EC-COUNCIL 412-79V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79V8 Online Questions & Answers

• Question 191:

  An antenna is a device that is designed to transmit and receive the electromagnetic waves that are generally called radio waves. Which one of the following types of antenna is developed from waveguide technology?

  A. Leaky Wave Antennas
  B. Aperture Antennas
  C. Reflector Antenna
  D. Directional Antenna
  B. Aperture Antennas

• Question 192:

  Besides the policy implications of chat rooms, Internet Relay Chat (IRC) is frequented by attackers and used as a command and control mechanism. IRC normally uses which one of the following TCP ports?

  A. 6566 TCP port
  B. 6771 TCP port
  C. 6667 TCP port
  D. 6257 TCP port
  C. 6667 TCP port

• Question 193:

  Identify the port numbers used by POP3 and POP3S protocols.

  A. 113 and 981
  B. 111 and 982
  C. 110 and 995
  D. 109 and 973
  C. 110 and 995

• Question 194:

  A directory traversal (or path traversal) consists in exploiting insufficient security validation/sanitization of user-supplied input file names, so that characters representing "traverse to parent directory" are passed through to the file APIs. The goal of this attack is to order an application to access a computer file that is not intended to be accessible. This attack exploits a lack of security (the software is acting exactly as it is supposed to) as opposed to exploiting a bug in the code.

  

  To perform a directory traversal attack, which sequence does a pen tester need to follow to manipulate variables of reference files?

  A. dot-dot-slash (../) sequence
  B. Denial-of-Service sequence
  C. Brute force sequence
  D. SQL Injection sequence
  A. dot-dot-slash (../) sequence

• Question 195:

  Variables are used to define parameters for detection, specifically those of your local network and/or specific servers or ports for inclusion or exclusion in rules. These are simple substitution variables set with the var keyword. Which one of the following operator is used to define meta- variables?

  A. "$"
  B. "#"
  C. "*"
  D. "?"
  A. "$"

• Question 196:

  Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

  A. Event Log Tracker
  B. Sawmill
  C. Syslog Manager
  D. Event Log Explorer
  B. Sawmill

• Question 197:

  Which one of the following acts related to the information security in the US fix the responsibility of management for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

  A. California SB 1386
  B. Sarbanes-Oxley 2002
  C. Gramm-Leach-Bliley Act (GLBA)
  D. USA Patriot Act 2001
  B. Sarbanes-Oxley 2002

• Question 198:

  Which of the following is NOT generally included in a quote for penetration testing services?

  A. Type of testing carried out
  B. Type of testers involved
  C. Budget required
  D. Expected timescale required to finish the project
  B. Type of testers involved

• Question 199:

  Logs are the record of the system and network activities. Syslog protocol is used for delivering log information across an IP network. Syslog messages can be sent via which one of the following?

  A. UDP and TCP
  B. TCP and SMTP
  C. SMTP
  D. UDP and SMTP
  A. UDP and TCP

• Question 200:

  In the TCP/IP model, the transport layer is responsible for reliability and flow control from source to the destination. TCP provides the mechanism for flow control by allowing the sending and receiving hosts to communicate. A flow control mechanism avoids the problem with a transmitting host overflowing the buffers in the receiving host.

  

  Which of the following flow control mechanism guarantees reliable delivery of data?

  A. Sliding Windows
  B. Windowing
  C. Positive Acknowledgment with Retransmission (PAR)
  D. Synchronization
  C. Positive Acknowledgment with Retransmission (PAR)