1192 お客様のコメント
質問 1：
In TCP communications there are 8 flags; FIN, SYN, RST, PSH, ACK, URG, ECE, CWR. These flags have decimal numbers assigned to them:
FIN = 1
SYN = 2
RST = 4
PSH = 8
ACK = 16
URG = 32
ECE = 64
CWR = 128
Jason is the security administrator of ASPEN Communications. He analyzes some traffic using Wireshark and has enabled the following filters.
What is Jason trying to accomplish here?
A. RST, PSH/URG, FIN
B. SYN, SYN/ACK, ACK
C. ACK, ACK, SYN, URG
D. SYN, FIN, URG and PSH
正解：B
質問 2：
You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the traffic generated was too heavy that normal business functions could no longer be rendered to external employees and clients. After a quick investigation, you find that the computer has services running attached to TFN2k and Trinoo software. What do you think was the most likely cause behind this sudden increase in traffic?
A. A bad route on the firewall.
B. A network card that was jabbering.
C. A distributed denial of service attack.
D. Invalid rules entry at the gateway.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
WEP is used on 802.11 networks, what was it designed for?
A. WEP is designed to provide a wireless local area network (WLAN) with a level of security and privacy comparable to what it usually expected of a wired LAN.
B. WEP is designed to provide a wireless local area network (WLAN) with a level of availability and privacy comparable to what is usually expected of a wired LAN.
C. WEP is designed to provide strong encryption to a wireless local area network (WLAN) with a lever of integrity and privacy adequate for sensible but unclassified information.
D. WEOP is designed to provide a wireless local area network (WLAN) with a level of privacy comparable to what it usually expected of a wired LAN.
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
LM authentication is not as strong as Windows NT authentication so you may want to disable its use, because an attacker eavesdropping on network traffic will attack the weaker protocol. A successful attack can compromise the user's password. How do you disable LM authentication in Windows XP?
A. Disable LSASS service in Windows XP
B. Download and install LMSHUT.EXE tool from Microsoft website
C. Stop the LM service in Windows XP
D. Disable LM authentication in the registry
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
Sniffing is considered an active attack.
A. False
B. True
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
This attack technique is used when a Web application is vulnerable to an SQL Injection but the results of the Injection are not visible to the attacker.
A. Double SQL Injection
B. Generic SQL Injection
C. Unique SQL Injection
D. Blind SQL Injection
正解：D
In TCP communications there are 8 flags; FIN, SYN, RST, PSH, ACK, URG, ECE, CWR. These flags have decimal numbers assigned to them:
FIN = 1
SYN = 2
RST = 4
PSH = 8
ACK = 16
URG = 32
ECE = 64
CWR = 128
Jason is the security administrator of ASPEN Communications. He analyzes some traffic using Wireshark and has enabled the following filters.
What is Jason trying to accomplish here?
A. RST, PSH/URG, FIN
B. SYN, SYN/ACK, ACK
C. ACK, ACK, SYN, URG
D. SYN, FIN, URG and PSH
正解：B
質問 2：
You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the traffic generated was too heavy that normal business functions could no longer be rendered to external employees and clients. After a quick investigation, you find that the computer has services running attached to TFN2k and Trinoo software. What do you think was the most likely cause behind this sudden increase in traffic?
A. A bad route on the firewall.
B. A network card that was jabbering.
C. A distributed denial of service attack.
D. Invalid rules entry at the gateway.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
WEP is used on 802.11 networks, what was it designed for?
A. WEP is designed to provide a wireless local area network (WLAN) with a level of security and privacy comparable to what it usually expected of a wired LAN.
B. WEP is designed to provide a wireless local area network (WLAN) with a level of availability and privacy comparable to what is usually expected of a wired LAN.
C. WEP is designed to provide strong encryption to a wireless local area network (WLAN) with a lever of integrity and privacy adequate for sensible but unclassified information.
D. WEOP is designed to provide a wireless local area network (WLAN) with a level of privacy comparable to what it usually expected of a wired LAN.
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
LM authentication is not as strong as Windows NT authentication so you may want to disable its use, because an attacker eavesdropping on network traffic will attack the weaker protocol. A successful attack can compromise the user's password. How do you disable LM authentication in Windows XP?
A. Disable LSASS service in Windows XP
B. Download and install LMSHUT.EXE tool from Microsoft website
C. Stop the LM service in Windows XP
D. Disable LM authentication in the registry
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
Sniffing is considered an active attack.
A. False
B. True
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
This attack technique is used when a Web application is vulnerable to an SQL Injection but the results of the Injection are not visible to the attacker.
A. Double SQL Injection
B. Generic SQL Injection
C. Unique SQL Injection
D. Blind SQL Injection
正解：D
高桥** -
EC0-350解説は丁寧でわかりやすく、ただ線を引くより効率がいいと思います。