412-79v8 試験問題を無料オンラインアクセス

TCP/IP model is a framework for the Internet Protocol suite of computer network protocols that defines the communication in an IP-based network. It provides end-to-end connectivity specifying how data should be formatted, addressed, transmitted, routed and received at the destination. This functionality has been organized into four abstraction layers which are used to sort all related protocols according to the scope of networking involved.

Which of the following TCP/IP layers selects the best path through the network for packets to travel?

• A.Network Access layer
• B.Transport layer
• C.Internet layer
• D.Application layer

Information gathering is performed to:
i) Collect basic information about the target company and its network
ii) Determine the operating system used, platforms running, web server versions, etc.
iii) Find vulnerabilities and exploits

Which of the following pen testing tests yields information about a company's technology infrastructure?

• A.Searching for a company's job postings
• B.Searching for trade association directories
• C.Searching for web page posting patterns
• D.Analyzing the link popularity of the company's website

Which of the following is developed to address security concerns on time and reduce the misuse or threat of attacks in an organization?

• A.Vulnerabilities checklists
• B.Testing Plan
• C.Configuration checklists
• D.Action Plan

Which of the following appendices gives detailed lists of all the technical terms used in the report?

• A.Required Work Efforts
• B.References
• C.Research
• D.Glossary

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing.
Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.

Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?

• A.Specific IP addresses/ranges to be tested
• B.A list of acceptable testing techniques
• C.A list of employees in the client organization
• D.Points of contact for the penetration testing team