2014年4月1日星期二

EC-COUNCIL ECSS認定試験の出題傾向をつかんだ試験参考書

IT-Passports.comというサイトには全的な資源とEC-COUNCILのECSSの試験問題があります。それに、EC-COUNCILのECSSの試験の実践経験やテストダンプにも含まれています。IT-Passports.comは受験生たちを助けて試験の準備をして、試験に合格するサイトですから、受験生のトレーニングにいろいろな便利を差し上げます。あなたは一部の試用問題と解答を無料にダウンロードすることができます。IT-Passports.comのEC-COUNCILのECSSの試験中に絶対な方法で転送することでなく、IT-Passports.comは真実かつ全面的な試験問題と解答を提供していますから、当社がオンラインするユニークなのEC-COUNCILのECSSの試験トレーニング資料を利用したら、あなたが気楽に試験に合格することができるようになります。IT-Passports.comは合格率が100パーセントということを保証します。

いつもあなたに最高のECSS認定試験に関連する試験参考書を与えられるために、IT-Passports.comは常に問題集の質を改善し、ずっと最新の試験のシラバスに応じて問題集を更新しています。現在の市場では、IT-Passports.comはあなたの最もよい選択です。長い間にわたって、IT-Passports.comは多くの受験生に認可されました。私を信じていないなら、周りの人々に聞いてみてもいいです。IT-Passports.comの試験問題集を利用したことがある人がきっといますから。IT-Passports.comは最優秀な試験ECSS参考書を提供してあなたを試験に合格させることを保証します。

まだEC-COUNCILのECSS認定試験を悩んでいますかこの情報の時代の中で専門なトレーニングを選択するのと思っていますか?良いターゲットのトレーニングを利用すれば有効で君のIT方面の大量の知識を補充 できます。EC-COUNCILのECSS認定試験によい準備ができて、試験に穏やかな心情をもって扱うことができます。IT-Passports.comの専門家が研究された問題集を利用してください。

IT-Passports.comが提供した研修ツールはEC-COUNCILのECSSの認定試験に向けて学習資料やシミュレーション訓練宿題で、重要なのは試験に近い練習問題と解答を提供いたします。IT-Passports.com を選ばれば短時間にITの知識を身につけることができて、高い点数をとられます。

試験番号:ECSS問題集
試験科目:EC-COUNCIL 「EC-Council Certified Security Specialist Practice Test」
問題と解答:全337問

IT-Passports.comは我々が研究したトレーニング資料を無料に更新します。それはあなたがいつでも最新のECSS試験トレーニング資料をもらえるということです。ECSS認定試験の目標が変更されば、IT-Passports.comが提供した勉強資料も変化に追従して内容を変えます。IT-Passports.com は各受験生のニーズを知っていて、あなたがECSS認定試験に受かることに有効なヘルプを差し上げます。あなたが首尾よく試験に合格するように、我々は最も有利な価格と最高のクオリティーを提供して差し上げます。

この人材があちこちいる社会で、多くのプレッシャーを感じませんか。学歴はどんなに高くても実力を代表できません。学歴はただ踏み台だけで、あなたの地位を確保できる礎は実力です。EC-COUNCILのECSS認定試験は人気がある認証で、その認証を持ちたい人がたくさんいます。この試験に受かったら自分のキャリアを固定することができます。IT-Passports.comのEC-COUNCILのECSS試験トレーニング資料はとても良いトレーニングツールで、あなたが首尾よく試験に合格ことを助けられます。試験に合格したら、あなたは国際的に認可され、解雇される心配する必要はありません。

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/ECSS.html

NO.1 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Vulnerability scanning
B. Manual penetration testing
C. Automated penetration testing
D. Code review
Answer: A

EC-COUNCIL参考書   ECSS   ECSS認証試験   ECSS問題集

NO.2 Which of the following security policies will you implement to keep safe your data when you connect
your Laptop to the office network over IEEE 802.11 WLANs?
Each correct answer represents a complete solution. Choose two.
A. Using a protocol analyzer on your Laptop to monitor for risks.
B. Using an IPSec enabled VPN for remote connectivity.
C. Using portscanner like nmap in your network.
D. Using personal firewall software on your Laptop.
Answer: B,D

EC-COUNCIL認定資格   ECSS   ECSS認定証   ECSS認定資格

NO.3 Which of the following is the first computer virus that was used to infect the boot sector of storage
media formatted with the DOS File Allocation Table (FAT) file system?
A. I love you
B. Melissa
C. Tequila
D. Brain
Answer: D

EC-COUNCIL   ECSS   ECSS   ECSS

NO.4 Linux traffic monitoring tools are used to monitor and quickly detect faults in the network or a system.
Which of the following tools are used to monitor traffic of the Linux operating system?
Each correct answer represents a complete solution. Choose all that apply.
A. PsExec
B. IPTraf
C. MRTG
D. PsLogList
E. Ntop
Answer: B,C,E

EC-COUNCIL認定試験   ECSS過去問   ECSS   ECSS   ECSS認定証

NO.5 You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless
network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring
ISA Server 2006, which of the following is NOT necessary?
A. Defining how ISA Server would cache Web contents
B. Defining ISA Server network configuration
C. Setting up of monitoring on ISA Server
D. Configuration of VPN access
Answer: D

EC-COUNCIL認定試験   ECSS認定証   ECSS   ECSS   ECSS

NO.6 Which of the following needs to be documented to preserve evidences for presentation in court?
A. Incident response policy
B. Account lockout policy
C. Separation of duties
D. Chain of custody
Answer: D

EC-COUNCIL認定資格   ECSS参考書   ECSS   ECSS   ECSS

NO.7 Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.
A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic
will follow.
B. Routers do not limit physical broadcast traffic.
C. Routers organize addresses into classes, which are used to determine how to move packets fromone
network to another.
D. Routers act as protocol translators and bind dissimilar networks.
Answer: A,C,D

EC-COUNCIL認定試験   ECSS   ECSS   ECSS認定試験   ECSS練習問題

NO.8 Kerberos is a computer network authentication protocol that allows individuals communicating over a
non-secure network to prove their identity to one another in a secure manner. Which of the following
statements are true about the Kerberos authentication scheme?
Each correct answer represents a complete solution. Choose all that apply.
A. Kerberos requires continuous availability of a central server.
B. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
C. Dictionary and brute force attacks on the initial TGS response to a client may reveal the
subject'spasswords.
D. Kerberos requires the clocks of the involved hosts to be synchronized.
Answer: A,C,D

EC-COUNCIL認定証   ECSS   ECSS   ECSS認定資格

NO.9 You have just set up a wireless network for customers at a coffee shop. Which of the following are
good security measures to implement?
Each correct answer represents a complete solution. Choose two.
A. Using WEP encryption
B. Using WPA encryption
C. Not broadcasting SSID
D. MAC filtering the router
Answer: A,B

EC-COUNCIL   ECSS参考書   ECSS問題集   ECSS

NO.10 Firewalking is a technique that can be used to gather information about a remote network protected by a
firewall. This technique can be used effectively to perform information gathering attacks. In this technique,
an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which
of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
A. ICMP packets leaving the network should be allowed.
B. An attacker should know the IP address of the last known gateway before the firewall.
C. There should be a backdoor installed on the network.
D. An attacker should know the IP address of a host located behind the firewall.
Answer: A,B,D

EC-COUNCIL問題集   ECSS   ECSS

NO.11 Which of the following statements best describes a certification authority?
A. A certification authority is a type of encryption that uses a public key and a private key pair fordata
encryption.
B. A certification authority is an entity that issues digital certificates for use by other parties.
C. A certification authority is a technique to authenticate digital documents by using
computercryptography.
D. A certification authority is a type of encryption that uses a single key to encrypt and decryp t data.
Answer: B

EC-COUNCIL   ECSS   ECSS認定試験   ECSS

NO.12 Which of the following representatives of incident response team takes forensic backups of the systems
that are the focus of the incident?
A. Lead investigator
B. Information security representative
C. Technical representative
D. Legal representative
Answer: C

EC-COUNCIL   ECSS   ECSS参考書   ECSS

NO.13 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of
the tool is as follows:
Which of the following tools is John using to crack the wireless encryption keys?
A. AirSnort
B. Kismet
C. PsPasswd
D. Cain
Answer: A

EC-COUNCIL認定資格   ECSS認定資格   ECSS   ECSS

NO.14 John works as an Office Assistant in DataSoft Inc. He has received an e-mail from
duesoft_lotterygroup@us.com with the following message:
The DueSoft Lottery Incorporation
This is to inform you that you have just won a prize of $7,500.00 for this year's Annual Lottery promotion,
which was organized by Msn/Yahoo Lottery in conjunction with DueSoft. We collect active online e-mails
and select five people every year as our winners through an electronic balloting machine. Please reply
within three days of receiving this e-mail with your full details like Name, Address, Sex, Occupation, Age,
State, Telephone number, and Country to claim your prize.
If John replies to this e-mail, which of the following attacks may he become vulnerable to?
A. Salami attack
B. Man-in-the-Middle attack
C. Phishing attack
D. DoS attack
Answer: C

EC-COUNCIL   ECSS   ECSS   ECSS   ECSS

NO.15 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Intercepting proxy server
B. Anonymous proxy server
C. Reverse proxy server
D. Tunneling proxy server
Answer: A

EC-COUNCIL練習問題   ECSS   ECSS   ECSS問題集

NO.16 Which of the following attacks CANNOT be detected by an Intrusion Detection System (IDS)?
Each correct answer represents a complete solution. Choose all that apply.
A. Denial-of-Service (DoS) attack
B. E-mail spoofing
C. Port scan attack
D. Shoulder surfing
Answer: B,D

EC-COUNCIL   ECSS認定試験   ECSS過去問   ECSS

NO.17 Fill in the blank with the appropriate word ___is software that is a subcategory of malware and refers to
unwanted software that performs malicious actions on a user's computer. Some its examples are Trojan,
adware, and spyware.
A. Crimeware
Answer: A

EC-COUNCIL   ECSS認定資格   ECSS認証試験   ECSS練習問題   ECSS

NO.18 Which of the following OSI layers is responsible for protocol conversion, data encryption/decryption,
and data compression?
A. Transport layer
B. Presentation layer
C. Data-link layer
D. Network layer
Answer: B

EC-COUNCIL   ECSS過去問   ECSS   ECSS

NO.19 Which of the following security protocols are based on the 802.11i standard.?
Each correct answer represents a complete solution. Choose all that apply.
A. WEP
B. WPA2
C. WPA
D. WEP2
Answer: B,C

EC-COUNCIL認定試験   ECSS過去問   ECSS   ECSS過去問   ECSS認証試験

NO.20 Which of the following types of attacks cannot be prevented by technical measures only?
A. Brute force
B. Ping flood attack
C. Smurf DoS
D. Social engineering
Answer: D

EC-COUNCIL   ECSS   ECSS   ECSS過去問

IT-Passports.comの専門家チームは彼らの経験と知識を利用して長年の研究をわたって多くの人は待ちに待ったEC-COUNCILのECSS認証試験について教育資料が完成してから、大変にお客様に歓迎されます。IT-Passports.comの模擬試験は真実の試験問題はとても似ている専門家チームの勤労の結果としてとても値打ちがあります。

没有评论:

发表评论