1091 お客様のコメント
質問 1：
Metasploit framework in an open source platform for vulnerability research, development, and penetration testing. Which one of the following metasploit options is used to exploit multiple systems at once?
A. NinjaDontKill
B. EnablePython
C. RandomNops
D. NinjaHost
正解：A
質問 2：
Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?
A. Project Goal
B. Success Factors
C. Objectives
D. Assumptions
正解：D
質問 3：
Which one of the following 802.11 types uses either FHSS or DSSS for modulation?
A. 802.11-Legacy
B. 802.11n
C. 802.11b
D. 802.11a
正解：A
質問 4：
Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?
A. Product-based Assessment Solutions
B. Service-based Assessment Solutions
C. Tree-based Assessment
D. Inference-based Assessment
正解：C
質問 5：
Which of the following policies helps secure data and protects the privacy of organizational information?
A. Cryptography Policy
B. Special-Access Policy
C. Personal Security Policy
D. Document retention Policy
正解：A
質問 6：
In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc.
They first access the web application using a low privileged account and then escalate privileges to access protected resources. What attack has been carried out?
A. XPath Injection Attack
B. Authorization Attack
C. Frame Injection Attack
D. Authentication Attack
正解：B
Metasploit framework in an open source platform for vulnerability research, development, and penetration testing. Which one of the following metasploit options is used to exploit multiple systems at once?
A. NinjaDontKill
B. EnablePython
C. RandomNops
D. NinjaHost
正解：A
質問 2：
Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?
A. Project Goal
B. Success Factors
C. Objectives
D. Assumptions
正解：D
質問 3：
Which one of the following 802.11 types uses either FHSS or DSSS for modulation?
A. 802.11-Legacy
B. 802.11n
C. 802.11b
D. 802.11a
正解：A
質問 4：
Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?
A. Product-based Assessment Solutions
B. Service-based Assessment Solutions
C. Tree-based Assessment
D. Inference-based Assessment
正解：C
質問 5：
Which of the following policies helps secure data and protects the privacy of organizational information?
A. Cryptography Policy
B. Special-Access Policy
C. Personal Security Policy
D. Document retention Policy
正解：A
質問 6：
In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc.
They first access the web application using a low privileged account and then escalate privileges to access protected resources. What attack has been carried out?
A. XPath Injection Attack
B. Authorization Attack
C. Frame Injection Attack
D. Authentication Attack
正解：B
成岛** -
試験に合格するために必須の基本知識がこの412-79v10問題集一つでで短時間に修得できると思います。スムーズにかけたし、合格することもできました。