显示标签为“EC-COUNCIL”的博文。显示所有博文
显示标签为“EC-COUNCIL”的博文。显示所有博文

2014年5月5日星期一

EC-COUNCIL EC0-350, de formation et d'essai

Aujourd'hui, il y a pleine de professionnels IT dans cette société. Ces professionnels sont bien populaires mais ils ont à être en face d'une grande compétition. Donc beaucoup de professionnels IT se prouver par les tests de Certification très difficile à réussir. Pass4Test est voilà pour offrir un raccourci au succès de test Certification.

L'équipe de Pass4Test se composant des experts dans le domaine IT. Toutes les Q&As sont examinées par nos experts. Les Q&As offertes par Pass4Test sont réputées pour sa grande couverture ( presque 100%) et sa haute précision. Vous pouvez trouver pas mal de sites similaires que Pass4Test, ces sites peut-être peuvent vous offrir aussi les guides d'études ou les services en ligne, mais on doit admettre que Pass4Test peut être la tête de ces nombreux sites. La mise à jour, la grande couverture des questions, la haute précision des réponses nous permettent à augmenter le taux à réussir le test Certification EC-COUNCIL EC0-350. Tous les points mentionnés ci-dessus seront une assurance 100% pour votre réussite de test Certification EC-COUNCIL EC0-350.

Code d'Examen: EC0-350
Nom d'Examen: EC-COUNCIL (Ethical hacking and countermeasures)
Questions et réponses: 878 Q&As

Vous allez choisir Pass4Test après essayer une partie de Q&A EC-COUNCIL EC0-350 (gratuit à télécharger). Le guide d'étude produit par Pass4Test est une assurance 100% à vous aider à réussir le test Certification EC-COUNCIL EC0-350.

Si vous choisissez notre l'outil formation, Pass4Test peut vous assurer le succès 100% du test EC-COUNCIL EC0-350. Votre argent sera tout rendu si vous échouez le test.

EC0-350 Démo gratuit à télécharger: http://www.pass4test.fr/EC0-350.html

NO.1 Bill has started to notice some slowness on his network when trying to update his company's
website and while trying to access the website from the Internet. Bill asks the help desk manager
if he has received any calls about slowness from the end users, but the help desk manager says
that he has not. Bill receives a number of calls from customers that cannot access the company
website and cannot purchase anything online. Bill logs on to a couple of his routers and notices
that the logs show network traffic is at an all time high.?He also notices that almost all the traffic
is originating from a specific address. Bill decides to use Geotrace to find out where the suspect
IP is originates from. The Geotrace utility runs a traceroute and finds that the IP is coming from
Panama.?Bill knows that none of his customers are in Panama so he immediately thinks that his
company is under a Denial of Service attack. Now Bill needs to find out more about the originating
IP address. What Internet registry should Bill look in to find the IP address?
A.LACNIC
B.ARIN
C.RIPE LACNIC
D.APNIC
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.2 Travis works primarily from home as a medical transcriptionist. He just bought a brand new
Dual Core Pentium computer with over 3 GB of RAM. He uses voice recognition software to help
him transfer what he dictates to electronic documents. The voice recognition software is
processor intensive, which is why he bought the new computer. Travis frequently has to get on
the Internet to do research on what he is working on. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Travis uses antivirus
software, anti-spyware software, and always keeps the computer up-to-date with Microsoft
patches. After another month of working on the computer, Travis' computer is even more
noticeably slow. Every once in awhile, Travis also notices a window or two pop-up on his screen,
but they quickly disappear.He has seen these windows show up, even when he has not been on
the Internet. Travis is really worried about his computer because he spent a lot of money on it, and
he depends on it to work. Travis scans his computer with all kinds of software, and cannot find
anything out of the ordinary. Travis decides to go through Windows Explorer and check out the
file system, folder by folder, to see if there is anything he can find. He spends over four hours
pouring over the files and folders and cannot find anything.But, before he gives up, he notices
that his computer only has about 10 GB of free space available.Since his hard drive is a 200 GB
hard drive, Travis thinks this is very odd. Travis downloads Space Monger and adds up the sizes
for all the folders and files on his computer. According to his calculations, he should have around
150 GB of free space. What is mostly likely the cause of Travis' problems?
A.Travis's computer is infected with stealth kernel level rootkit
B.Travis's computer is infected with Stealth Trojan Virus
C.Travis's computer is infected with Self-Replication Worm that fills the hard disk space
D.Logic Bomb is triggered at random times creating hidden data consuming junk files
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.3 Which of the following built-in C/C++ functions you should avoid to prevent your program from
buffer overflow attacks?
A.strcpy()
B.strcat()
C.streadd()
D.strsock()
Correct:A B C

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.4 Maurine is working as a security consultant for Hinklemeir Associates.She has asked the
Systems Administrator to create a group policy that would not allow null sessions on the network.
The Systems Administrator is fresh out of college and has never heard of null sessions and does
not know what they are used for. Maurine is trying to explain to the Systems Administrator that
hackers will try to create a null session when footprinting the network. Why would an attacker try
to create a null session with a computer on a network?
A.Enumerate users and shares
B.Install a backdoor for later attacks
C.Escalate his/her privileges on the target server
D.To create a user with administrative privileges for later use
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.5 Eric notices repeated probes to port 1080. He learns that the protocol being used is designed to
allow a host outside of a firewall to connect transparently and securely through the firewall. He
wonders if his firewall has been breached. What would be your inference?
A.Eric's network has been penetrated by a firewall breach
B.The attacker is using the ICMP protocol to have a covert channel
C.Eric has a Wingate package providing FTP redirection on his network
D.Somebody is using SOCKS on the network to communicate through the firewall
Correct:D

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.6 Samuel is the network administrator of DataX Communications, Inc. He is trying to configure his
firewall to block password brute force attempts on his network. He enables blocking the intruder's
IP address for a period of 24 hours time after more than three unsuccessful attempts. He is
confident that this rule will secure his network from hackers on the Internet. But he still receives
hundreds of thousands brute-force attempts generated from various IP addresses around the
world. After some investigation he realizes that the intruders are using a proxy somewhere else
on the Internet which has been scripted to enable the random usage of various proxies on each
request so as not to get caught by the firewall rule. Later he adds another rule to his firewall and
enables small sleep on the password attempt so that if the password is incorrect, it would take 45
seconds to return to the user to begin another attempt. Since an intruder may use multiple
machines to brute force the password, he also throttles the number of connections that will be
prepared to accept from a particular IP address. This action will slow the intruder's attempts.
Samuel wants to completely block hackers brute force attempts on his network. What are the
alternatives to defending against possible brute-force password attacks on his site?
A.Enforce a password policy and use account lockouts after three wrong logon attempts even though this
might lock out legit users
B.Enable the IDS to monitor the intrusion attempts and alert you by e-mail about the IP address of the
intruder so that you can block them at the Firewall manually
C.Enforce complex password policy on your network so that passwords are more difficult to brute force
D.You cannot completely block the intruders attempt if they constantly switch proxies
Correct:D

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.7 A client has approached you with a penetration test requirement. They are concerned with the
possibility of external threat, and have invested considerable resources in protecting their
Internet exposure. However, their main concern is the possibility of an employee elevating his/her
privileges and gaining access to information outside of their department. What kind of penetration
test would you recommend that would best address the client's concern?
A.A Grey Hat test
B.A Grey Box test
C.A Black Hat test
D.A White Hat test
E.A Black Box test
F.A White Box test
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

NO.8 Which programming language is NOT vulnerable to buffer overflow attacks?
A.Java
B.ActiveX
C.C++
D.Assembly Language
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   certification EC0-350   EC0-350 examen

Pour réussir le test EC-COUNCIL EC0-350 demande beaucoup de connaissances professionnelles IT. Il n'y a que les gens qui possèdent bien les connaissances complètes à participer le test EC-COUNCIL EC0-350. Maintenant, on a les autres façons pour se former. Bien que vous n'ayez pas une connaissance complète maintenant, vous pouvez quand même réussir le test EC-COUNCIL EC0-350 avec l'aide de Pass4Test. En comparaison des autres façons, cette là dépense moins de temps et de l'effort. Tous les chemins mènent à Rome.

Certification EC-COUNCIL de téléchargement gratuit pratique d'examen EC0-349, questions et réponses

Est-ce que vous vous souciez encore pour passer le test EC-COUNCIL EC0-349? Pourquoi pas choisir la formation en Internet dans une société de l'informatique. Un bon choix de l'outil formation peut résoudre le problème de prendre grande quantité de connaissances demandées par le test EC-COUNCIL EC0-349, et vous permet de préparer mieux avant le test. Les experts de Pass4Test travaillent avec tous efforts à produire une bonne Q&A ciblée au test EC-COUNCIL EC0-349. La Q&A est un bon choix pour vous. Vous pouvez télécharger le démo grantuit tout d'abord en Internet.

Le produit de Pass4Test peut assurer les candidats à réussir le test EC-COUNCIL EC0-349 à la première fois, mais aussi offrir la mise à jour gratuite pendant un an, les clients peuvent recevoir les ressources plus nouvelles. Pass4Test n'est pas seulement un site, mais aussi un bon centre de service.

Code d'Examen: EC0-349
Nom d'Examen: EC-COUNCIL (Computer Hacking Forensic Investigator)
Questions et réponses: 374 Q&As

Dans cette Industrie IT intense, le succès de test EC-COUNCIL EC0-349 peut augmenter le salaire. Les gens d'obtenir le Certificat EC-COUNCIL EC0-349 peuvent gagner beaucoup plus que les gens sans Certificat EC-COUNCIL EC0-349. Le problème est comment on peut réussir le test plus facile?

Le test EC-COUNCIL EC0-349 est une examination de techniques professionnelles dans l'Industrie IT. Pass4Test est un site qui peut vous aider à réussir le test EC-COUNCIL EC0-349 rapidement. Si vous utiliser l'outil de formation avant le test, vous apprendrez tous essences de test Certification EC-COUNCIL EC0-349.

C'est sûr que le Certificat EC-COUNCIL EC0-349 puisse améliorer le lendemain de votre carrière. Parce que si vous pouvez passer le test EC-COUNCIL EC0-349, c'est une meilleure preuve de vos connaissances professionnelles et de votre bonne capacité à être qualifié d'un bon boulot. Le Certificat EC-COUNCIL EC0-349 peut bien tester la professionnalité de IT.

Aujoud'hui, c'est une société de l'informatique. Beaucoup d'organisations peut provider l'outil de se former pour le test Certification EC-COUNCIL EC0-349. Mais on doit admettre que ces site n'ont pas la capacité à offrir une bonne Q&A, elles sont généralement très vagues et sans les points. C'est loin d'attirer les attentions des candidats.

Pass4Test est un site web de vous offrir particulièrement les infos plus chaudes à propos de test Certification EC-COUNCIL EC0-349. Pour vous assurer à nous choisir, vous pouvez télécharger les Q&As partielles gratuites. Pass4Test vous promet un succès 100% du test EC-COUNCIL EC0-349.

EC0-349 Démo gratuit à télécharger: http://www.pass4test.fr/EC0-349.html

NO.1 When carrying out a forensics investigation, why should you never delete a partition on a dynamic
disk?
A.All virtual memory will be deleted
B.The wrong partition may be set to active
C.This action can corrupt the disk
D.The computer will be set in a constant reboot state
Answer: C

EC-COUNCIL   EC0-349 examen   EC0-349 examen   EC0-349 examen

NO.2 A forensics investigator is searching the hard drive of a computer for files that were recently moved to
the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find
anything. What is the reason for this?
A.He should search in C:\Windows\System32\RECYCLED folder
B.The Recycle Bin does not exist on the hard drive
C.The files are hidden and he must use a switch to view them
D.Only FAT system contains RECYCLED folder and not NTFS
Answer: C

EC-COUNCIL   certification EC0-349   EC0-349 examen   EC0-349

NO.3 In the following Linux command, what is the outfile?
dd if=/usr/bin/personal/file.txt of=/var/bin/files/file.txt
A./usr/bin/personal/file.txt
B./var/bin/files/file.txt
C./bin/files/file.txt
D.There is not outfile specified
Answer: B

certification EC-COUNCIL   EC0-349   EC0-349 examen   EC0-349 examen

NO.4 Sectors in hard disks typically contain how many bytes?
A.256
B.512
C.1024
D.2048
Answer: B

EC-COUNCIL examen   EC0-349 examen   EC0-349

NO.5 The efforts to obtain information before a trial by demanding documents, depositions, questions and
answers written under oath, written requests for admissions of fact, and examination of the scene is a
description of what legal term?
A.Detection
B.Hearsay
C.Spoliation
D.Discovery
Answer: D

certification EC-COUNCIL   certification EC0-349   EC0-349   EC0-349 examen

NO.6 What will the following Linux command accomplish?
dd if=/dev/mem of=/home/sam/mem.bin bs=1024
A.Copy the master boot record to a file
B.Copy the contents of the system folder mem to a file
C.Copy the running memory to a file
D.Copy the memory dump file to an image file
Answer: C

EC-COUNCIL examen   certification EC0-349   EC0-349 examen   EC0-349 examen

NO.7 In conducting a computer abuse investigation you become aware that the suspect of the investigation
is using ABC Company as his Internet Service Provider (ISP). You contact the ISP and request that they
provide you assistance with your investigation. What assistance can the ISP provide?
A.The ISP can investigate anyone using their service and can provide you with assistance
B.The ISP can investigate computer abuse committed by their employees, but must preserve the privacy
of their ustomers and therefore cannot assist you without a warrant
C.The ISP cannot conduct any type of investigations on anyone and therefore cannot assist you
D.ISPs never maintain log files so they would be of no use to your investigation
Answer: B

certification EC-COUNCIL   EC0-349   certification EC0-349   EC0-349 examen   certification EC0-349

NO.8 What is the last bit of each pixel byte in an image called?
A.Last significant bit
B.Least significant bit
C.Least important bit
D.Null bit
Answer: B

EC-COUNCIL   certification EC0-349   certification EC0-349   EC0-349 examen   EC0-349 examen   certification EC0-349

Nous sommes clairs que ce soit necessaire d'avoir quelques certificats IT dans cette industrie de plus en plus intense. Le Certificat IT est une bonne examination des connaissances démandées. Dans l'Industrie IT, le test EC-COUNCIL EC0-349 est une bonne examination. Mais c'est difficile à passer le test EC-COUNCIL EC0-349. Pour améliorer le travail dans le future, c'est intélligent de prendre une bonne formation en coûtant un peu d'argent. Vous allez passer le test 100% en utilisant le Pass4Test. Votre argent sera tout rendu si votre test est raté.

2014年1月28日星期二

EC-COUNCIL 212-77, de formation et d'essai

Pass4Test peut non seulement vous aider à réussir votre rêve, mais encore vous offre le service gratuit pendand un an après vendre en ligne. Q&A offerte par l'équipe de Pass4Test vous assure à passer 100% le test de Certification EC-COUNCIL 212-77.

Peut-être vous voyez les guides d'études similaires pour le test EC-COUNCIL 212-77, mais nous avons la confiance que vous allez nous choisir finalement grâce à notre gravité d'état dans cette industrie et notre profession. Pass4Test se contribue à amérioler votre carrière. Vous saurez que vous êtes bien préparé à passer le test EC-COUNCIL 212-77 lorsque vous choisissez la Q&A de Pass4Test. De plus, un an de service gratuit en ligne après vendre est aussi disponible pour vous.

Tant que vous avez besion de participer l'examen, nous pouvons toujours mettre à jour de matériaux à propos de test Certification EC-COUNCIL 212-77. Le guide d'étude de Pass4Test comprend les excercices de EC-COUNCIL 212-77 et la Q&A qui peut vous permetrre à réussir 100% le test EC-COUNCIL 212-77. Vous pouvez faire une meilleure préparation pour le test. D'ailleurs, la mise à jour pendant un an après vendre est gratuite pour vous.

Code d'Examen: 212-77
Nom d'Examen: EC-COUNCIL (Linux Security )
Questions et réponses: 50 Q&As

Pass4Test vous permet à réussir le test Certification sans beaucoup d'argents et de temps dépensés. La Q&A EC-COUNCIL 212-77 est recherchée par Pass4Test selon les résumés de test réel auparavant, laquelle est bien liée avec le test réel.

Vous choisissez l'aide de Pass4Test, Pass4Test fait tous effort à vous aider à réussir le test. De plus, la mise à jour de Q&A pendant un an est gratuite pour vous. Vous n'avez plus raison à hésiter. Pass4Test est une meilleure assurance pour le succès de test EC-COUNCIL 212-77. Ajoutez la Q&A au panier.

212-77 Démo gratuit à télécharger: http://www.pass4test.fr/212-77.html

NO.1 How should you engage users in helping to secure your computer's passwords?
A. Educate them about the importance of security, the means of choosing good
passwords, and the ways crackers can obtain passwords.
B. Instruct your users to e-mail copies of their passwords to themselves on other systems
so that they're readily available in case of an emergency.
C. Enforce password change rules but don't tell users how crackers obtain passwords
since you could be educating a future cracker.
D. Give some of your users copies of the encrypted database file as backup in case a
cracker breaks in and corrupts the original.
Answer: A

certification EC-COUNCIL   certification 212-77   212-77 examen   certification 212-77   212-77 examen

NO.2 Which of the following measures is the most effective way to prevent attacks
through various network services?
A. Disable a service in the appropriate /etc/xinetd.d configuration file.
B. Use a firewall to drop all requests to unneeded services.
C. Block service requests with the appropriate commands in /etc/hosts.deny.
D. Uninstall unneeded network services.
Answer: D

EC-COUNCIL   certification 212-77   certification 212-77

NO.3 Under the bash shell which is the most appropriate place to set environment
variables that apply to all users?
A. /etc/skel
B. rc.sysinit
C. /etc/profile
D. /etc/bashrc
E. rc.local
Answer: A

EC-COUNCIL examen   certification 212-77   212-77   212-77 examen

NO.4 Which of the following are risks of SUID and SGID programs? (Choose two)
A. Bugs in the programs may cause more damage than they would in ordinary programs.
B. The program files are large and thus may cause a disk to run out of space.
C. Because the programs require password entry, running them over an insecure network
link runs the risk of password interception.
D. Users may be able to abuse a program's features, thus doing more damage than would
otherwise be possible.
Answer: B, D

EC-COUNCIL   212-77   certification 212-77   212-77

NO.5 Which of the following statements applies to the IP address 192.168.0.1?
A. It is reserved.
B. It cannot be assigned to a host that accesses the Internet.
C. It is designated for multicast transmission.
D. It can be freely assigned to a host on a private network
Answer: A

EC-COUNCIL   212-77 examen   212-77

NO.6 Assume that you have just logged on as a regular user. Which of the following
commands allows you to edit the file with user passwords associated with the
Shadow Password Suite?
A. vi /etc/shadow
B. sudo -c "vi /etc/shadow"
C. su -c "vi /etc/shadow"
D. visu vi /etc/passwd
Answer: B

EC-COUNCIL examen   212-77   certification 212-77   212-77   212-77 examen

NO.7 You are told by a co-worker that information pertaining to the syslog command can
be found in man page 3. How would you view this information?
A. man syslog 3
B. man 3 syslog
C. man syslog -3
D. man -3 syslog
Answer: B

certification EC-COUNCIL   212-77 examen   certification 212-77   certification 212-77   certification 212-77

NO.8 Which of the following is not a Linux DHCP client?
A. dhcpcd
B. pump
C. dhcpd
D. dhclient
Answer: A

certification EC-COUNCIL   certification 212-77   212-77   certification 212-77

NO.9 Which of the following are ways to disable dynamic routing?
A. The linuxconf Gated Daemon screen
B. The linuxconf Routed Daemon screen
C. echo "0" > /proc/sys/net/ipv4/dynamic_routing
D. Editing /etc/sysconfig/network-scripts
Answer: B

EC-COUNCIL   212-77   212-77   certification 212-77   212-77

NO.10 Which of the following is true of Linux passwords?
A. They are changed with the password utility.
B. They must be changed once a month.
C. They may consist only of lowercase letters and numbers.
D. They may be changed by the user who owns an account or by root.
Answer: A

EC-COUNCIL   212-77 examen   212-77   212-77

La Q&A lancée par Pass4Test est bien poupulaire. Pass4Test peut non seulement vous permettre à appendre les connaissances professionnelles, et aussi les expériences importantes résumées par les spécialistes dans l'Industrie IT. Pass4Test est un bon fournisseur qui peut répondre une grande demande des candidats. Avec l'aide de Pass4Test, vous aurez la confiance pour réussir le test. Vous n'aurez pas aucune raison à refuser le Pass4Test.

Le dernier examen EC-COUNCIL ECSS gratuit Télécharger

Le guide d'étude sorti de Pass4Test comprend les expériences résumées par nos experts, les matériaux et les Q&As à propos de test Certification EC-COUNCIL ECSS. Notre bonne réputation dans l'industrie IT sera une assurance 100% à réussir le test EC-COUNCIL ECSS. Afin de vous permettre de choisir Pass4Test, vous pouvez télécharger gratuitement le démo de Q&A tout d'abord.

Le test EC-COUNCIL ECSS est test certification très répandu dans l'industrie IT. Vous pourriez à améliorer votre niveau de vie, l'état dans l'industrie IT, etc. C'est aussi un test très rentable, mais très difficile à réussir.

Passer le test EC-COUNCIL ECSS, obtenir le Passport peut améliorer la perspective de votre carrière et vous apporter plus de chances à développer votre boulot. Pass4Test est un site très convenable pour les candidats de test Certification EC-COUNCIL ECSS. Ce site peut offrir les informations plus nouvelles et aussi provider les bonnes chances à se former davantage. Ce sont les points essentiels pour votre succès de test Certification EC-COUNCIL ECSS.

Le test certification EC-COUNCIL ECSS est une bonne preuve de connaissances professionnelles et la techniques. Dans l'Industrie IT, beaucoiup de humains ressource font l'accent de lesquels certificats que les volontiers obtiennent. C'est clairement que le certificat EC-COUNCIL ECSS puisse augmenter la compétition dans ce marché.

Après une longue attente, les documentations de test EC-COUNCIL ECSS qui combinent tous les efforts des experts de Pas4Test sont finalement sorties. Les documentations de Pass4Test sont bien répandues pendant les candidats. L'outil de formation est réputée par sa haute précision et grade couverture des questions, d'ailleurs, il est bien proche que test réel. Vous pouvez réussir le test EC-COUNCIL ECSS à la première fois.

Code d'Examen: ECSS
Nom d'Examen: EC-COUNCIL (EC-Council Certified Security Specialist Practice Test)
Questions et réponses: 337 Q&As

ECSS Démo gratuit à télécharger: http://www.pass4test.fr/ECSS.html

NO.1 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of
the tool is as follows:
Which of the following tools is John using to crack the wireless encryption keys?
A. AirSnort
B. Kismet
C. PsPasswd
D. Cain
Answer: A

EC-COUNCIL   ECSS   ECSS   ECSS   ECSS

NO.2 Fill in the blank with the appropriate word ___is software that is a subcategory of malware and refers to
unwanted software that performs malicious actions on a user's computer. Some its examples are Trojan,
adware, and spyware.
A. Crimeware
Answer: A

EC-COUNCIL   ECSS   ECSS examen   ECSS

NO.3 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Vulnerability scanning
B. Manual penetration testing
C. Automated penetration testing
D. Code review
Answer: A

EC-COUNCIL   certification ECSS   ECSS examen   certification ECSS

NO.4 Which of the following security protocols are based on the 802.11i standard.?
Each correct answer represents a complete solution. Choose all that apply.
A. WEP
B. WPA2
C. WPA
D. WEP2
Answer: B,C

EC-COUNCIL   certification ECSS   ECSS examen   ECSS examen   ECSS

NO.5 Which of the following representatives of incident response team takes forensic backups of the systems
that are the focus of the incident?
A. Lead investigator
B. Information security representative
C. Technical representative
D. Legal representative
Answer: C

certification EC-COUNCIL   ECSS   ECSS

NO.6 Linux traffic monitoring tools are used to monitor and quickly detect faults in the network or a system.
Which of the following tools are used to monitor traffic of the Linux operating system?
Each correct answer represents a complete solution. Choose all that apply.
A. PsExec
B. IPTraf
C. MRTG
D. PsLogList
E. Ntop
Answer: B,C,E

EC-COUNCIL   ECSS   ECSS examen   ECSS

NO.7 Which of the following needs to be documented to preserve evidences for presentation in court?
A. Incident response policy
B. Account lockout policy
C. Separation of duties
D. Chain of custody
Answer: D

certification EC-COUNCIL   ECSS   certification ECSS   ECSS   certification ECSS

NO.8 Firewalking is a technique that can be used to gather information about a remote network protected by a
firewall. This technique can be used effectively to perform information gathering attacks. In this technique,
an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which
of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
A. ICMP packets leaving the network should be allowed.
B. An attacker should know the IP address of the last known gateway before the firewall.
C. There should be a backdoor installed on the network.
D. An attacker should know the IP address of a host located behind the firewall.
Answer: A,B,D

EC-COUNCIL   ECSS   ECSS   ECSS examen   certification ECSS

NO.9 Which of the following statements best describes a certification authority?
A. A certification authority is a type of encryption that uses a public key and a private key pair fordata
encryption.
B. A certification authority is an entity that issues digital certificates for use by other parties.
C. A certification authority is a technique to authenticate digital documents by using
computercryptography.
D. A certification authority is a type of encryption that uses a single key to encrypt and decryp t data.
Answer: B

certification EC-COUNCIL   ECSS   ECSS examen   ECSS   certification ECSS

NO.10 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Intercepting proxy server
B. Anonymous proxy server
C. Reverse proxy server
D. Tunneling proxy server
Answer: A

EC-COUNCIL examen   ECSS   ECSS

NO.11 Kerberos is a computer network authentication protocol that allows individuals communicating over a
non-secure network to prove their identity to one another in a secure manner. Which of the following
statements are true about the Kerberos authentication scheme?
Each correct answer represents a complete solution. Choose all that apply.
A. Kerberos requires continuous availability of a central server.
B. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
C. Dictionary and brute force attacks on the initial TGS response to a client may reveal the
subject'spasswords.
D. Kerberos requires the clocks of the involved hosts to be synchronized.
Answer: A,C,D

EC-COUNCIL   ECSS examen   certification ECSS   ECSS

NO.12 John works as an Office Assistant in DataSoft Inc. He has received an e-mail from
duesoft_lotterygroup@us.com with the following message:
The DueSoft Lottery Incorporation
This is to inform you that you have just won a prize of $7,500.00 for this year's Annual Lottery promotion,
which was organized by Msn/Yahoo Lottery in conjunction with DueSoft. We collect active online e-mails
and select five people every year as our winners through an electronic balloting machine. Please reply
within three days of receiving this e-mail with your full details like Name, Address, Sex, Occupation, Age,
State, Telephone number, and Country to claim your prize.
If John replies to this e-mail, which of the following attacks may he become vulnerable to?
A. Salami attack
B. Man-in-the-Middle attack
C. Phishing attack
D. DoS attack
Answer: C

EC-COUNCIL examen   ECSS examen   ECSS examen

NO.13 Which of the following is the first computer virus that was used to infect the boot sector of storage
media formatted with the DOS File Allocation Table (FAT) file system?
A. I love you
B. Melissa
C. Tequila
D. Brain
Answer: D

EC-COUNCIL   ECSS   ECSS   ECSS examen

NO.14 You have just set up a wireless network for customers at a coffee shop. Which of the following are
good security measures to implement?
Each correct answer represents a complete solution. Choose two.
A. Using WEP encryption
B. Using WPA encryption
C. Not broadcasting SSID
D. MAC filtering the router
Answer: A,B

EC-COUNCIL   ECSS   ECSS

NO.15 You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless
network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring
ISA Server 2006, which of the following is NOT necessary?
A. Defining how ISA Server would cache Web contents
B. Defining ISA Server network configuration
C. Setting up of monitoring on ISA Server
D. Configuration of VPN access
Answer: D

certification EC-COUNCIL   ECSS examen   certification ECSS   ECSS examen

NO.16 Which of the following OSI layers is responsible for protocol conversion, data encryption/decryption,
and data compression?
A. Transport layer
B. Presentation layer
C. Data-link layer
D. Network layer
Answer: B

certification EC-COUNCIL   ECSS examen   ECSS examen   ECSS   ECSS   ECSS

NO.17 Which of the following types of attacks cannot be prevented by technical measures only?
A. Brute force
B. Ping flood attack
C. Smurf DoS
D. Social engineering
Answer: D

EC-COUNCIL examen   ECSS examen   ECSS examen

NO.18 Which of the following attacks CANNOT be detected by an Intrusion Detection System (IDS)?
Each correct answer represents a complete solution. Choose all that apply.
A. Denial-of-Service (DoS) attack
B. E-mail spoofing
C. Port scan attack
D. Shoulder surfing
Answer: B,D

EC-COUNCIL   ECSS examen   ECSS   ECSS   certification ECSS   certification ECSS

NO.19 Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.
A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic
will follow.
B. Routers do not limit physical broadcast traffic.
C. Routers organize addresses into classes, which are used to determine how to move packets fromone
network to another.
D. Routers act as protocol translators and bind dissimilar networks.
Answer: A,C,D

EC-COUNCIL   ECSS examen   ECSS   ECSS examen

NO.20 Which of the following security policies will you implement to keep safe your data when you connect
your Laptop to the office network over IEEE 802.11 WLANs?
Each correct answer represents a complete solution. Choose two.
A. Using a protocol analyzer on your Laptop to monitor for risks.
B. Using an IPSec enabled VPN for remote connectivity.
C. Using portscanner like nmap in your network.
D. Using personal firewall software on your Laptop.
Answer: B,D

EC-COUNCIL   ECSS examen   ECSS examen

Il y a beaucoup de gans ambitieux dansn l'Industrie IT. Pour monter à une autre hauteur dans la carrière, et être plus proche du pic de l'Industrie IT. On peut choisir le test EC-COUNCIL ECSS à se preuver. Mais le taux du succès et bien bas. Participer le test EC-COUNCIL ECSS est un choix intelligent. Dans l'Industrie IT de plus en plus intense, on doit trouver une façon à s'améliorer. Vous pouvez chercher plusieurs façons à vous aider pour réussir le test.

Pass4Test offre une formation sur EC-COUNCIL 312-49v8 matériaux examen

Pass4Test a de formations plus nouvelles pour le test EC-COUNCIL 312-49v8. Les experts dans l'industrie IT de Pass4Test profitant leurs expériences et connaissances professionnelles à lancer les Q&As plus chaudes pour faciliter la préparation du test EC-COUNCIL 312-49v8 à tous les candidats qui nous choisissent. L'importance de Certification EC-COUNCIL 312-49v8 est de plus en plus claire, c'est aussi pourquoi il y a de plus en plus de gens qui ont envie de participer ce test. Parmi tous ces candidats, pas mal de gens ont réussi grâce à Pass4Test. Ces feedbacks peuvent bien prouver nos produits essentiels pour votre réussite de test Certification.

Pass4Test vous promet de vous aider à passer le test EC-COUNCIL 312-49v8, vous pouvez télécharger maintenant les Q&As partielles de test EC-COUNCIL 312-49v8 en ligne. Il y a encore la mise à jour gratuite pendant un an pour vous. Si vous malheureusement rater le test, votre argent sera 100% rendu.

Code d'Examen: 312-49v8
Nom d'Examen: EC-COUNCIL (Computer Hacking Forensic Investigator Exam)
Questions et réponses: 180 Q&As

Dans l'Industrie IT, le certificat IT peut vous permet d'une space plus grande de se promouvoir. Généralement, la promotion de l'entreprise repose sur ce que vous avec la certification. Le Certificat EC-COUNCIL 312-49v8 est bien autorisé. Avec le certificat EC-COUNCIL 312-49v8, vous aurez une meilleure carrière dans le future. Vous pouvez télécharger tout d'abord la partie gratuite de Q&A EC-COUNCIL 312-49v8.

Selon les feedbacks les professionnels bien réputés dans l'Industrie IT, Pass4Test est un bon catalyseur de leurs succès. L'outil de formation offert par Pass4Test leur aide d'économiser le temps et l'argent, le plus important est qu'ils aient passé le test EC-COUNCIL 312-49v8 avec succès. Pass4Test est un fournissur fiable. Vous allez réaliser votre rêve avec l'aide de Pass4Test.

Votre vie changera beaucoup après d'obtenir le Certificat de EC-COUNCIL 312-49v8. Tout va améliorer, la vie, le boulot, etc. Après tout, EC-COUNCIL 312-49v8 est un test très important dans la série de test Certification EC-COUNCIL. Mais c'est pas facile à réussir le test EC-COUNCIL 312-49v8.

Selon les feedbacks offerts par les candidats, c'est facile à réussir le test EC-COUNCIL 312-49v8 avec l'aide de la Q&A de Pass4Test qui est recherché particulièrement pour le test Certification EC-COUNCIL 312-49v8. C'est une bonne preuve que notre produit est bien effective. Le produit de Pass4Test peut vous aider à renforcer les connaissances demandées par le test EC-COUNCIL 312-49v8, vous aurez une meilleure préparation avec l'aide de Pass4Test.

Vous pouvez télécharger le démo gratuit pour prendre un essai. Vous aurez plus confiance sur Pass4Test. N'hésitez plus à choisir la Q&A EC-COUNCIL 312-49v8 comme votre guide d'étude.

312-49v8 Démo gratuit à télécharger: http://www.pass4test.fr/312-49v8.html

NO.1 Which of the following statements is not a part of securing and evaluating electronic crime
scene
checklist?
A. Locate and help the victim
B. Transmit additional flash messages to other responding units
C. Request additional help at the scene if needed
D. Blog about the incident on the internet
Answer: D

EC-COUNCIL   certification 312-49v8   312-49v8   312-49v8

NO.2 Computer forensics report provides detailed information on complete computer forensics
investigation process. It should explain how the incident occurred, provide technical details of the
incident and should be clear to understand. Which of the following attributes of a forensics report
can render it inadmissible in a court of law?
A. It includes metadata about the incident
B. It includes relevant extracts referred to In the report that support analysis or conclusions
C. It is based on logical assumptions about the incident timeline
D. It maintains a single document style throughout the text
Answer: C

certification EC-COUNCIL   312-49v8 examen   312-49v8 examen   312-49v8

NO.3 Networks are vulnerable to an attack which occurs due to overextension of bandwidth,
bottlenecks, network data interception, etc.
Which of the following network attacks refers to a process in which an attacker changes his or her
IP address so that he or she appears to be someone else?
A. IP address spoofing
B. Man-in-the-middle attack
C. Denial of Service attack
D. Session sniffing
Answer: A

EC-COUNCIL   312-49v8 examen   312-49v8

NO.4 When collecting electronic evidence at the crime scene, the collection should proceed from
the
most volatile to the least volatile
A. True
B. False
Answer: A

certification EC-COUNCIL   312-49v8   312-49v8   312-49v8   certification 312-49v8

NO.5 Which of the following Wi-Fi chalking methods refers to drawing symbols in public places to
advertise open Wi-Fi networks?
A. WarWalking
B. WarFlying
C. WarChalking
D. WarDhving
Answer: C

certification EC-COUNCIL   312-49v8   certification 312-49v8

Il y a plusieurs de façons pour réussir le test EC-COUNCIL 312-49v8, vous pouvez travailler dur et dépenser beaucoup d'argents, ou vous pouvez travailler plus efficacement avec moins temps dépensés.

2014年1月5日星期日

Dernières EC-COUNCIL EC0-350 de la pratique de l'examen questions et réponses téléchargement gratuit

Être un travailleur IT, est-ce que vous vous souciez encore pour passer le test Certificat IT? Le test examiner les techniques et connaissances professionnelles, donc c'est pas facile à réussir. Pour les candidats qui participent le test à la première fois, une bonne formation est très importante. Pass4Test offre les outils de formation particulier au test et bien proche de test réel, n'hésitez plus d'ajouter la Q&A au panier.

Pass4Test vous promet de vous aider à passer le test EC-COUNCIL EC0-350, vous pouvez télécharger maintenant les Q&As partielles de test EC-COUNCIL EC0-350 en ligne. Il y a encore la mise à jour gratuite pendant un an pour vous. Si vous malheureusement rater le test, votre argent sera 100% rendu.

Le produit de Pass4Test peut assurer les candidats à réussir le test EC-COUNCIL EC0-350 à la première fois, mais aussi offrir la mise à jour gratuite pendant un an, les clients peuvent recevoir les ressources plus nouvelles. Pass4Test n'est pas seulement un site, mais aussi un bon centre de service.

Pass4Test provide non seulement le produit de qualité, mais aussi le bon service. Si malheureusement vous ne pouvez pas réussir le test, votre argent sera tout rendu. Le service de la mise à jour gratuite est aussi pour vous bien que vous passiez le test Certification.

La Q&A de Pass4Test vise au test Certificat EC-COUNCIL EC0-350. L'outil de formation EC-COUNCIL EC0-350 offert par Pass4Test comprend les exercices de pratique et le test simulation. Vous pouvez trouver les autres sites de provider la Q&A, en fait vous allez découvrir que c'est l'outil de formation de Pass4Test qui offre les documentaions plus compètes et avec une meilleure qualité.

Les experts de Pass4Test ont fait sortir un nouveau guide d'étude de Certification EC-COUNCIL EC0-350, avec ce guide d'étude, réussir ce test a devenu une chose pas difficile. Pass4Test vous permet à réussir 100% le test EC-COUNCIL EC0-350 à la première fois. Les questions et réponses vont apparaître dans le test réel. Pass4Test peut vous donner une Q&A plus complète une fois que vous choisissez nous. D'ailleurs, la mise à jour gratuite pendant un an est aussi disponible pour vous.

Code d'Examen: EC0-350
Nom d'Examen: EC-COUNCIL (Ethical hacking and countermeasures)
Questions et réponses: 878 Q&As

EC0-350 Démo gratuit à télécharger: http://www.pass4test.fr/EC0-350.html

NO.1 Samantha has been actively scanning the client network for which she is doing a vulnerability
assessment test. While doing a port scan she notices ports open in the 135 to 139 range. What
protocol is most likely to be listening on those ports?
A.FTP
B.SMB
C.Finger
D.Samba
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.2 Eric notices repeated probes to port 1080. He learns that the protocol being used is designed to
allow a host outside of a firewall to connect transparently and securely through the firewall. He
wonders if his firewall has been breached. What would be your inference?
A.Eric's network has been penetrated by a firewall breach
B.The attacker is using the ICMP protocol to have a covert channel
C.Eric has a Wingate package providing FTP redirection on his network
D.Somebody is using SOCKS on the network to communicate through the firewall
Correct:D

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.3 Travis works primarily from home as a medical transcriptionist. He just bought a brand new
Dual Core Pentium computer with over 3 GB of RAM. He uses voice recognition software to help
him transfer what he dictates to electronic documents. The voice recognition software is
processor intensive, which is why he bought the new computer. Travis frequently has to get on
the Internet to do research on what he is working on. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Travis uses antivirus
software, anti-spyware software, and always keeps the computer up-to-date with Microsoft
patches. After another month of working on the computer, Travis' computer is even more
noticeably slow. Every once in awhile, Travis also notices a window or two pop-up on his screen,
but they quickly disappear.He has seen these windows show up, even when he has not been on
the Internet. Travis is really worried about his computer because he spent a lot of money on it, and
he depends on it to work. Travis scans his computer with all kinds of software, and cannot find
anything out of the ordinary. Travis decides to go through Windows Explorer and check out the
file system, folder by folder, to see if there is anything he can find. He spends over four hours
pouring over the files and folders and cannot find anything.But, before he gives up, he notices
that his computer only has about 10 GB of free space available.Since his hard drive is a 200 GB
hard drive, Travis thinks this is very odd. Travis downloads Space Monger and adds up the sizes
for all the folders and files on his computer. According to his calculations, he should have around
150 GB of free space. What is mostly likely the cause of Travis' problems?
A.Travis's computer is infected with stealth kernel level rootkit
B.Travis's computer is infected with Stealth Trojan Virus
C.Travis's computer is infected with Self-Replication Worm that fills the hard disk space
D.Logic Bomb is triggered at random times creating hidden data consuming junk files
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.4 A client has approached you with a penetration test requirement. They are concerned with the
possibility of external threat, and have invested considerable resources in protecting their
Internet exposure. However, their main concern is the possibility of an employee elevating his/her
privileges and gaining access to information outside of their department. What kind of penetration
test would you recommend that would best address the client's concern?
A.A Grey Hat test
B.A Grey Box test
C.A Black Hat test
D.A White Hat test
E.A Black Box test
F.A White Box test
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.5 Bill has started to notice some slowness on his network when trying to update his company's
website and while trying to access the website from the Internet. Bill asks the help desk manager
if he has received any calls about slowness from the end users, but the help desk manager says
that he has not. Bill receives a number of calls from customers that cannot access the company
website and cannot purchase anything online. Bill logs on to a couple of his routers and notices
that the logs show network traffic is at an all time high.?He also notices that almost all the traffic
is originating from a specific address. Bill decides to use Geotrace to find out where the suspect
IP is originates from. The Geotrace utility runs a traceroute and finds that the IP is coming from
Panama.?Bill knows that none of his customers are in Panama so he immediately thinks that his
company is under a Denial of Service attack. Now Bill needs to find out more about the originating
IP address. What Internet registry should Bill look in to find the IP address?
A.LACNIC
B.ARIN
C.RIPE LACNIC
D.APNIC
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.6 Maurine is working as a security consultant for Hinklemeir Associates.She has asked the
Systems Administrator to create a group policy that would not allow null sessions on the network.
The Systems Administrator is fresh out of college and has never heard of null sessions and does
not know what they are used for. Maurine is trying to explain to the Systems Administrator that
hackers will try to create a null session when footprinting the network. Why would an attacker try
to create a null session with a computer on a network?
A.Enumerate users and shares
B.Install a backdoor for later attacks
C.Escalate his/her privileges on the target server
D.To create a user with administrative privileges for later use
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.7 Clive is conducting a pen-test and has just port scanned a system on the network. He has
identified the operating system as Linux and been able to elicit responses from ports 23, 25 and
53. He infers port 23 as running Telnet service, port 25 as running SMTP service and port 53 as
running DNS service. The client confirms these findings and attests to the current availability of
the services. When he tries to telnet to port 23 or 25, he gets a blank screen in response. On
typing other commands, he sees only blank spaces or underscores symbols on the screen. What
are you most likely to infer from this?
A.The services are protected by TCP wrappers
B.There is a honeypot running on the scanned machine
C.An attacker has replaced the services with trojaned ones
D.This indicates that the telnet and SMTP server have crashed
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.8 What is the purpose of firewalking?
A.It's a technique used to map routers on a network link
B.It's a technique used to discover Wireless network on foot
C.It's a technique used to discover interface in promiscuous mode
D.It's a technique used to discover what rules are configured on a gateway
Correct:D

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.9 Which programming language is NOT vulnerable to buffer overflow attacks?
A.Java
B.ActiveX
C.C++
D.Assembly Language
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.10 Mark works as a contractor for the Department of Defense and is in charge of network security.
He has spent the last month securing access to his network from all possible entry points. He has
segmented his network into several subnets and has installed firewalls all over the network. He
has placed very stringent rules on all the firewalls, blocking everything in and out except ports
that must be used. He does need to have port 80 open since his company hosts a website that
must be accessed from the Internet. Mark is fairly confident of his perimeter defenses, but is still
worried about programs like Hping2 that can get into a network through covert channels. How
should mark protect his network from an attacker using Hping2 to scan his internal network?
A.Block ICMP type 13 messages
B.Block all incoming traffic on port 53
C.Block all outgoing traffic on port 53
D.Use stateful inspection on the firewalls
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.11 What file system vulnerability does the following command take advantage of? type
c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe
A.HFS
B.ADS
C.NTFS
D.Backdoor access
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.12 After a client sends a connection request (SYN) packet to the server, the server will respond
(SYN-ACK) with a sequence number of its choosing, which then must be acknowledged (ACK) by
the client. This sequence number is predictable; the attack connects to a service first with its own
IP address, records the sequence number chosen, and then opens a second connection from a
forged IP address. The attack doesn't see the SYN-ACK (or any other packet) from the server, but
can guess the correct responses. If the source IP address is used for authentication, then the
attacker can use the one-sided communication to break into the server. What attacks can you
successfully launch against a server using the above technique?
A.Session Hijacking attacks
B.Denial of Service attacks
C.Web page defacement attacks
D.IP spoofing attacks
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.13 Lori has just been tasked by her supervisor toonduct vulnerability scan on the corporate
network.She has been instructed to perform a very thorough test of the network to ensure that
there are no security holes on any of the machines.Lori's company does not own any commercial
scanning products, so she decides to download a free one off the Internet.Lori has never done a
vulnerability scan before, so she is unsure of some of the settings available in the software she
downloaded.One of the options is to choose which ports that can be scanned.Lori wants to do
exactly what her boss has told her, but she does not know what ports should be scanned. If Lori is
supposed to scan all known TCP ports, how many ports should she select in the software?
A.65536
B.1024
C.1025
D.Lori should not scan TCP ports, only UDP ports
Correct:A

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.14 Bill has successfully executed a buffer overflow against a Windows IIS web server. He has been
able to spawn an interactive shell and plans to deface the main web page. He first attempts to use
the "Echo" command to simply overwrite index.html and remains unsuccessful. He then attempts
to delete the page and achieves no progress. Finally, he tries to overwrite it with another page in
which also he remains unsuccessful. What is the probable cause of Bill's problem?
A.The system is a honeypot
B.The HTML file has permissions of read only
C.You cannot use a buffer overflow to deface a web page
D.There is a problem with the shell and he needs to run the attack again
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.15 Bob is acknowledged as a hacker of repute and is popular among visitors of 'underground' sites.
Bob is willing to share his knowledge to those who are willing to learn, and many have expressed
their interest in learning from him. However, this knowledge has risks associated with it, as the
same knowledge can be used for malevolent attacks as well. In this context, what would be the
most effective method to bridge the knowledge gap between the "black" hats or crackers and the
"white" hats or computer security professionals?
A.Hire more computer security monitoring personnel to monitor computer systems and networks
B.Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards
C.Train more national guard and reservist in the art of computer security to help out in times of emergency
or crises
D.Make obtaining either a computer security certification or accreditation easier to achieve so more
individuals feel that they are a part of something larger than life
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.16 Which of the following built-in C/C++ functions you should avoid to prevent your program from
buffer overflow attacks?
A.strcpy()
B.strcat()
C.streadd()
D.strsock()
Correct:A B C

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.17 Samuel is the network administrator of DataX Communications, Inc. He is trying to configure his
firewall to block password brute force attempts on his network. He enables blocking the intruder's
IP address for a period of 24 hours time after more than three unsuccessful attempts. He is
confident that this rule will secure his network from hackers on the Internet. But he still receives
hundreds of thousands brute-force attempts generated from various IP addresses around the
world. After some investigation he realizes that the intruders are using a proxy somewhere else
on the Internet which has been scripted to enable the random usage of various proxies on each
request so as not to get caught by the firewall rule. Later he adds another rule to his firewall and
enables small sleep on the password attempt so that if the password is incorrect, it would take 45
seconds to return to the user to begin another attempt. Since an intruder may use multiple
machines to brute force the password, he also throttles the number of connections that will be
prepared to accept from a particular IP address. This action will slow the intruder's attempts.
Samuel wants to completely block hackers brute force attempts on his network. What are the
alternatives to defending against possible brute-force password attacks on his site?
A.Enforce a password policy and use account lockouts after three wrong logon attempts even though this
might lock out legit users
B.Enable the IDS to monitor the intrusion attempts and alert you by e-mail about the IP address of the
intruder so that you can block them at the Firewall manually
C.Enforce complex password policy on your network so that passwords are more difficult to brute force
D.You cannot completely block the intruders attempt if they constantly switch proxies
Correct:D

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.18 Why is Social Engineering considered attractive by hackers and commonly done by experts in
the field?
A.It is not considered illegal
B.It is done by well-known hackers
C.It is easy and extremely effective to gain information
D.It does not require a computer in order to commit a crime
Correct:C

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.19 A program that defends against a port scanner will attempt to:
A.Sends back bogus data to the port scanner
B.Log a violation and recommend use of security-auditing tools
C.Limit access by the scanning system to publicly available ports only
D.Update a firewall rule in real time to prevent the port scan from being completed
Correct:D

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

NO.20 What type of port scan is shown below? Scan directed at open port: ClientServer
192.5.2.92:4079 ---------FIN--------->192.5.2.110:23 192.5.2.92:4079 <----NO
RESPONSE------192.5.2.110:23 Scan directed at closed port: ClientServer 192.5.2.92:4079
---------FIN--------->192.5.2.110:23 192.5.2.92:4079<-----RST/ACK----------192.5.2.110:23
A.Idle Scan
B.FIN Scan
C.XMAS Scan
D.Windows Scan
Correct:B

EC-COUNCIL   EC0-350 examen   EC0-350 examen   EC0-350   EC0-350

Pass4Test a une grande équipe composée des experts d'expérience dans l'industrie IT. Leurs connaissances professionnelles et les recherches font une bonne Q&A, qui vous permet à passer le test EC-COUNCIL EC0-350. Dans Pass4Test, vous pouvez trouver une façon plus convenable à se former. Les resources de Pass4Test sont bien fiable. Choisissez Pass4Test, choisissez un raccourci à réussir le test EC-COUNCIL EC0-350.

Le meilleur matériel de formation examen EC-COUNCIL ECSS

Si vous choisissez notre l'outil formation, Pass4Test peut vous assurer le succès 100% du test EC-COUNCIL ECSS. Votre argent sera tout rendu si vous échouez le test.

On peut télécharger quelques parties de Q&A gratuites dans le site Pass4Test à propos de test Certification EC-COUNCIL ECSS. Vous pouvez tester notre fiabilité via le démo. Choisir Pass4Test, c'est-à-dire que vous êtes proche d'un pic ensuite de l'Industrie IT.

Code d'Examen: ECSS
Nom d'Examen: EC-COUNCIL (EC-Council Certified Security Specialist Practice Test)
Questions et réponses: 337 Q&As

Est-que vous s'inquiétez encore à passer le test Certification ECSS qui demande beaucoup d'efforts? Est-que vous travaillez nuit et jour juste pour préparer le test de EC-COUNCIL ECSS? Si vous voulez réussir le test EC-COUNCIL ECSS plus facilement? N'hésitez plus à nous choisir. Pass4Test vous aidera à réaliser votre rêve.

Le test Certification EC-COUNCIL ECSS est une chance précieuse à augmenter vos connaissances de technologie informatique dans l'industrie IT. Il attire beaucoup de professionls à participer ce test. Pass4Test peut vous offrir les outils de formation particuliers à propos de test EC-COUNCIL ECSS. Vous réaliserez plus tôt votre rêve avec la Q&A écrite par l'équipe professionnelle de Pass4Test. Pass4Test se contribue à vous donner un coup de main pour réussir le test EC-COUNCIL ECSS.

ECSS Démo gratuit à télécharger: http://www.pass4test.fr/ECSS.html

NO.1 Which of the following needs to be documented to preserve evidences for presentation in court?
A. Incident response policy
B. Account lockout policy
C. Separation of duties
D. Chain of custody
Answer: D

EC-COUNCIL   certification ECSS   ECSS examen   ECSS examen   certification ECSS

NO.2 Which of the following attacks CANNOT be detected by an Intrusion Detection System (IDS)?
Each correct answer represents a complete solution. Choose all that apply.
A. Denial-of-Service (DoS) attack
B. E-mail spoofing
C. Port scan attack
D. Shoulder surfing
Answer: B,D

EC-COUNCIL   certification ECSS   certification ECSS   ECSS examen   ECSS

NO.3 Which of the following OSI layers is responsible for protocol conversion, data encryption/decryption,
and data compression?
A. Transport layer
B. Presentation layer
C. Data-link layer
D. Network layer
Answer: B

EC-COUNCIL   certification ECSS   ECSS examen

NO.4 Which of the following is the first computer virus that was used to infect the boot sector of storage
media formatted with the DOS File Allocation Table (FAT) file system?
A. I love you
B. Melissa
C. Tequila
D. Brain
Answer: D

certification EC-COUNCIL   ECSS   ECSS   ECSS examen

NO.5 Which of the following statements best describes a certification authority?
A. A certification authority is a type of encryption that uses a public key and a private key pair fordata
encryption.
B. A certification authority is an entity that issues digital certificates for use by other parties.
C. A certification authority is a technique to authenticate digital documents by using
computercryptography.
D. A certification authority is a type of encryption that uses a single key to encrypt and decryp t data.
Answer: B

EC-COUNCIL examen   ECSS   ECSS

NO.6 Which of the following security policies will you implement to keep safe your data when you connect
your Laptop to the office network over IEEE 802.11 WLANs?
Each correct answer represents a complete solution. Choose two.
A. Using a protocol analyzer on your Laptop to monitor for risks.
B. Using an IPSec enabled VPN for remote connectivity.
C. Using portscanner like nmap in your network.
D. Using personal firewall software on your Laptop.
Answer: B,D

EC-COUNCIL   ECSS   ECSS   ECSS examen

NO.7 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of
the tool is as follows:
Which of the following tools is John using to crack the wireless encryption keys?
A. AirSnort
B. Kismet
C. PsPasswd
D. Cain
Answer: A

certification EC-COUNCIL   ECSS   certification ECSS

NO.8 Which of the following security protocols are based on the 802.11i standard.?
Each correct answer represents a complete solution. Choose all that apply.
A. WEP
B. WPA2
C. WPA
D. WEP2
Answer: B,C

EC-COUNCIL   ECSS   certification ECSS

NO.9 You have just set up a wireless network for customers at a coffee shop. Which of the following are
good security measures to implement?
Each correct answer represents a complete solution. Choose two.
A. Using WEP encryption
B. Using WPA encryption
C. Not broadcasting SSID
D. MAC filtering the router
Answer: A,B

EC-COUNCIL   certification ECSS   ECSS examen

NO.10 Which of the following types of attacks cannot be prevented by technical measures only?
A. Brute force
B. Ping flood attack
C. Smurf DoS
D. Social engineering
Answer: D

EC-COUNCIL examen   ECSS   certification ECSS   ECSS examen

NO.11 Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.
A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic
will follow.
B. Routers do not limit physical broadcast traffic.
C. Routers organize addresses into classes, which are used to determine how to move packets fromone
network to another.
D. Routers act as protocol translators and bind dissimilar networks.
Answer: A,C,D

EC-COUNCIL   certification ECSS   ECSS   ECSS   certification ECSS

NO.12 John works as an Office Assistant in DataSoft Inc. He has received an e-mail from
duesoft_lotterygroup@us.com with the following message:
The DueSoft Lottery Incorporation
This is to inform you that you have just won a prize of $7,500.00 for this year's Annual Lottery promotion,
which was organized by Msn/Yahoo Lottery in conjunction with DueSoft. We collect active online e-mails
and select five people every year as our winners through an electronic balloting machine. Please reply
within three days of receiving this e-mail with your full details like Name, Address, Sex, Occupation, Age,
State, Telephone number, and Country to claim your prize.
If John replies to this e-mail, which of the following attacks may he become vulnerable to?
A. Salami attack
B. Man-in-the-Middle attack
C. Phishing attack
D. DoS attack
Answer: C

EC-COUNCIL   ECSS examen   ECSS   ECSS examen

NO.13 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Intercepting proxy server
B. Anonymous proxy server
C. Reverse proxy server
D. Tunneling proxy server
Answer: A

certification EC-COUNCIL   ECSS examen   ECSS   certification ECSS

NO.14 Linux traffic monitoring tools are used to monitor and quickly detect faults in the network or a system.
Which of the following tools are used to monitor traffic of the Linux operating system?
Each correct answer represents a complete solution. Choose all that apply.
A. PsExec
B. IPTraf
C. MRTG
D. PsLogList
E. Ntop
Answer: B,C,E

certification EC-COUNCIL   certification ECSS   ECSS examen   ECSS examen

NO.15 Kerberos is a computer network authentication protocol that allows individuals communicating over a
non-secure network to prove their identity to one another in a secure manner. Which of the following
statements are true about the Kerberos authentication scheme?
Each correct answer represents a complete solution. Choose all that apply.
A. Kerberos requires continuous availability of a central server.
B. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
C. Dictionary and brute force attacks on the initial TGS response to a client may reveal the
subject'spasswords.
D. Kerberos requires the clocks of the involved hosts to be synchronized.
Answer: A,C,D

EC-COUNCIL   certification ECSS   ECSS examen

NO.16 Which of the following representatives of incident response team takes forensic backups of the systems
that are the focus of the incident?
A. Lead investigator
B. Information security representative
C. Technical representative
D. Legal representative
Answer: C

EC-COUNCIL   certification ECSS   ECSS examen   ECSS examen

NO.17 Fill in the blank with the appropriate word ___is software that is a subcategory of malware and refers to
unwanted software that performs malicious actions on a user's computer. Some its examples are Trojan,
adware, and spyware.
A. Crimeware
Answer: A

EC-COUNCIL   ECSS   certification ECSS

NO.18 Firewalking is a technique that can be used to gather information about a remote network protected by a
firewall. This technique can be used effectively to perform information gathering attacks. In this technique,
an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which
of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
A. ICMP packets leaving the network should be allowed.
B. An attacker should know the IP address of the last known gateway before the firewall.
C. There should be a backdoor installed on the network.
D. An attacker should know the IP address of a host located behind the firewall.
Answer: A,B,D

EC-COUNCIL   ECSS   ECSS   certification ECSS

NO.19 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Vulnerability scanning
B. Manual penetration testing
C. Automated penetration testing
D. Code review
Answer: A

EC-COUNCIL   ECSS   ECSS   ECSS examen

NO.20 You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless
network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring
ISA Server 2006, which of the following is NOT necessary?
A. Defining how ISA Server would cache Web contents
B. Defining ISA Server network configuration
C. Setting up of monitoring on ISA Server
D. Configuration of VPN access
Answer: D

EC-COUNCIL examen   ECSS   certification ECSS

Pass4Test a capacité d'économiser vos temps et de vous faire plus confiant à réussir le test. Vous pouvez télécharger le démo EC-COUNCIL ECSS gratuit à connaître mieux la bonne fiabilité de Pass4Test. Nous nous font toujours confiant sur nos produits, et vous aussi dans un temps proche. La réussite de test EC-COUNCIL ECSS n'est pas loin de vous une fois que vous choisissez le produit de Pass4Test. C'est un choix élégant pour vous faciliter à réussir le test EC-COUNCIL ECSS.

2013年9月19日星期四

Dernières EC-COUNCIL 312-76 de la pratique de l'examen questions et réponses téléchargement gratuit

Quand vous hésitez même à choisir Pass4Test, le démo gratuit dans le site Pass4Test est disponible pour vous à essayer avant d'acheter. Nos démos vous feront confiant à choisir Pass4Test. Pass4Test est votre meilleur choix à passer l'examen de Certification EC-COUNCIL 312-76, et aussi une meilleure assurance du succès du test 312-76. Vous choisissez Pass4Test, vous choisissez le succès.

Pour l'instant, vous pouvez télécharger le démo gratuit de Q&A EC-COUNCIL 312-76 dans Pass4Test pour se former avant le test EC-COUNCIL 312-76.

Code d'Examen: 312-76
Nom d'Examen: EC-COUNCIL (Disaster Recovery Professional Practice Test)
Questions et réponses: 290 Q&As

Pass4Test vous promet de vous aider à passer le test EC-COUNCIL 312-76, vous pouvez télécharger maintenant les Q&As partielles de test EC-COUNCIL 312-76 en ligne. Il y a encore la mise à jour gratuite pendant un an pour vous. Si vous malheureusement rater le test, votre argent sera 100% rendu.

La partie plus nouvelle de test Certification EC-COUNCIL 312-76 est disponible à télécharger gratuitement dans le site de Pass4Test. Les exercices de Pass4Test sont bien proches de test réel EC-COUNCIL 312-76. En comparaison les Q&As dans les autres sites, vous trouverez que les nôtres sont beaucoup plus complets. Les Q&As de Pass4Test sont tout recherchés par les experts de Pass4Test, y compris le test simulation.

Si vous voulez se prouver une compétition et s'enraciner le statut dans l'industrie IT à travers de test Certification EC-COUNCIL 312-76, c'est obligatoire que vous devez avior les connaissances professionnelles. Mais il demande pas mal de travaux à passer le test Certification EC-COUNCIL 312-76. Peut-être d'obtenir le Certificat EC-COUNCIL 312-76 peut promouvoir le tremplin vers l'Industrie IT, mais vous n'avez pas besoin de travailler autant dur à préparer le test. Vous avez un autre choix à faire toutes les choses plus facile : prendre le produit de Pass4Test comme vos matériaux avec qui vous vous pratiquez avant le test réel. La Q&A de Pass4Test est recherchée particulièrement pour le test IT.

Pass4Test vous permet à réussir le test Certification sans beaucoup d'argents et de temps dépensés. La Q&A EC-COUNCIL 312-76 est recherchée par Pass4Test selon les résumés de test réel auparavant, laquelle est bien liée avec le test réel.

312-76 Démo gratuit à télécharger: http://www.pass4test.fr/312-76.html

NO.1 Pete works as a Network Security Officer for Gentech Inc. He wants to encrypt his network traffic. The
specific requirement for the encryption algorithm is that it must be a symmetric key block cipher. Which of
the following techniques will he use to fulfill this requirement?
A. AES
B. DES
C. IDEA
D. PGP
Answer: B

EC-COUNCIL   312-76   312-76   certification 312-76   312-76

NO.2 Which of the following is the simulation of the disaster recovery plans?
A. Walk-through test
B. Full operational test
C. Paper test
D. Preparedness test
Answer: B

EC-COUNCIL   312-76 examen   312-76 examen   certification 312-76   certification 312-76

NO.3 Which of the following options is an intellectual property right to protect inventions?
A. Snooping
B. Patent
C. Copyright
D. Utility model
Answer: D

EC-COUNCIL   312-76   certification 312-76   312-76 examen

NO.4 Which of the following tools in Helix Windows Live is used to reveal the database password of password
protected MDB files created using Microsoft Access or with Jet Database Engine?
A. Asterisk logger
B. FAU
C. Access Pass View
D. Galleta
Answer: C

certification EC-COUNCIL   312-76 examen   312-76 examen

NO.5 You work as an Incident handling manager for Orangesect Inc. You detect a virus attack incident in the
network of your company. You develop a signature based on the characteristics of the detected virus.
Which of the following phases in the Incident handling process will utilize the signature to resolve this
incident?
A. Eradication
B. Identification
C. Containment
D. Recovery
Answer: A

certification EC-COUNCIL   312-76   312-76 examen   certification 312-76

NO.6 Which of the following response teams aims to foster cooperation and coordination in incident
prevention, to prompt rapid reaction to incidents, and to promote information sharing among members
and the community at large?
A. CERT
B. CSIRT
C. FedCIRC
D. FIRST
Answer: D

EC-COUNCIL   certification 312-76   312-76

NO.7 IT Service Continuity Management (ITSCM) is used to support the overall Business Continuity
Management (BCM) in order to ensure that the required IT infrastructure and the IT service provision are
recovered within an agreed business time scales. Which of the following are the benefits of implementing
IT Service Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. It prioritizes the recovery of IT services by working with BCM and SLM.
B. It minimizes costs related with recovery plans using proper proactive planning and testing.
C. It confirms competence, impartiality, and performance capability of an organization that performs
audits.
D. It minimizes disruption in IT services when it follows a major interruption or disaster.
Answer: A,B,D

EC-COUNCIL   312-76 examen   312-76 examen   312-76 examen   312-76 examen

NO.8 Which of the following statements about disaster recovery plan documentation are true?
Each correct answer represents a complete solution. Choose all that apply.
A. The documentation regarding a disaster recovery plan should be stored in backup tapes.
B. The documentation regarding a disaster recovery plan should be stored in floppy disks.
C. The disaster recovery plan documentation should be stored onsite only.
D. The disaster recovery plan documentation should be stored offsite only.
Answer: A,D

EC-COUNCIL examen   certification 312-76   312-76 examen   certification 312-76   312-76

NO.9 Which of the following is a set of exclusive rights granted by a state to an inventor or his assignee for a
fixed period of time in exchange for the disclosure of an invention?
A. Snooping
B. Patent
C. Utility model
D. Copyright
Answer: B

EC-COUNCIL   312-76 examen   certification 312-76   312-76

NO.10 Mark is the project manager of the HAR Project. The project is scheduled to last for eighteen months
and six months already passed. Management asks Mark that how often the project team is participating in
the risk reassessment of this project. What should Mark tell management if he is following the best
practices for risk management.?
A. At every status meeting of the project team, project risk management is an agenda item.
B. Project risk management happens at every milestone.
C. Project risk management has been concluded with the project planning.
D. Project risk management is scheduled for every month in the 18-month project.
Answer: A

certification EC-COUNCIL   312-76   312-76 examen

NO.11 Which of the following backup sites takes the longest recovery time?
A. Cold backup site
B. Hot backup site
C. Warm backup site
D. Mobile backup site
Answer: A

certification EC-COUNCIL   certification 312-76   certification 312-76   312-76   certification 312-76

NO.12 Fill in the blank with the appropriate number:
RAID-________ is a combination of RAID-1 and RAID-0.
A. 10
Answer: A

EC-COUNCIL   312-76 examen   312-76   312-76 examen

NO.13 Which of the following types of attacks occurs when an attacker successfully inserts an intermediary
software or program between two communicating hosts?
A. Password guessing attack
B. Dictionary attack
C. Man-in-the-middle attack
D. Denial-of-service attack
Answer: C

certification EC-COUNCIL   312-76   312-76 examen

NO.14 Which of the following cryptographic system services assures the receiver that the received message
has not been altered?
A. Authentication
B. Confidentiality
C. Non-repudiation
D. Integrity
Answer: D

EC-COUNCIL   certification 312-76   312-76 examen

NO.15 You work as the project manager for Bluewell Inc. Your project has several risks that will affect several
stakeholder requirements. Which project management plan will define who will be available to share
information on the project risks?
A. Communications Management Plan
B. Resource Management Plan
C. Risk Management Plan
D. Stakeholder management strategy
Answer: A

certification EC-COUNCIL   312-76   312-76   312-76   312-76   312-76

NO.16 Which of the following statements are true about classless routing protocols?
Each correct answer represents a complete solution. Choose two.
A. The same subnet mask is used everywhere on the network.
B. They extend the IP addressing scheme.
C. IGRP is a classless routing protocol.
D. They support VLSM and discontiguous networks.
Answer: B,D

EC-COUNCIL   312-76   312-76

NO.17 Which of the following BCP teams is the first responder and deals with the immediate effects of the
disaster?
A. Emergency management team
B. Damage assessment team
C. Off-site storage team
D. Emergency action team
Answer: D

EC-COUNCIL   certification 312-76   312-76   312-76   312-76

NO.18 Availability Management deals with the day-to-day availability of services. Which of the following takes
over when a 'disaster' situation occurs?
A. Capacity Management
B. Service Level Management
C. Service Continuity Management
D. Service Reporting
Answer: C

certification EC-COUNCIL   312-76 examen   312-76 examen   312-76 examen

NO.19 Which of the following BCP teams is the first responder and deals with the immediate effects of the
disaster?
A. Emergency action team
B. Emergency-management team
C. Damage-assessment team
D. Off-site storage team
Answer: A

EC-COUNCIL   312-76   certification 312-76   312-76   312-76 examen

NO.20 Which of the following roles is responsible for the review and risk analysis of all the contracts on
regular basis?
A. The IT Service Continuity Manager
B. The Configuration Manager
C. The Supplier Manager
D. The Service Catalogue Manager
Answer: C

EC-COUNCIL   312-76   312-76 examen   312-76

NO.21 You are responsible for network and information security at a large hospital. It is a significant concern
that any change to any patient record can be easily traced back to the person who made that change.
What is this called?
A. Availability
B. Non repudiation
C. Confidentiality
D. Data Protection
Answer: B

EC-COUNCIL examen   312-76   312-76

NO.22 Which of the following is the duration of time and a service level within which a business process must
be restored after a disaster in order to avoid unacceptable consequences associated with a break in
business continuity?
A. RTA
B. RPO
C. RCO
D. RTO
Answer: D

certification EC-COUNCIL   312-76 examen   312-76   certification 312-76   312-76   312-76 examen

NO.23 Which of the following levels of RAID provides security features that are availability, enhanced
performance, and fault tolerance?
A. RAID-10
B. RAID-5
C. RAID-0
D. RAID-1
Answer: A

EC-COUNCIL   312-76 examen   312-76

NO.24 You work as a project manager for TYU project. You are planning for risk mitigation. You need to identify
the risks that will need a more in-depth analysis. Which of the following activities will help you in this?
A. Quantitative analysis
B. Estimate activity duration
C. Risk identification
D. Qualitative analysis
Answer: D

EC-COUNCIL   312-76   312-76

NO.25 Which of the following statements best describes the difference between the role of a data owner and
the role of a data custodian?
A. The custodian makes the initial information classification assignments and the operations manager
implements the scheme.
B. The custodian implements the information classification scheme after the initial assignment by the
operations manager.
C. The data custodian implements the information classification scheme after the initial assignment by the
data owner.
D. The data owner implements the information classification scheme after the initial assignment by the
custodian.
Answer: C

certification EC-COUNCIL   312-76   312-76   312-76 examen   312-76

NO.26 Della works as a security manager for SoftTech Inc. She is training some of the newly recruited
personnel in the field of security management. She is giving a tutorial on DRP. She explains that the major
goal of a disaster recovery plan is to provide an organized way to make decisions if a disruptive event
occurs and asks for the other objectives of the DRP. If you are among some of the newly recruited
personnel in SoftTech Inc, what will be your answer for her question?
Each correct answer represents a part of the solution. Choose three.
A. Guarantee the reliability of standby systems through testing and simulation.
B. Protect an organization from major computer services failure.
C. Minimize the risk to the organization from delays in providing services.
D. Maximize the decision-making required by personnel during a disaster.
Answer: A,B,C

EC-COUNCIL   312-76 examen   312-76 examen   312-76 examen   312-76   312-76

NO.27 You work as a Database Administrator for Bluewell Inc. The company has a SQL Server 2005
computer. The company asks you to implement a RAID system to provide fault tolerance to a database.
You want to implement disk mirroring. Which of the following RAID levels will you use to accomplish the
task?
A. RAID-5
B. RAID-0
C. RAID-1
D. RAID-10
Answer: C

certification EC-COUNCIL   certification 312-76   312-76   certification 312-76   312-76 examen

NO.28 Which of the following are some of the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Team members list
C. Risk analysis
D. Project schedule
Answer: A,B,C,D

EC-COUNCIL   certification 312-76   312-76 examen   certification 312-76   312-76 examen

NO.29 Which of the following is established during the Business Impact Analysis by the owner of a process in
accepted business continuity planning methodology?
A. Recovery Consistency Objective
B. Recovery Time Objective
C. Recovery Point Objective
D. Recovery Time Actual
Answer: B

EC-COUNCIL   312-76   312-76   312-76

NO.30 Which of the following control measures are considered while creating a disaster recovery plan?
Each correct answer represents a part of the solution. Choose three.
A. Detective measures
B. Supportive measures
C. Corrective measures
D. Preventive measures
Answer: A,C,D

certification EC-COUNCIL   312-76   312-76   certification 312-76

Pass4Test est un site à offrir particulièrement la Q&A EC-COUNCIL 312-76, vous pouvez non seulement aprrendre plus de connaissances professionnelles, et encore obtenir le Passport de Certification EC-COUNCIL 312-76, et trouver un meilleur travail plus tard. Les documentations offertes par Pass4Test sont tout étudiés par les experts de Pass4Test en profitant leurs connaissances et expériences, ces Q&As sont impresionnées par une bonne qualité. Il ne faut que choisir Pass4Test, vous pouvez non seulement passer le test EC-COUNCIL 312-76 et même se renforcer vos connaissances professionnelles IT.