EC-COUNCIL ECSA 412-79V10 Questions & Answers

• Question 51:

  One needs to run "Scan Server Configuration" tool to allow a remote connection to Nessus from the remote Nessus clients. This tool allows the port and bound interface of the Nessus daemon to be configured. By default, the Nessus daemon listens to connections on which one of the following?

  A. Localhost (127.0.0.1) and port 1241

  B. Localhost (127.0.0.1) and port 1240

  C. Localhost (127.0.0.1) and port 1246

  D. Localhost (127.0.0.0) and port 1243

  Correct Answer: A

• Question 52:

  Snort, an open source network-based intrusion detection sensor, is the most widely installed NIDS in the world. It can be configured to run in the four modes. Which one of the following modes reads the packets off the network and displays them in a continuous stream on the console (screen)?

  A. Packet Sniffer Mode

  B. Packet Logger Mode

  C. Network Intrusion Detection System Mode

  D. Inline Mode

  Correct Answer: A

• Question 53:

  If a web application sends HTTP cookies as its method for transmitting session tokens, it may be vulnerable which of the following attacks?

  A. Parameter tampering Attack

  B. Sql injection attack

  C. Session Hijacking

  D. Cross-site request attack

  Correct Answer: D

  Reference: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

• Question 54:

  Which of the following attacks is an offline attack?

  A. Pre-Computed Hashes

  B. Hash Injection Attack

  C. Password Guessing

  D. Dumpster Diving

  Correct Answer: A

  Reference: http://nrupentheking.blogspot.com/2011/02/types-of-password-attack-2.html

• Question 55:

  Which one of the following acts makes reputational risk of poor security a reality because it requires public disclosure of any security breach that involves personal information if it is unencrypted or if it is reasonably believed that the information has been acquired by an unauthorized person?

  A. California SB 1386

  B. Sarbanes-Oxley 2002

  C. Gramm-Leach-Bliley Act (GLBA)

  D. USA Patriot Act 2001

  Correct Answer: A

• Question 56:

  Traceroute is a computer network diagnostic tool for displaying the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network. It sends a sequence of three Internet Control Message Protocol (ICMP) echo request packets addressed to a destination host.

  The time-to-live (TTL) value, also known as hop limit, is used in determining the intermediate routers being traversed towards the destination.

  

  During routing, each router reduces packets' TTL value by

  B. 1

  C. 4

  D. 2

  Correct Answer: B

  Reference: http://www.packetu.com/2009/10/09/traceroute-through-the-asa/

• Question 57:

  Which one of the following 802.11 types has WLAN as a network support?

  A. 802.11b

  B. 802.11-Legacy

  C. 802.11n

  D. 802.11g

  Correct Answer: C

• Question 58:

  What sort of vulnerability assessment approach starts by building an inventory of protocols found on the machine?

  A. Inference-based Assessment

  B. Service-based Assessment Solutions

  C. Product-based Assessment Solutions

  D. Tree-based Assessment

  Correct Answer: A

  Reference: http://www.businessweek.com/adsections/2005/pdf/wp_mva.pdf (page 26, first para on the page)

• Question 59:

  The first phase of the penetration testing plan is to develop the scope of the project in consultation with the client. Pen testing test components depend on the client's operating environment, threat perception, security and compliance requirements, ROE, and budget. Various components need to be considered for testing while developing the scope of the project.

  

  Which of the following is NOT a pen testing component to be tested?

  A. System Software Security

  B. Intrusion Detection

  C. Outside Accomplices

  D. Inside Accomplices

  Correct Answer: C

• Question 60:

  Assessing a network from a hacker's point of view to discover the exploits and vulnerabilities that are accessible to the outside world is which sort of vulnerability assessment?

  A. Network Assessments

  B. Application Assessments

  C. Wireless Network Assessments

  D. External Assessment

  Correct Answer: D

  Reference: http://controlcase.com/managed_compliance_pci_vulnerability_scan.html