EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 191:

  TCP/IP model is a framework for the Internet Protocol suite of computer network protocols that defines the communication in an IP-based network. It provides end-to-end connectivity specifying how data should be formatted, addressed, transmitted, routed and received at the destination. This functionality has been organized into four abstraction layers which are used to sort all related protocols according to the scope of networking involved.

  

  Which of the following TCP/IP layers selects the best path through the network for packets to travel?

  A. Transport layer
  B. Network Access layer
  C. Internet layer
  D. Application layer
  C. Internet layer

• Question 192:

  Which of the following information gathering techniques collects information from an organization's web-based calendar and email services?

  A. Anonymous Information Gathering
  B. Private Information Gathering
  C. Passive Information Gathering
  D. Active Information Gathering
  D. Active Information Gathering

• Question 193:

  Which one of the following architectures has the drawback of internally considering the hosted services individually?

  A. Weak Screened Subnet Architecture
  B. "Inside Versus Outside" Architecture
  C. "Three-Homed Firewall" DMZ Architecture
  D. Strong Screened-Subnet Architecture
  C. "Three-Homed Firewall" DMZ Architecture

• Question 194:

  Identify the type of firewall represented in the diagram below: A. Stateful multilayer inspection firewall

  

  B. Application level gateway
  C. Packet filter
  D. Circuit level gateway
  A

• Question 195:

  The framework primarily designed to fulfill a methodical and organized way of addressing five threat classes to network and that can be used to access, plan, manage, and maintain secure computers and communication networks is:

  A. Nortells Unified Security Framework
  B. The IBM Security Framework
  C. Bell Labs Network Security Framework
  D. Microsoft Internet Security Framework
  C. Bell Labs Network Security Framework

• Question 196:

  SQL injection attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application.

  A successful SQL injection attack can:

  i)Read sensitive data from the database

  iii)Modify database data (insert/update/delete)

  iii)Execute administration operations on the database (such as shutdown the DBMS)

  iV)Recover the content of a given file existing on the DBMS file system or write files into the file system

  v)Issue commands to the operating system

  

  Pen tester needs to perform various tests to detect SQL injection vulnerability. He has to make a list of all input fields whose values could be used in crafting a SQL query, including the hidden fields of POST requests and then test them separately, trying to interfere with the query and to generate an error.

  In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?

  A. Automated Testing
  B. Function Testing
  C. Dynamic Testing
  D. Static Testing
  D. Static Testing

• Question 197:

  A wireless intrusion detection system (WIDS) monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools. The system monitors the radio spectrum used by wireless LANs, and

  immediately alerts a systems administrator whenever a rogue access point is detected.

  Conventionally it is achieved by comparing the MAC address of the participating wireless devices.

  Which of the following attacks can be detected with the help of wireless intrusion detection system (WIDS)?

  

  A. Social engineering
  B. SQL injection
  C. Parameter tampering
  D. Man-in-the-middle attack
  D. Man-in-the-middle attack

• Question 198:

  External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

  

  Which of the following types of penetration testing is performed with no prior knowledge of the site?

  A. Blue box testing
  B. White box testing
  C. Grey box testing
  D. Black box testing
  D. Black box testing

• Question 199:

  Which of the following is developed to address security concerns on time and reduce the misuse or threat of attacks in an organization?

  A. Vulnerabilities checklists
  B. Configuration checklists
  C. Action Plan
  D. Testing Plan
  A. Vulnerabilities checklists

• Question 200:

  This is a group of people hired to give details of the vulnerabilities present in the system found after a penetration test. They are elite and extremely competent penetration testers and intrusion analysts. This team prepares a report on the vulnerabilities in the system, attack methods, and how to defend against them.

  

  What is this team called?

  A. Blue team
  B. Tiger team
  C. Gorilla team
  D. Lion team
  B. Tiger team