EC-COUNCIL 412-79V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V10 Online Questions & Answers

• Question 71:

  Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

  A. USA Patriot Act 2001
  B. Sarbanes-Oxley 2002
  C. Gramm-Leach-Bliley Act (GLBA)
  D. California SB 1386
  A. USA Patriot Act 2001

• Question 72:

  Which one of the following acts makes reputational risk of poor security a reality because it requires public disclosure of any security breach that involves personal information if it is unencrypted or if it is reasonably believed that the information has been acquired by an unauthorized person?

  A. California SB 1386
  B. Sarbanes-Oxley 2002
  C. Gramm-Leach-Bliley Act (GLBA)
  D. USA Patriot Act 2001
  A. California SB 1386

• Question 73:

  What are placeholders (or markers) in an HTML document that the web server will dynamically replace with data just before sending the requested documents to a browser?

  A. Server Side Includes
  B. Sort Server Includes
  C. Server Sort Includes
  D. Slide Server Includes
  A. Server Side Includes

• Question 74:

  How many bits is Source Port Number in TCP Header packet?

  A. 48
  B. 32
  C. 64
  D. 16
  D. 16

• Question 75:

  Before performing the penetration testing, there will be a pre-contract discussion with different pen-testers (the team of penetration testers) to gather a quotation to perform pen testing.

  

  Which of the following factors is NOT considered while preparing a price quote to perform pen testing?

  A. Total number of employees in the client organization
  B. Type of testers involved
  C. The budget required
  D. Expected time required to finish the project
  A. Total number of employees in the client organization

• Question 76:

  The first and foremost step for a penetration test is information gathering. The main objective of this test is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.

  

  Which of the following information gathering terminologies refers to gathering information through social engineering on-site visits, face-to-face interviews, and direct questionnaires?

  A. Active Information Gathering
  B. Pseudonymous Information Gathering
  C. Anonymous Information Gathering
  D. Open Source or Passive Information Gathering
  A. Active Information Gathering

• Question 77:

  John, the penetration tester in a pen test firm, was asked to find whether NTP services are opened on the target network (10.0.0.7) using Nmap tool.

  

  Which one of the following Nmap commands will he use to find it?

  A. nmap -sU -p 389 10.0.0.7
  B. nmap -sU -p 123 10.0.0.7
  C. nmap -sU -p 161 10.0.0.7
  D. nmap -sU -p 135 10.0.0.7
  B. nmap -sU -p 123 10.0.0.7

• Question 78:

  NTP protocol is used to synchronize the system clocks of computers with a remote time server or time source over a network. Which one of the following ports is used by NTP as its transport layer?

  A. TCP port 152
  B. UDP port 177
  C. UDP port 123
  D. TCP port 113
  C. UDP port 123

• Question 79:

  Traffic on which port is unusual for both the TCP and UDP ports?

  A. Port 81
  B. Port 443
  C. Port 0
  D. Port21
  C. Port 0

• Question 80:

  Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?

  A. Threat-Assessment Phase
  B. Pre-Assessment Phase
  C. Assessment Phase
  D. Post-Assessment Phase
  B. Pre-Assessment Phase