852 お客様のコメント
質問 1：
A Demilitarized Zone (DMZ) is a computer host or small network inserted as a "neutral zone" between a company's private network and the outside public network. Usage of a protocol within a DMZ environment is highly variable based on the specific needs of an organization.
Privilege escalation, system is compromised when the code runs under root credentials, and DoS attacks are the basic weakness of which one of the following Protocol?
A. Lightweight Directory Access Protocol (LDAP)
B. Telnet
C. Secure Shell (SSH)
D. Simple Network Management Protocol (SNMP)
正解：C
質問 2：
Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florida. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa.
She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information. After hearing the name of the CEO, the receptionist gave Julia all the information she asked for.
What principal of social engineering did Julia use?
A. Scarcity
B. Social Validation
C. Reciprocation
D. Friendship/Liking
正解：C
質問 3：
By default, the TFTP server listens on UDP port 69. Which of the following utility reports the port status of target TCP and UDP ports on a local or a remote computer and is used to troubleshoot TCP/IP connectivity issues?
A. PortQry
B. Tracert
C. Telnet
D. Netstat
正解：A
質問 4：
Which of the following password hashing algorithms is used in the NTLMv2 authentication mechanism?
A. DES (ECB mode)
B. MD5
C. AES
D. RC5
正解：B
質問 5：
Which one of the following acts related to the information security in the US fix the responsibility of management for establishing and maintaining an adequate internal control structure and procedures for financial reporting?
A. Gramm-Leach-Bliley Act (GLBA)
B. USA Patriot Act 2001
C. Sarbanes-Oxley 2002
D. California SB 1386
正解：C
質問 6：
What is the target host IP in the following command?
A. 172.16.28.95
B. Firewalk does not scan target hosts
C. This command is using FIN packets, which cannot scan target hosts
D. 10.10.150.1
正解：B
質問 7：
You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame.
What ports should you open for SNMP to work through Firewalls.
(Select 2)
A. 160
B. 161
C. 163
D. 162
正解：B,D
質問 8：
Identify the port numbers used by POP3 and POP3S protocols.
A. 109 and 973
B. 113 and 981
C. 111 and 982
D. 110 and 995
正解：D
A Demilitarized Zone (DMZ) is a computer host or small network inserted as a "neutral zone" between a company's private network and the outside public network. Usage of a protocol within a DMZ environment is highly variable based on the specific needs of an organization.
Privilege escalation, system is compromised when the code runs under root credentials, and DoS attacks are the basic weakness of which one of the following Protocol?
A. Lightweight Directory Access Protocol (LDAP)
B. Telnet
C. Secure Shell (SSH)
D. Simple Network Management Protocol (SNMP)
正解：C
質問 2：
Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florida. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa.
She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information. After hearing the name of the CEO, the receptionist gave Julia all the information she asked for.
What principal of social engineering did Julia use?
A. Scarcity
B. Social Validation
C. Reciprocation
D. Friendship/Liking
正解：C
質問 3：
By default, the TFTP server listens on UDP port 69. Which of the following utility reports the port status of target TCP and UDP ports on a local or a remote computer and is used to troubleshoot TCP/IP connectivity issues?
A. PortQry
B. Tracert
C. Telnet
D. Netstat
正解：A
質問 4：
Which of the following password hashing algorithms is used in the NTLMv2 authentication mechanism?
A. DES (ECB mode)
B. MD5
C. AES
D. RC5
正解：B
質問 5：
Which one of the following acts related to the information security in the US fix the responsibility of management for establishing and maintaining an adequate internal control structure and procedures for financial reporting?
A. Gramm-Leach-Bliley Act (GLBA)
B. USA Patriot Act 2001
C. Sarbanes-Oxley 2002
D. California SB 1386
正解：C
質問 6：
What is the target host IP in the following command?
A. 172.16.28.95
B. Firewalk does not scan target hosts
C. This command is using FIN packets, which cannot scan target hosts
D. 10.10.150.1
正解：B
質問 7：
You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame.
What ports should you open for SNMP to work through Firewalls.
(Select 2)
A. 160
B. 161
C. 163
D. 162
正解：B,D
質問 8：
Identify the port numbers used by POP3 and POP3S protocols.
A. 109 and 973
B. 113 and 981
C. 111 and 982
D. 110 and 995
正解：D
Ogasawara -
Pass4TestのECSAv10問題集は「わかりやすさ」「見やすさ」「網羅性」という加点ポイントがあって本当に使えますのでおすすめなの