Free EC-COUNCIL 412-79v9 Exam Dumps Questions & Answers

A firewall's decision to forward or reject traffic in network filtering is dependent upon which of the following?

• A.  Source address
• B.  Port numbers
• C.  Protocol used
• D.  Destination address

Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

• A.  Sarbanes-Oxley 2002
• B.  California SB 1386
• C.  USA Patriot Act 2001
• D.  Gramm-Leach-Bliley Act (GLBA)

Black-box testing is a method of software testing that examines the functionality of an application (e.g. what the software does) without peering into its internal structures or workings. Black-box testing is used to detect issues in SQL statements and to detect SQL injection vulnerabilities.

Most commonly, SQL injection vulnerabilities are a result of coding vulnerabilities during the Implementation/Development phase and will likely require code changes.
Pen testers need to perform this testing during the development phase to find and fix the
SQL injection vulnerability.
What can a pen tester do to detect input sanitization issues?

• A.  Use a right square bracket (the "]" character) as the input data to catch instances where the user input is used as part of a SQL identifier without any input sanitization
• B.  Send double quotes as the input data to catch instances where the user input is not sanitized
• C.  Send long strings of junk data, just as you would send strings to detect buffer overruns
• D.  Send single quotes as the input data to catch instances where the user input is not sanitized

Which of the following statements is true about the LM hash?

• A.  Padded with NULL to 16 characters
• B.  Letters are converted to the lowercase
• C.  Disabled in Windows Vista and 7 OSs
• D.  Separated into two 8-character strings

Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM.
NTLM and LM authentication protocols are used to securely store a user's password in the
SAM database using different hashing methods.

The SAM file in Windows Server 2008 is located in which of the following locations?

• A.  c:\windows\system32\config\SAM
• B.  c:\windows\system32\Setup\SAM
• C.  c:\windows\system32\drivers\SAM
• D.  c:\windows\system32\Boot\SAM