EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 412-79v8 試験問題:
1. Port numbers are used to keep track of different conversations crossing the network at the same time. Both TCP and UDP use port (socket) numbers to pass information to the upper layers. Port numbers have the assigned ranges. The port numbers above 1024 are considered as which one of the following? (Select all that apply)
A) Dynamically assigned port numbers
B) Unregistered port numbers
C) Statically assigned port numbers
D) Well-known port numbers
2. Which of the following is a framework of open standards developed by the Internet Engineering Task Force (IETF) that provides secure transmission of the sensitive data over an unprotected medium, such as the Internet?
A) Netsec
B) IKE
C) DNSSEC
D) IPsec
3. Which type of security policy applies to the below configuration? i)Provides maximum security while allowing known, but necessary, dangers ii)All services are blocked; nothing is allowed iii)Safe and necessary services are enabled individually iv)Non-essential services and procedures that cannot be made safe are NOT allowed v)Everything is logged
A) Promiscuous Policy
B) Permissive Policy
C) Paranoid Policy
D) Prudent Policy
4. Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?
A) Post-Assessment Phase
B) Pre-Assessment Phase
C) Assessment Phase
D) Threat-Assessment Phase
5. Many security and compliance projects begin with a simple idea: assess the organization's risk, vulnerabilities, and breaches. Implementing an IT security risk assessment is critical to the overall security posture of any organization.
An effective security risk assessment can prevent breaches and reduce the impact of realized breaches.
What is the formula to calculate risk?
A) Risk = Budget x Time
B) Risk = Loss x Exposure factor
C) Risk = Threats x Attacks
D) Risk = Goodwill x Reputation
質問と回答：
| 質問 # 1 正解： A | 質問 # 2 正解： D | 質問 # 3 正解： D | 質問 # 4 正解： B | 質問 # 5 正解： B |
952 お客様のコメント
品質保証JPexamはIT認定試験のシラバスに従って、試験問題の範囲を正確に絞って、的中率が99％の最新問題集を捧げます。
1年間の無料更新サービスJPexamは1年以内に問題集の無料更新サービスを提供し、お客様がいつでも最新版の問題集を持つことを保証いたします。もし試験の内容が変更されたら、弊社は直ちにお客様にお知らせします。それに、弊社の問題集が更新されたら、早速メールで最新バージョンを送付いたします。
全額返金JPexamの問題集を利用すると、短時間で勉強しても試験に合格できるのを保証いたします。試験に不合格になってしまった場合、弊社は全額返金いたします。(
ご購入前のお試しJPexamは問題集のサンプルを無料で提供いたします。ご購入前にサンプルを試用して製品の品質を確認することができます。ご遠慮なく利用してください。
