Free EC-COUNCIL 412-79v9 Exam Dumps Questions & Answers

Which type of security policy applies to the below configuration?
i)Provides maximum security while allowing known, but necessary, dangers
ii)All services are blocked; nothing is allowed
iii)Safe and necessary services are enabled individually
iv)Non-essential services and procedures that cannot be made safe are NOT allowed
v)Everything is logged

• A.  Paranoid Policy
• B.  Prudent Policy
• C.  Permissive Policy
• D.  Promiscuous Policy

Which one of the following tools of trade is a commercial shellcode and payload generator written in Python by Dave Aitel?

• A.  Network Security Analysis Tool (NSAT)
• B.  Canvas
• C.  CORE Impact
• D.  Microsoft Baseline Security Analyzer (MBSA)

Identify the type of firewall represented in the diagram below:

• A.  Circuit level gateway
• B.  Packet filter
• C.  Application level gateway
• D.  Stateful multilayer inspection firewall

Which of the following is NOT related to the Internal Security Assessment penetration testing strategy?

• A.  Testing performed from a number of network access points representing each logical and physical segment
• B.  Testing to provide a more complete view of site security
• C.  Testing including tiers and DMZs within the environment, the corporate network, or partner company connections
• D.  Testing focused on the servers, infrastructure, and the underlying software, including the target

What threat categories should you use to prioritize vulnerabilities detected in the pen testing report?

• A.  Urgent, dispute, action, zero, low
• B.  Low, medium, high, serious, critical
• C.  1, 2, 3, 4, 5
• D.  A, b, c, d, e