EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 11:

  One of the steps in information gathering is to run searches on a company using complex keywords in Google.

  

  Which search keywords would you use in the Google search engine to find all the PowerPoint presentations containing information about a target company, ROCHESTON?

  A. ROCHESTON fileformat:+ppt
  B. ROCHESTON ppt:filestring
  C. ROCHESTON filetype:ppt
  D. ROCHESTON +ppt:filesearch
  C. ROCHESTON filetype:ppt

• Question 12:

  Which of the following has an offset field that specifies the length of the header and data?

  A. IP Header
  B. UDP Header
  C. ICMP Header
  D. TCP Header
  D. TCP Header

• Question 13:

  What information can be collected by dumpster diving?

  A. Sensitive documents
  B. Email messages
  C. Customer contact information
  D. All the above
  A. Sensitive documents

• Question 14:

  Assessing a network from a hacker's point of view to discover the exploits and vulnerabilities that are accessible to the outside world is which sort of vulnerability assessment?

  A. Network Assessments
  B. Application Assessments
  C. Wireless Network Assessments
  D. External Assessment
  D. External Assessment

• Question 15:

  Which one of the following is a supporting tool for 802.11 (wireless) packet injections, it spoofs 802.11 packets to verify whether the access point is valid or not?

  A. Airsnort
  B. Aircrack
  C. Airpwn
  D. WEPCrack
  C. Airpwn

• Question 16:

  Which of the following shields Internet users from artificial DNS data, such as a deceptive or mischievous address instead of the genuine address that was requested?

  A. DNSSEC
  B. Firewall
  C. Packet filtering
  D. IPSec
  A. DNSSEC

• Question 17:

  James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

  A. Smurf
  B. Trinoo
  C. Fraggle
  D. SYN flood
  A. Smurf

• Question 18:

  John, the penetration testing manager in a pen testing firm, needs to prepare a pen testing pricing report for a client. Which of the following factors does he need to consider while preparing the pen testing pricing report?

  

  A. Number of employees in the client organization
  B. Complete structure of the organization
  C. Number of client computers to be tested and resources required to perform a pen test
  D. Number of servers available in the client organization
  C. Number of client computers to be tested and resources required to perform a pen test

• Question 19:

  What is the difference between penetration testing and vulnerability testing?

  

  A. Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of `in-depth ethical hacking'
  B. Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities
  C. Vulnerability testing is more expensive than penetration testing
  D. Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans
  A. Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of `in-depth ethical hacking'

• Question 20:

  John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?

  A. C:\Windows\System32\Boot
  B. C:\WINNT\system32\drivers\etc
  C. C:\WINDOWS\system32\cmd.exe
  D. C:\Windows\System32\restore
  B. C:\WINNT\system32\drivers\etc