EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 141:

  Which of the following attributes has a LM and NTLMv1 value as 64bit + 64bit + 64bit and NTLMv2 value as 128 bits?

  A. Hash Key Length
  B. C/R Value Length
  C. C/R Key Length
  D. Hash Value Length
  B. C/R Value Length

• Question 142:

  Which one of the following commands is used to search one of more files for a specific pattern and it helps in organizing the firewall log files?

  A. grpck
  B. grep
  C. gpgv
  D. gprn
  B. grep

• Question 143:

  What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

  A. Connect Scanning Techniques
  B. SYN Scanning Techniques
  C. Stealth Scanning Techniques
  D. Port Scanning Techniques
  C. Stealth Scanning Techniques

• Question 144:

  Which of the following reports provides a summary of the complete pen testing process, its outcomes, and recommendations?

  A. Vulnerability Report
  B. Executive Report
  C. Client-side test Report
  D. Host Report
  B. Executive Report

• Question 145:

  Mason is footprinting an organization to gather competitive intelligence. He visits the company's website for contact information and telephone numbers but does not find any. He knows the entire staff directory was listed on their website 12 months. How can he find the directory?

  A. Visit Google's search engine and view the cached copy
  B. Crawl and download the entire website using the Surfoffline tool and save them to his computer
  C. Visit the company's partners' and customers' website for this information
  D. Use WayBackMachine in Archive.org web site to retrieve the Internet archive
  D. Use WayBackMachine in Archive.org web site to retrieve the Internet archive

• Question 146:

  Which of the following is the objective of Gramm-Leach-Bliley Act?

  A. To ease the transfer of financial information between institutions and banks
  B. To protect the confidentiality, integrity, and availability of data
  C. To set a new or enhanced standards for all U.S. public company boards, management and public accounting firms
  D. To certify the accuracy of the reported financial statement
  A. To ease the transfer of financial information between institutions and banks

• Question 147:

  A pen tester has extracted a database name by using a blind SQL injection. Now he begins to test the table inside the database using the below query and finds the table: http://juggyboy.com/page.aspx?id=1; IF (LEN(SELECT TOP 1 NAME from sysobjects where xtype='U')=3) WAITFOR DELAY '00:00:10'-http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),1,1)))=101) WAITFOR DELAY '00:00:10'-http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),2,1)))=109) WAITFOR DELAY '00:00:10'-http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),3,1)))=112) WAITFOR DELAY '00:00:10'-What is the table name?

  A. CTS
  B. QRT
  C. EMP
  D. ABC
  C. EMP

• Question 148:

  From where can clues about the underlying application environment can be collected?

  A. From the extension of the file
  B. From executable file
  C. From file types and directories
  D. From source code
  A. From the extension of the file

• Question 149:

  The term social engineering is used to describe the various tricks used to fool people (employees, business partners, or customers) into voluntarily giving away information that would not normally be known to the general public.

  

  What is the criminal practice of social engineering where an attacker uses the telephone system in an attempt to scam the user into surrendering private information?

  A. Phishing
  B. Spoofing
  C. Tapping
  D. Vishing
  D. Vishing

• Question 150:

  Timing is an element of port-scanning that can catch one unaware. If scans are taking too long to complete or obvious ports are missing from the scan, various time parameters may need to be adjusted. Which one of the following scanned timing options in NMAP's scan is useful across slow WAN links or to hide the scan?

  A. Paranoid
  B. Sneaky
  C. Polite
  D. Normal
  C. Polite