EC-COUNCIL ECSA 412-79V10 Questions & Answers

• Question 31:

  Before performing the penetration testing, there will be a pre-contract discussion with different pen-testers (the team of penetration testers) to gather a quotation to perform pen testing.

  

  Which of the following factors is NOT considered while preparing a price quote to perform pen testing?

  A. Total number of employees in the client organization

  B. Type of testers involved

  C. The budget required

  D. Expected time required to finish the project

  Correct Answer: A

• Question 32:

  Passwords protect computer resources and files from unauthorized access by malicious users. Using passwords is the most capable and effective way to protect information and to increase the security level of a company.

  Password cracking is the process of recovering passwords from data that have been stored in or transmitted by a computer system to gain unauthorized access to a system.

  

  Which of the following password cracking attacks tries every combination of characters until the password is broken?

  A. Brute-force attack

  B. Rule-based attack

  C. Hybrid attack

  D. Dictionary attack

  Correct Answer: A

  Reference:

  http://books.google.com.pk/books?id=m2qZNW4dcyICandpg=PA237andlpg=PA237anddq=passw ord+cracking

  +attacks+tries+every+combination+of+characters+until+the+password+is+bro

  kenandsource=blandots=RKEUUo6LYjandsig=MPEfFBEpoO0yvOwMxYCoPQuqM5gandhl=enandsa=

  Xandei=ZdwdVJm3CoXSaPXsgPgMandved=0CCEQ6AEwAQ#v=onepageandq=password%20cr acking%

  20attacks%20tries%20every%20combination%20of%20characters%20until%20th e%20password%20is%

  20brokenandf=false

• Question 33:

  Firewall is an IP packet filter that enforces the filtering and security policies to the flowing network traffic. Using firewalls in IPv6 is still the best way of protection from low level attacks at the network and transport layers. Which one of the following cannot handle routing protocols properly?

  A. "Internet-router-firewall-net architecture"

  B. "Internet-firewall-router-net architecture"

  C. "Internet-firewall/router(edge device)-net architecture"

  D. "Internet-firewall -net architecture"

  Correct Answer: B

• Question 34:

  Which of the following statements is true about the LM hash?

  A. Disabled in Windows Vista and 7 OSs

  B. Separated into two 8-character strings

  C. Letters are converted to the lowercase

  D. Padded with NULL to 16 characters

  Correct Answer: A

  Reference: http://www.onlinehashcrack.com/how_to_crack_windows_passwords.php (first paragraph of the page)

• Question 35:

  In Linux, /etc/shadow file stores the real password in encrypted format for user's account with added properties associated with the user's password.

  

  In the example of a /etc/shadow file below, what does the bold letter string indicate? Vivek: $1$fnffc$GteyHdicpGOfffXX40w#5:13064:0:99999:7

  A. Number of days the user is warned before the expiration date

  B. Minimum number of days required between password changes

  C. Maximum number of days the password is valid

  D. Last password changed

  Correct Answer: B

  Reference: http://www.cyberciti.biz/faq/understanding-etcshadow-file/ (bullet # 4)

• Question 36:

  Which of the following is not a condition specified by Hamel and Prahalad (1990)?

  A. Core competency should be aimed at protecting company interests

  B. Core competency is hard for competitors to imitate

  C. Core competency provides customer benefits

  D. Core competency can be leveraged widely to many products and markets

  Correct Answer: A

  Reference: http://www.studymode.com/essays/Hamel-Prahalad-Core-Competency- 1228370.html

• Question 37:

  How many possible sequence number combinations are there in TCP/IP protocol?

  A. 320 billion

  B. 32 million

  C. 4 billion

  D. 1 billion

  Correct Answer: C

• Question 38:

  What threat categories should you use to prioritize vulnerabilities detected in the pen testing report?

  A. 1, 2, 3, 4, 5

  B. Low, medium, high, serious, critical

  C. Urgent, dispute, action, zero, low

  D. A, b, c, d, e

  Correct Answer: B

• Question 39:

  Phishing is typically carried out by email spoofing or instant messaging and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one.

  Phishing is an example of social engineering techniques used to deceive users, and exploits the poor usability of current web security technologies. Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical security measures.

  

  What characteristics do phishing messages often have that may make them identifiable?

  A. Invalid email signatures or contact information

  B. Suspiciously good grammar and capitalization

  C. They trigger warning pop-ups

  D. Suspicious attachments

  Correct Answer: C

• Question 40:

  Which one of the following 802.11 types uses either FHSS or DSSS for modulation?

  A. 802.11b

  B. 802.11a

  C. 802.11n

  D. 802.11-Legacy

  Correct Answer: D