EC-COUNCIL EC-Council Certified Secure Programmer v2 認定 312-92 試験問題:

1. What type of error will result from the following statement?
int main(int argc, char* argv[])
{
char i[7];
strncpy(i, "sdfusdofof", sizeof(i));
}

A) String-termination
B) Unbounded string copy
C) Null-termination
D) String truncation

2. Jonathan is creating an XML document and needs to sign data streams. In his code, Jonathan creates a signature node that is contained within the signed datastream. What type of signature signing has Jonathan employed here?

A) Enveloping
B) Enveloped
C) Detached
D) Attached

3. Jacob is the system administrator for his company, managing over 20 Linux-based servers.
Jacob wants to ensure that his servers are secure so he decides to add the following line to the /etc/sysctl.conf file:
net.ipv4.conf.all.rp_filter = 1
What will this line accomplish?

A) Prevent spoofing of incoming packets that appear to be from local machine
B) Prevent spoofing of incoming packets that appear to be from the computer's defaultgateway
C) Allow outgoing packets only through primary network card
D) Allow incoming packets only from own subnet

4. What is one of the dominant factors that lead to insecure programming?

A) Security is not usually a skill possesed by programmers or developers
B) Secure programming is not seen as a priority by any corporation
C) Secure programming is seen as too costly and time consuming by corporations
D) No companies currently teach developers how to create secure programs

5. If a developer wrote the following code, what would the script be vulnerable to?
#include <stdio.h>
int main(int argc, char **argv)
{
int number = 5;
printf(argv[1]);
putchar('\n');
printf("number (%p) is equal to %d\n", &value, value);
}

A) Buffer overflow
B) SQL injection
C) Format string attack
D) Query string manipulation

質問と回答：