ECSAv10 무료 덤프문제 온라인 액세스

The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

• A.HIPAA
• B.Gramm-Leach-Bliley Act
• C.Sarbanes-Oxley 2002
• D.California SB 1386a

In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc.
They first access the web application using a low privileged account and then escalate privileges to access protected resources. What attack has been carried out?

• A.Authentication Attack
• B.XPath Injection Attack
• C.Authorization Attack
• D.Frame Injection Attack

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing. Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.

Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?

• A.A list of employees in the client organization
• B.Points of contact for the penetration testing team
• C.Specific IP addresses/ranges to be tested
• D.A list of acceptable testing techniques

What will the following URL produce in an unpatched IIS Web Server?

• A.Directory listing of C: drive on the web server
• B.Directory listing of the C:\windows\system32 folder on the web server
• C.Execute a buffer flow in the C: drive of the web server
• D.Insert a Trojan horse into the C: drive of the web server

What operating system would respond to the following command?

• A.Windows XP
• B.FreeBSD
• C.Windows 95
• D.Mac OS X