EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 ECSAv8 試験問題:
1. Which of the following protocols cannot be used to filter VoIP traffic?
A) Real-time Transport Control Protocol (RTCP)
B) Session Description Protocol (SDP)
C) Real-Time Publish Subscribe (RTPS)
D) Media Gateway Control Protocol (MGCP)
2. ARP spoofing is a technique whereby an attacker sends fake ("spoofed") Address Resolution Protocol (ARP) messages onto a Local Area Network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host (such as the default gateway), causing any traffic meant for that IP address to be sent to the attacker instead.
ARP spoofing attack is used as an opening for other attacks.
What type of attack would you launch after successfully deploying ARP spoofing?
A) Input Validation
B) Session Hijacking
C) Parameter Filtering
D) Social Engineering
3. Which of the following are the default ports used by NetBIOS service?
A) 137, 138, 139, 140
B) 135, 136, 139, 445
C) 134, 135, 136, 137
D) 133, 134, 139, 142
4. An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?
A) Frame Injection Attack
B) XPath Injection Attack
C) LDAP Injection Attack
D) SOAP Injection Attack
5. A wireless intrusion detection system (WIDS) monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools. The system monitors the radio spectrum used by wireless LANs, and immediately alerts a systems administrator whenever a rogue access point is detected.
Conventionally it is achieved by comparing the MAC address of the participating wireless devices.
Which of the following attacks can be detected with the help of wireless intrusion detection system (WIDS)?
A) Parameter tampering
B) Social engineering
C) Man-in-the-middle attack
D) SQL injection
質問と回答：
| 質問 # 1 正解： C | 質問 # 2 正解： B | 質問 # 3 正解： A | 質問 # 4 正解： D | 質問 # 5 正解： C |
1159 お客様のコメント
品質保証JPexamはIT認定試験のシラバスに従って、試験問題の範囲を正確に絞って、的中率が99％の最新問題集を捧げます。
1年間の無料更新サービスJPexamは1年以内に問題集の無料更新サービスを提供し、お客様がいつでも最新版の問題集を持つことを保証いたします。もし試験の内容が変更されたら、弊社は直ちにお客様にお知らせします。それに、弊社の問題集が更新されたら、早速メールで最新バージョンを送付いたします。
全額返金JPexamの問題集を利用すると、短時間で勉強しても試験に合格できるのを保証いたします。試験に不合格になってしまった場合、弊社は全額返金いたします。(
ご購入前のお試しJPexamは問題集のサンプルを無料で提供いたします。ご購入前にサンプルを試用して製品の品質を確認することができます。ご遠慮なく利用してください。
