EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 111:

  How many possible sequence number combinations are there in TCP/IP protocol?

  A. 320 billion
  B. 32 million
  C. 4 billion
  D. 1 billion
  C. 4 billion

• Question 112:

  In the context of penetration testing, what does blue teaming mean?

  

  A. A penetration test performed with the knowledge and consent of the organization's IT staff
  B. It is the most expensive and most widely used
  C. It may be conducted with or without warning
  D. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management
  A. A penetration test performed with the knowledge and consent of the organization's IT staff

• Question 113:

  TCP/IP provides a broad range of communication protocols for the various applications on the network. The TCP/IP model has four layers with major protocols included within each layer. Which one of the following protocols is used to collect information from all the network devices?

  A. Simple Network Management Protocol (SNMP)
  B. Network File system (NFS)
  C. Internet Control Message Protocol (ICMP)
  D. Transmission Control Protocol (TCP)
  A. Simple Network Management Protocol (SNMP)

• Question 114:

  What is a goal of the penetration testing report?

  A. The penetration testing report helps you comply with local laws and regulations related to environmental conditions in the organization.
  B. The penetration testing report allows you to sleep better at night thinking your organization is protected
  C. The pen testing report helps executive management to make decisions on implementing security controls in the organization and helps the security team implement security controls and patch any flaws discovered during testing.
  D. The penetration testing report allows you to increase sales performance by effectively communicating with the internal security team.
  C. The pen testing report helps executive management to make decisions on implementing security controls in the organization and helps the security team implement security controls and patch any flaws discovered during testing.

• Question 115:

  Identify the data security measure which defines a principle or state that ensures that an action or transaction cannot be denied.

  A. Availability
  B. Integrity
  C. Authorization
  D. Non-Repudiation
  D. Non-Repudiation

• Question 116:

  Which one of the following is false about Wireshark? (Select all that apply)

  A. Wireshark offers some options to analyze the WEP-decrypted data
  B. It does not support decrypting the TKIP or CCMP packets
  C. In order for Wireshark to decrypt the contents of the WEP-encrypted packets, it must be given the appropriate WEP key for the network
  D. Packet Sniffer Mode
  A. Wireshark offers some options to analyze the WEP-decrypted data

• Question 117:

  Nessus can test a server or a network for DoS vulnerabilities. Which one of the following script tries to kill a service?

  A. ACT_DENIAL
  B. ACT_FLOOD
  C. ACT_KILL_HOST
  D. ACT_ATTACK
  A. ACT_DENIAL

• Question 118:

  The Internet is a giant database where people store some of their most private information on the cloud, trusting that the service provider can keep it all safe. Trojans, Viruses, DoS attacks, website defacement, lost computers, accidental publishing, and more have all been sources of major leaks over the last 15 years.

  

  What is the biggest source of data leaks in organizations today?

  A. Weak passwords and lack of identity management
  B. Insufficient IT security budget
  C. Rogue employees and insider attacks
  D. Vulnerabilities, risks, and threats facing Web sites
  C. Rogue employees and insider attacks

• Question 119:

  Which one of the following log analysis tools is used for analyzing the server's log files?

  A. Performance Analysis of Logs tool
  B. Network Sniffer Interface Test tool
  C. Ka Log Analyzer tool
  D. Event Log Tracker tool
  C. Ka Log Analyzer tool

• Question 120:

  A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

  

  Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

  A. Appliance based firewalls cannot be upgraded
  B. Firewalls implemented on a hardware firewall are highly scalable
  C. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system
  D. Operating system firewalls are highly configured
  C. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system