EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 101:

  Which of the following is an application alert returned by a web application that helps an attacker guess a valid username?

  A. Invalid username or password
  B. Account username was not found
  C. Incorrect password
  D. Username or password incorrect
  C. Incorrect password

• Question 102:

  Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

  A. Decreases consumed employee time and increases system uptime
  B. Increases detection and reaction time
  C. Increases response time
  D. Both a and c
  A. Decreases consumed employee time and increases system uptime

• Question 103:

  A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product." It is generally the motherboard chips or the chips used on the expansion card. Which one of the following is well supported in most wireless applications?

  A. Orinoco chipsets
  B. Prism II chipsets
  C. Atheros Chipset
  D. Cisco chipset
  B. Prism II chipsets

• Question 104:

  Which of the following pen testing reports provides detailed information about all the tasks performed during penetration testing?

  

  A. Client-Side Test Report
  B. Activity Report
  C. Host Report
  D. Vulnerability Report
  A. Client-Side Test Report

• Question 105:

  The first phase of the penetration testing plan is to develop the scope of the project in consultation with the client. Pen testing test components depend on the client's operating environment, threat perception, security and compliance requirements, ROE, and budget. Various components need to be considered for testing while developing the scope of the project.

  

  Which of the following is NOT a pen testing component to be tested?

  A. System Software Security
  B. Intrusion Detection
  C. Outside Accomplices
  D. Inside Accomplices
  C. Outside Accomplices

• Question 106:

  Firewall is an IP packet filter that enforces the filtering and security policies to the flowing network traffic. Using firewalls in IPv6 is still the best way of protection from low level attacks at the network and transport layers. Which one of the following cannot handle routing protocols properly?

  A. "Internet-router-firewall-net architecture"
  B. "Internet-firewall-router-net architecture"
  C. "Internet-firewall/router(edge device)-net architecture"
  D. "Internet-firewall -net architecture"
  B. "Internet-firewall-router-net architecture"

• Question 107:

  Network scanning is used to identify the available network resources. Which one of the following is also known as a half-open scan, because a full TCP connection is never completed and it is used to determine which ports are open and listening on a target device?

  A. SYN Scan
  B. TCP Connect Scan
  C. XMAS Scan
  D. Null Scan
  A. SYN Scan

• Question 108:

  Which of the following attacks is an offline attack?

  A. Pre-Computed Hashes
  B. Hash Injection Attack
  C. Password Guessing
  D. Dumpster Diving
  A. Pre-Computed Hashes

• Question 109:

  Which of the following scan option is able to identify the SSL services?

  A. -sS
  B. -sV
  C. -sU
  D. -sT
  B. -sV

• Question 110:

  Which type of vulnerability assessment tool provides security to the IT system by testing for vulnerabilities in the applications and operation system?

  A. Active/Passive Tools
  B. Application-layer Vulnerability Assessment Tools
  C. Location/Data Examined Tools
  D. Scope Assessment Tools
  D. Scope Assessment Tools