search for and seize criminal evidence with _____________, which are facts or circumstances that would lead a reasonable person to believe a crime has been committed or is about to be committed, evidence of the specific crime exists and the evidence of the specific crime exists at the place to be searcheD.

    A. Mere Suspicion
    B. A preponderance of the evidence
    C. Probable cause
    D. Beyond a reasonable doubt

  • Question 218:

    How many sectors will a 125 KB file use in a FAT32 file system?

    A. 32
    B. 16
    C. 250
    D. 25

  • Question 219:

    You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?

    A. Poison the DNS records with false records
    B. Enumerate MX and A records from DNS
    C. Enumerate domain user accounts and built-in groups
    D. Establish a remote connection to the Domain Controller

  • Question 220:

    When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

    A. Avoid cross talk
    B. Avoid over-saturation of wireless signals
    C. So that the access points will work on different frequencies
    D. Multiple access points can be set up on the same channel without any issues

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 412-79 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.