EC-COUNCIL EC-COUNCIL Certifications 412-79V8 Questions & Answers

• Question 71:

  Which of the following is not a condition specified by Hamel and Prahalad (1990)?

  A. Core competency should be aimed at protecting company interests

  B. Core competency is hard for competitors to imitate

  C. Core competency provides customer benefits

  D. Core competency can be leveraged widely to many products and markets

  Correct Answer: A

• Question 72:

  Which of the following defines the details of services to be provided for the client's organization and the list of services required for performing the test in the organization?

  A. Draft

  B. Report

  C. Requirement list

  D. Quotation

  Correct Answer: D

• Question 73:

  Many security and compliance projects begin with a simple idea: assess the organization's risk,

  vulnerabilities, and breaches. Implementing an IT security risk assessment is critical to the overall security

  posture of any organization.

  An effective security risk assessment can prevent breaches and reduce the impact of realized breaches.

  

  What is the formula to calculate risk?

  A. Risk = Budget x Time

  B. Risk = Goodwill x Reputation

  C. Risk = Loss x Exposure factor

  D. Risk = Threats x Attacks

  Correct Answer: C

• Question 74:

  What threat categories should you use to prioritize vulnerabilities detected in the pen testing report?

  A. 1, 2, 3, 4, 5

  B. Low, medium, high, serious, critical

  C. Urgent, dispute, action, zero, low

  D. A, b, c, d, e

  Correct Answer: B

• Question 75:

  Which of the following has an offset field that specifies the length of the header and data?

  A. IP Header

  B. UDP Header

  C. ICMP Header

  D. TCP Header

  Correct Answer: A

• Question 76:

  SQL injection attacks are becoming significantly more popular amongst hackers and there has been an estimated 69 percent increase of this attack type. This exploit is used to great effect by the hacking community since it is the primary way to steal sensitive data from web applications. It takes advantage of non-validated input vulnerabilities to pass SQL commands through a web application for execution by a back-end database. The below diagram shows how attackers launched SQL injection attacks on web applications.

  

  Which of the following can the attacker use to launch an SQL injection attack?

  A. Blah' "2=2 "

  B. Blah' and 2=2 -

  C. Blah' and 1=1 -

  D. Blah' or 1=1 -

  Correct Answer: D

• Question 77:

  Identify the port numbers used by POP3 and POP3S protocols.

  A. 113 and 981

  B. 111 and 982

  C. 110 and 995

  D. 109 and 973

  Correct Answer: C

• Question 78:

  The objective of social engineering pen testing is to test the strength of human factors in a security chain within the organization. It is often used to raise the level of security awareness among employees.

  

  The tester should demonstrate extreme care and professionalism during a social engineering pen test as it might involve legal issues such as violation of privacy and may result in an embarrassing situation for the organization. Which of the following methods of attempting social engineering is associated with bribing, handing out gifts, and becoming involved in a personal relationship to befriend someone inside the company?

  A. Accomplice social engineering technique

  B. Identity theft

  C. Dumpster diving

  D. Phishing social engineering technique

  Correct Answer: A

• Question 79:

  In the context of penetration testing, what does blue teaming mean?

  

  A. A penetration test performed with the knowledge and consent of the organization's IT staff

  B. It is the most expensive and most widely used

  C. It may be conducted with or without warning

  D. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management

  Correct Answer: A

• Question 80:

  John, the penetration tester in a pen test firm, was asked to find whether NTP services are opened on the target network (10.0.0.7) using Nmap tool.

  

  Which one of the following Nmap commands will he use to find it?

  A. nmap -sU p 389 10.0.0.7

  B. nmap -sU p 123 10.0.0.7

  C. nmap -sU p 161 10.0.0.7

  D. nmap -sU p 135 10.0.0.7

  Correct Answer: B