EC-COUNCIL 412-79V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V8 Online Questions & Answers

• Question 151:

  In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?

  A. IPS evasion technique
  B. IDS evasion technique
  C. UDP evasion technique
  D. TTL evasion technique
  D. TTL evasion technique

• Question 152:

  Which of the following password hashing algorithms is used in the NTLMv2 authentication mechanism?

  A. AES
  B. DES (ECB mode)
  C. MD5
  D. RC5
  C. MD5

• Question 153:

  A pen tester has extracted a database name by using a blind SQL injection. Now he begins to test the table inside the database using the below query and finds the table:

  http://juggyboy.com/page.aspx?id=1; IF (LEN(SELECT TOP 1 NAME from sysobjects where xtype='U')=3) WAITFOR DELAY '00:00:10'-http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),1,1)))=101) WAITFOR DELAY '00:00:10'-- http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),2,1)))=109) WAITFOR DELAY '00:00:10'-- http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),3,1)))=112) WAITFOR DELAY '00:00:10'-

  What is the table name?

  A. CTS
  B. QRT
  C. EMP
  D. ABC
  C. EMP

• Question 154:

  Output modules allow Snort to be much more flexible in the formatting and presentation of output to its users. Snort has 9 output plug-ins that push out data in different formats. Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?

  A. unified
  B. csv
  C. alert_unixsock
  D. alert_fast
  B. csv

• Question 155:

  Packet filtering firewalls are usually a part of a router. In a packet filtering firewall, each packet is compared to a set of criteria before it is forwarded. Depending on the packet and the criteria, the firewall can:

  i)Drop the packet ii)Forward it or send a message to the originator At which level of the OSI model do the packet filtering firewalls work?

  

  A. Application layer
  B. Physical layer
  C. Transport layer
  D. Network layer
  D. Network layer

• Question 156:

  Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?

  A. Project Goal
  B. Success Factors
  C. Objectives
  D. Assumptions
  B. Success Factors

• Question 157:

  John, a penetration tester, was asked for a document that defines the project, specifies goals, objectives, deadlines, the resources required, and the approach of the project. Which of the following includes all of these requirements?

  A. Penetration testing project plan
  B. Penetration testing software project management plan
  C. Penetration testing project scope report
  D. Penetration testing schedule plan
  A. Penetration testing project plan

• Question 158:

  Which one of the following 802.11 types uses either FHSS or DSSS for modulation?

  A. 802.11b
  B. 802.11a
  C. 802.11n
  D. 802.11-Legacy
  D. 802.11-Legacy

• Question 159:

  You work as an IT security auditor hired by a law firm in Boston. You have been assigned the responsibility to audit the client for security risks. When assessing the risk to the clients network, what step should you take first?

  A. Analyzing, categorizing and prioritizing resources
  B. Evaluating the existing perimeter and internal security
  C. Checking for a written security policy
  D. Analyzing the use of existing management and control architecture
  C. Checking for a written security policy

• Question 160:

  Firewall is an IP packet filter that enforces the filtering and security policies to the flowing network traffic. Using firewalls in IPv6 is still the best way of protection from low level attacks at the network and transport layers. Which one of the following cannot handle routing protocols properly?

  A. "Internet-router-firewall-net architecture"
  B. "Internet-firewall-router-net architecture"
  C. "Internet-firewall/router(edge device)-net architecture"
  D. "Internet-firewall -net architecture"
  B. "Internet-firewall-router-net architecture"