1111 お客様のコメント
質問 1：
What information can be collected by dumpster diving?
A. Email messages
B. Sensitive documents
C. All the above
D. Customer contact information
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
A firewall's decision to forward or reject traffic in network filtering is dependent upon which of the following?
A. Port numbers
B. Source address
C. Protocol used
D. Destination address
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.
What are the two types of 'white-box' penetration testing?
A. Blind testing and double blind testing
B. Blind testing and unannounced testing
C. Announced testing and blind testing
D. Announced testing and unannounced testing
正解：A
質問 4：
This is a group of people hired to give details of the vulnerabilities present in the system found after a penetration test. They are elite and extremely competent penetration testers and intrusion analysts. This team prepares a report on the vulnerabilities in the system, attack methods, and how to defend against them.
What is this team called?
A. Lion team
B. Blue team
C. Gorilla team
D. Tiger team
正解：D
質問 5：
During external penetration testing, which of the following techniques uses tools like Nmap to predict the sequence numbers generated by the targeted server and use this information to perform session hijacking techniques?
A. IPID State Number Prediction
B. IPID Sequence Number Prediction
C. TCP Sequence Number Prediction
D. TCP State Number Prediction
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.
What does a vulnerability assessment identify?
A. Disgruntled employees
B. Organizational structure
C. Weaknesses that could be exploited
D. Physical security breaches
正解：C
What information can be collected by dumpster diving?
A. Email messages
B. Sensitive documents
C. All the above
D. Customer contact information
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
A firewall's decision to forward or reject traffic in network filtering is dependent upon which of the following?
A. Port numbers
B. Source address
C. Protocol used
D. Destination address
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.
What are the two types of 'white-box' penetration testing?
A. Blind testing and double blind testing
B. Blind testing and unannounced testing
C. Announced testing and blind testing
D. Announced testing and unannounced testing
正解：A
質問 4：
This is a group of people hired to give details of the vulnerabilities present in the system found after a penetration test. They are elite and extremely competent penetration testers and intrusion analysts. This team prepares a report on the vulnerabilities in the system, attack methods, and how to defend against them.
What is this team called?
A. Lion team
B. Blue team
C. Gorilla team
D. Tiger team
正解：D
質問 5：
During external penetration testing, which of the following techniques uses tools like Nmap to predict the sequence numbers generated by the targeted server and use this information to perform session hijacking techniques?
A. IPID State Number Prediction
B. IPID Sequence Number Prediction
C. TCP Sequence Number Prediction
D. TCP State Number Prediction
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.
What does a vulnerability assessment identify?
A. Disgruntled employees
B. Organizational structure
C. Weaknesses that could be exploited
D. Physical security breaches
正解：C
Yagyu -
ECSAv8初心者でも分かり易いと感じました。きっちりとまとまっていてわかりやすかったです。