312-50v9試験無料問題集（125題）「EC-COUNCIL Certified Ethical Hacker v9 認定」

出題：1

You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?

A. TCP

B. ICMP

C. UDP

D. UPX

正解：A 解答を投票する

出題：2

This asymmetry cipther is based on factoring the product of two large prime numbers. What cipher is described above?

A. MD5

B. SHA

C. RSA

D. RC5

正解：C 解答を投票する

出題：3

You have compromised a server on a network and successfully open a shell. You aimed to identify all operating systems running on the network. However, as you attemptto fingerprint all machines in the machines in the network using the nmap syntax below, it is not going through.
invictus@victim_server:~$nmap -T4 -O 10.10.0.0/24
TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxxx.
QUITTING!
What seems to be wrong?

A. The nmap syntax is wrong.

B. This is a common behavior for a corrupted nmap application.

C. The outgoing TCP/IP fingerprinting is blocked by the host firewall.

D. OS Scan requires root privileged.

正解：A 解答を投票する

出題：4

Which of the following is considered the best way to prevent Personally Identifiable Information (PII) from web application vulnerabilities?

A. Use cryptographic storage to store all PII

B. Use full disk encryption on all hard drives to protect PII

C. Use encrypted communications protocols to transmit PII

D. Use a security token to log onto into all Web application that use PII

正解：C 解答を投票する

出題：5

Which of the following is the successor of SSL?

A. GRE

B. RSA

C. TLS

D. IPSec

正解：C 解答を投票する

出題：6

Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?

A. Use security policies and procedures to define and implement proper security settings

B. Validate and escape all information sent over to a server

C. Use digital certificates to authenticate a server prior to sending data

D. Verity access right before allowing access to protected information and UI controls

正解：D 解答を投票する

出題：7

An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to www.MyPersonalBank.com, that the user is directed to a phishing site.
Which file does the attacker needto modify?

A. Networks

B. Boot.ini

C. Sudoers

D. Hosts

正解：D 解答を投票する

出題：8

Which of the following describes the characteristics of a Boot Sector Virus?

A. Modifies directory table entries so that directory entries point to the virus code instead of the actual program

B. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

C. Overwrites the original MBR and only executes the new virus code

D. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

正解：D 解答を投票する

出題：9

A common cryptographically tool is the use of XOR. XOR the following binary value: 10110001
00111010

A. 10111100

B. 10011101

C. 10001011

D. 11011000

正解：C 解答を投票する

出題：10

You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System.
What is the best approach?

A. Use HTTP so that all traffic can be routed via a browser, thus evading the internal Intrusion Detection Systems.

B. Install and use Telnet to encrypt all outgoing traffic from this server.

C. Install Cryptcat and encrypt outgoing packets from this server

D. Use Alternate Data Streams to hide the outgoing packets from this server.

正解：B 解答を投票する

312-50v9試験無料問題集「EC-COUNCIL Certified Ethical Hacker v9 認定」