EC-COUNCIL 412-79V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V8 Online Questions & Answers

• Question 11:

  Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

  A. USA Patriot Act 2001
  B. Sarbanes-Oxley 2002
  C. Gramm-Leach-Bliley Act (GLBA)
  D. California SB 1386
  B. Sarbanes-Oxley 2002

• Question 12:

  Identify the data security measure which defines a principle or state that ensures that an action or transaction cannot be denied.

  A. Availability
  B. Integrity
  C. Authorization
  D. Non-Repudiation
  D. Non-Repudiation

• Question 13:

  Which one of the following is a supporting tool for 802.11 (wireless) packet injections, it spoofs 802.11 packets to verify whether the access point is valid or not?

  A. Airsnort
  B. Aircrack
  C. Airpwn
  D. WEPCrack
  C. Airpwn

• Question 14:

  The framework primarily designed to fulfill a methodical and organized way of addressing five threat classes to network and that can be used to access, plan, manage, and maintain secure computers and communication networks is:

  A. Nortells Unified Security Framework
  B. The IBM Security Framework
  C. Bell Labs Network Security Framework
  D. Microsoft Internet Security Framework
  C. Bell Labs Network Security Framework

• Question 15:

  Identify the type of testing that is carried out without giving any information to the employees or administrative head of the organization.

  A. Unannounced Testing
  B. Double Blind Testing
  C. Announced Testing
  D. Blind Testing
  A. Unannounced Testing

• Question 16:

  A penetration tester performs OS fingerprinting on the target server to identify the operating system used on the target server with the help of ICMP packets.

  

  While performing ICMP scanning using Nmap tool, message received/type displays "3 Destination Unreachable[5]" and code 3. Which of the following is an appropriate description of this response?

  A. Destination port unreachable
  B. Destination host unavailable
  C. Destination host unreachable
  D. Destination protocol unreachable
  A. Destination port unreachable

• Question 17:

  In the context of penetration testing, what does blue teaming mean?

  

  A. A penetration test performed with the knowledge and consent of the organization's IT staff
  B. It is the most expensive and most widely used
  C. It may be conducted with or without warning
  D. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management
  A. A penetration test performed with the knowledge and consent of the organization's IT staff

• Question 18:

  In which of the following firewalls are the incoming or outgoing packets blocked from accessing services for which there is no proxy?

  A. Circuit level firewalls
  B. Packet filters firewalls
  C. Stateful multilayer inspection firewalls
  D. Application level firewalls
  D. Application level firewalls

• Question 19:

  Identify the policy that defines the standards for the organizational network connectivity and security standards for computers that are connected in the organizational network.

  A. Information-Protection Policy
  B. Special-Access Policy
  C. Remote-Access Policy
  D. Acceptable-Use Policy
  C. Remote-Access Policy

• Question 20:

  HTTP protocol specifies that arbitrary binary characters can be passed within the URL by using %xx notation, where 'xx' is the

  A. ASCII value of the character
  B. Binary value of the character
  C. Decimal value of the character
  D. Hex value of the character
  C. Decimal value of the character