412-79v10 試験問題を無料オンラインアクセス

In the context of penetration testing, what does blue teaming mean?

• A.It is the most expensive and most widely used
• B.A penetration test performed with the knowledge and consent of the organization's IT staff
• C.A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management
• D.It may be conducted with or without warning

By default, the TFTP server listens on UDP port 69. Which of the following utility reports the port status of target TCP and UDP ports on a local or a remote computer and is used to troubleshoot TCP/IP connectivity issues?

• A.Telnet
• B.Netstat
• C.Tracert
• D.PortQry

Many security and compliance projects begin with a simple idea: assess the organization's risk, vulnerabilities, and breaches. Implementing an IT security risk assessment is critical to the overall security posture of any organization.
An effective security risk assessment can prevent breaches and reduce the impact of realized breaches.

What is the formula to calculate risk?

• A.Risk = Goodwill x Reputation
• B.Risk = Budget x Time
• C.Risk = Loss x Exposure factor
• D.Risk = Threats x Attacks

What is a difference between host-based intrusion detection systems (HIDS) and network-based intrusion detection systems (NIDS)?

• A.HIDS requires less administration and training compared to NIDS.
• B.Attempts to install Trojans or backdoors cannot be monitored by a HIDS whereas NIDS can monitor and stop such intrusion events.
• C.NIDS are standalone hardware appliances that include network intrusion detection capabilities whereas HIDS consist of software agents installed on individual computers within the system.
• D.NIDS are usually a more expensive solution to implement compared to HIDS.

Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and Zombies? What type of Penetration Testing is Larry planning to carry out?

• A.Router Penetration Testing
• B.Firewall Penetration Testing
• C.Internal Penetration Testing
• D.DoS Penetration Testing