EC-COUNCIL ECSA 412-79V10 Questions & Answers

• Question 171:

  Which of the following equipment could a pen tester use to perform shoulder surfing?

  A. Binoculars

  B. Painted ultraviolet material

  C. Microphone

  D. All the above

  Correct Answer: A

  Reference: http://en.wikipedia.org/wiki/Shoulder_surfing_(computer_security)

• Question 172:

  Which of the following is NOT related to the Internal Security Assessment penetration testing strategy?

  A. Testing to provide a more complete view of site security

  B. Testing focused on the servers, infrastructure, and the underlying software, including the target

  C. Testing including tiers and DMZs within the environment, the corporate network, or partner company connections

  D. Testing performed from a number of network access points representing each logical and physical segment

  Correct Answer: B

• Question 173:

  Which one of the following components of standard Solaris Syslog is a UNIX command that is used to add single-line entries to the system log?

  A. "Logger"

  B. "/etc/syslog.conf"

  C. "Syslogd"

  D. "Syslogd.conf"

  Correct Answer: A

• Question 174:

  Identify the transition mechanism to deploy IPv6 on the IPv4 network from the following diagram.

  

  A. Translation

  B. Tunneling

  C. Dual Stacks

  D. Encapsulation

  Correct Answer: B

• Question 175:

  Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

  A. Decreases consumed employee time and increases system uptime

  B. Increases detection and reaction time

  C. Increases response time

  D. Both a and c

  Correct Answer: A

  Reference: http://www.symantec.com/connect/articles/multi-layer-intrusion-detection- systems (economic advantages, first para)

• Question 176:

  A firewall's decision to forward or reject traffic in network filtering is dependent upon which of the following?

  A. Destination address

  B. Port numbers

  C. Source address

  D. Protocol used

  Correct Answer: D

  Reference: http://www.vicomsoft.com/learning-center/firewalls/ (what does a firewall do)

• Question 177:

  Port numbers are used to keep track of different conversations crossing the network at the same time. Both TCP and UDP use port (socket) numbers to pass information to the upper layers. Port numbers have the assigned ranges.

  

  Port numbers above 1024 are considered which one of the following?

  A. Dynamically assigned port numbers

  B. Statically assigned port numbers

  C. Well-known port numbers

  D. Unregistered port numbers

  Correct Answer: A

  Reference: http://stackoverflow.com/questions/136709/what-port-number-should-i-use- when-testingconnections-in-my-local-intranet-in (see post 4)

• Question 178:

  HTTP protocol specifies that arbitrary binary characters can be passed within the URL by using %xx notation, where 'xx' is the

  A. ASCII value of the character

  B. Binary value of the character

  C. Decimal value of the character

  D. Hex value of the character

  Correct Answer: D

  https://books.google.nl/books?id=0RfANAwOUdICandpg=PA720andlpg=PA720anddq=%22xx+no tation%22 +binaryandsource=blandots=pGMqass7tiandsig=rnIg1xZ78ScUvuIlTmDY3r7REucandhl= nlandsa=Xandei=8C4dVYe1NorgasrzgoALandved=0CEQQ6AEwBQ#v=onepageandq=%22xx%20n otation%22% 20binaryandf=false

• Question 179:

  What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

  A. Connect Scanning Techniques

  B. SYN Scanning Techniques

  C. Stealth Scanning Techniques

  D. Port Scanning Techniques

  Correct Answer: C

  Reference: http://wwww.pc-freak.net/tutorials/hacking_info/arkin%20network%20scanning% 20techniques.pdf (page 7

• Question 180:

  Metasploit framework in an open source platform for vulnerability research, development, and penetration testing. Which one of the following metasploit options is used to exploit multiple systems at once?

  A. NinjaDontKill

  B. NinjaHost

  C. RandomNops

  D. EnablePython

  Correct Answer: A