Real EC-Council 412-79v10 Test Online

NEW QUESTION 1
What is a difference between host-based intrusion detection systems (HIDS) and network-based intrusion detection systems (NIDS)?

• A. NIDS are usually a more expensive solution to implement compared to HIDS.
• B. Attempts to install Trojans or backdoors cannot be monitored by a HIDS whereas NIDS can monitor and stop such intrusion events.
• C. NIDS are standalone hardware appliances that include network intrusion detection capabilities whereas HIDS consist of software agents installed on individual computers within the system.
• D. HIDS requires less administration and training compared to NIDS.

Answer: C

NEW QUESTION 2
Which of the following protocols cannot be used to filter VoIP traffic?

• A. Media Gateway Control Protocol (MGCP)
• B. Real-time Transport Control Protocol (RTCP)
• C. Session Description Protocol (SDP)
• D. Real-Time Publish Subscribe (RTPS)

Answer: D

NEW QUESTION 3
Which of the following is a framework of open standards developed by the Internet Engineering Task Force (IETF) that provides secure transmission of the sensitive data over an unprotected medium, such as the Internet?

• A. DNSSEC
• B. Netsec
• C. IKE
• D. IPsec

Answer: D

NEW QUESTION 4
Which of the following attacks does a hacker perform in order to obtain UDDI information such as businessEntity, businesService, bindingTemplate, and tModel?

• A. Web Services Footprinting Attack
• B. Service Level Configuration Attacks
• C. URL Tampering Attacks
• D. Inside Attacks

Answer: A

NEW QUESTION 5
Transmission Control Protocol (TCP) is a connection-oriented four layer protocol. It is responsible for breaking messages into segments, re-assembling them at the destination station, and re-sending. Which one of the following protocols does not use the TCP?

• A. Reverse Address Resolution Protocol (RARP)
• B. HTTP (Hypertext Transfer Protocol)
• C. SMTP (Simple Mail Transfer Protocol)
• D. Telnet

Answer: A

NEW QUESTION 6
Which one of the following acts makes reputational risk of poor security a reality because it requires public disclosure of any security breach that involves personal information if it is unencrypted or if it is reasonably believed that the information has been acquired by an unauthorized person?

• A. California SB 1386
• B. Sarbanes-Oxley 2002
• C. Gramm-Leach-Bliley Act (GLBA)
• D. USA Patriot Act 2001

Answer: A

NEW QUESTION 7
Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?

• A. Threat-Assessment Phase
• B. Pre-Assessment Phase
• C. Assessment Phase
• D. Post-Assessment Phase

Answer: B

NEW QUESTION 8
Which of the following is the range for assigned ports managed by the Internet Assigned Numbers Authority (IANA)?

• A. 3001-3100
• B. 5000-5099
• C. 6666-6674
• D. 0 – 1023

Answer: D

NEW QUESTION 9
Which of the following methods is used to perform server discovery?

• A. Banner Grabbing
• B. Who is Lookup
• C. SQL Injection
• D. Session Hijacking

Answer: B

NEW QUESTION 10
You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive.org and view the HTML code of news.com. You then navigate to the current news.com website and copy over the source code.
While searching through the code, you come across something abnormal:
<img
src=http://coolwebsearch.com/ads/pixel.news.com width=1 height=1 border=0
>
What have you found?

• A. Trojan.downloader
• B. Blind bug
• C. Web bug
• D. CGI code

Answer: C

NEW QUESTION 11
The SnortMain () function begins by associating a set of handlers for the signals, Snort receives. It does this using the signal () function. Which one of the following functions is used as a programspecific signal and the handler for this calls the DropStats() function to output the current Snort statistics?

• A. SIGUSR1
• B. SIGTERM
• C. SIGINT
• D. SIGHUP

Answer: A

NEW QUESTION 12
Which one of the following Snort logger mode commands is associated to run a binary log file through Snort in sniffer mode to dump the packets to the screen?

• A. ./snort -dvr packet.log icmp
• B. ./snort -dev -l ./log
• C. ./snort -dv -r packet.log
• D. ./snort -l ./log –b

Answer: C

NEW QUESTION 13
What is the following command trying to accomplish?

• A. Verify that NETBIOS is running for the 192.168.0.0 network
• B. Verify that TCP port 445 is open for the 192.168.0.0 network
• C. Verify that UDP port 445 is open for the 192.168.0.0 network
• D. Verify that UDP port 445 is closed for the 192.168.0.0 networks

Answer: C

NEW QUESTION 14
A firewall’s decision to forward or reject traffic in network filtering is dependent upon which of the following?

• A. Destination address
• B. Port numbers
• C. Source address
• D. Protocol used

Answer: D

NEW QUESTION 15
In Linux, what is the smallest possible shellcode?

• A. 800 bytes
• B. 8 bytes
• C. 80 bytes
• D. 24 bytes

Answer: D

NEW QUESTION 16
Which one of the following is a command line tool used for capturing data from the live network and copying those packets to a file?

• A. Wireshark: Capinfos
• B. Wireshark: Tcpdump
• C. Wireshark: Text2pcap
• D. Wireshark: Dumpcap

Answer: D

NEW QUESTION 17
Which type of vulnerability assessment tool provides security to the IT system by testing for vulnerabilities in the applications and operation system?

• A. Active/Passive Tools
• B. Application-layer Vulnerability Assessment Tools
• C. Location/Data Examined Tools
• D. Scope Assessment Tools

Answer: D

NEW QUESTION 18
Traffic on which port is unusual for both the TCP and UDP ports?

• A. Port 81
• B. Port 443
• C. Port 0
• D. Port 21

Answer: C

NEW QUESTION 19
During the process of fingerprinting a web application environment, what do you need to do in order to analyze HTTP and HTTPS request headers and the HTML source code?

• A. Examine Source of the Available Pages
• B. Perform Web Spidering
• C. Perform Banner Grabbing
• D. Check the HTTP and HTML Processing by the Browser

Answer: D

NEW QUESTION 20
Which of the following equipment could a pen tester use to perform shoulder surfing?

• A. Binoculars
• B. Painted ultraviolet material
• C. Microphone
• D. All the above

Answer: A

NEW QUESTION 21
......