412-79v8

412-79v8 practice questions, page 2 of 8, with answer review and explanations.

Question 6

Which of the following appendices gives detailed lists of all the technical terms used in the report?

  1. Required Work Efforts
  2. References
  3. Research
  4. Glossary

Question 7

An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet. The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker. During external penetration testing, which of the following scanning techniques allow you to determine a ports state without making a full connection to the host?

  1. XMAS Scan
  2. SYN scan
  3. FIN Scan
  4. NULL Scan

Question 8

Passwords protect computer resources and files from unauthorized access by malicious users. Using passwords is the most capable and effective way to protect information and to increase the security level of a company. Password cracking is the process of recovering passwords from data that have been stored in or transmitted by a computer system to gain unauthorized access to a system. Which of the following password cracking attacks tries every combination of characters until the password is broken?

  1. Brute-force attack
  2. Rule-based attack
  3. Hybrid attack
  4. Dictionary attack

Question 9

Rules of Engagement (ROE) document provides certain rights and restriction to the test team for performing the test and helps testers to overcome legal, federal, and policy-related restrictions to use different penetration testing tools and techniques. What is the last step in preparing a Rules of Engagement (ROE) document?

  1. Conduct a brainstorming session with top management and technical teams
  2. Decide the desired depth for penetration testing
  3. Conduct a brainstorming session with top management and technical teams
  4. Have pre-contract discussions with different pen-testers

Question 10

Which of the following is a framework of open standards developed by the Internet Engineering Task Force (IETF) that provides secure transmission of the sensitive data over an unprotected medium, such as the Internet?

  1. DNSSEC
  2. Netsec
  3. IKE
  4. IPsec