EC-COUNCIL EC-COUNCIL Certifications 312-92 Questions & Answers

• Question 71:

  Harold is developing software for the company he works for to aid in their human resources and payroll procedures. Harold is almost done working on the program, currently working in the testing phase. Since Harold's supervisors and the company executives are going to consider this a mission critical program, they want it to be tested to the fullest. Harold decides to test the program using higher than normal simulated loads and requests.

  What type of testing is Harold performing against his program?

  A. Load test

  B. Stress test

  C. User acceptance test

  D. Load-pressure test

  Correct Answer: B

• Question 72:

  What will the following script accomplish?

  for (int i=0; i

  if (HttpCookie.domainMatches(blacklist[i],

  host))

  return false;

  A. Create a list of blacklist domains

  B. Check domains against a blacklist

  C. Prevent site from being blacklisted

  D. Delete entries in a blacklist file

  Correct Answer: B

• Question 73:

  What type of error will result from the following statement?

  int main(int argc, char* argv[])

  {

  char i[7];

  strncpy(i, "sdfusdofof", sizeof(i));

  }

  A. Unbounded string copy

  B. Null-termination

  C. String-termination

  D. String truncation

  Correct Answer: B

• Question 74:

  Kyle is a web developer for Innovative Incorporated, a web development and graphics designing company in Dallas. Kyle is currently working on a web-based application for a client that wants dynamic and rich content on their site. Kyle is going to use java applets and flash animation to make the website really stand out. The client was adamant though about making sure the site used security features to ensure that the site itself and visitors alike would not have issues.

  What Java security feature can Kyle use in the development of the site to add security?

  A. Sandbox

  B. JavaScan

  C. Java quarantine

  D. Limbo

  Correct Answer: A

• Question 75:

  What will the following command accomplish? c:\signtool12winnt\signtool -L -d a:\tmpcert:a:\cert

  A. Save certificate to a temporary archive directory

  B. Sign Java applet

  C. Verify archive

  D. Determine certificate nickname

  Correct Answer: D

• Question 76:

  Mathew is working on a Fedora machine and is having issues with some shellcode he wrote that is producing errors. Mathew decides to download and use Ktrace to debug the shellcode to see where the errors are originating from.

  Why will his plan not work?

  A. Ktrace cannot debug errors, it only notifies of successful calls

  B. Ktrace only works on Windows platforms

  C. Ktrace cannot debug shellcode

  D. Ktrace only works on *BSD platforms

  Correct Answer: D

• Question 77:

  Neil is almost finished developing a Web-based inventorytracking application for a company he is working for under contract. Neil finds out that the company wants to pay him half of what they had agreed upon so he is very angry. Neil

  decides to insert the following code into his application.

  What is Neil trying to create here?

  #include

  #include

  int main(int argc, char *argv[])

  {

  char buffer[10];

  if (argc < 2)

  {

  fprintf(stderr, "USAGE: %s

  string\n", argv[0]);

  return 1;

  }

  strcpy(buffer, argv[1]);

  return 0;

  }

  A. UML malformed string

  B. Format string bug

  C. Buffer underflow

  D. Buffer overflow

  Correct Answer: D

• Question 78:

  What programming threat model with six categories includes repudiation, spoofing identity, information disclosure and so on?

  A. GUID threat model

  B. STRIDE threat model

  C. EUID threat model

  D. GUILDE threat model

  Correct Answer: B

• Question 79:

  Jay is using the EnTrial Key Generator software to create software keys for the programs he has created. To create the unlock key in the software, what two inputs must Jay use?

  A. Vector markup ID

  B. Personal ID

  C. GUID

  D. Generated code

  Correct Answer: BD

• Question 80:

  George is the CIO for the US Department of Defense. George's education and work experience cover everything from Systems Administration to developing complex software programs for the government. With many new federal regulations put forth by the US Department of Homeland Security, every single aspect of George's control must be secured and protected from attack. George is currently looking to purchase customized communications software for sending instant messages to branches of the DoD all over the world.

  What set of security standards should George ensure the software he purchases be developed under?

  A. Common Criteria

  B. ISO 199776

  C. Code Containment

  D. Code Access Security

  Correct Answer: A