412-79v8 무료 덤프문제 온라인 액세스

Which one of the following tools of trade is a commercial shellcode and payload generator written in Python by Dave Aitel?

• A.Network Security Analysis Tool (NSAT)
• B.CORE Impact
• C.Canvas
• D.Microsoft Baseline Security Analyzer (MBSA)

The first phase of the penetration testing plan is to develop the scope of the project in consultation with the client. Pen testing test components depend on the client's operating environment, threat perception, security and compliance requirements, ROE, and budget. Various components need to be considered for testing while developing the scope of the project.

Which of the following is NOT a pen testing component to be tested?

• A.Intrusion Detection
• B.Inside Accomplices
• C.System Software Security
• D.Outside Accomplices

Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?

• A.Project Goal
• B.Success Factors
• C.Objectives
• D.Assumptions

What information can be collected by dumpster diving?

• A.All the above
• B.Sensitive documents
• C.Customer contact information
• D.Email messages

Which of the following is an application alert returned by a web application that helps an attacker guess a valid username?

• A.Username or password incorrect
• B.Account username was not found
• C.Invalid username or password
• D.Incorrect password