ECSAv10 무료 덤프문제 온라인 액세스

Besides the policy implications of chat rooms, Internet Relay Chat (IRC) is frequented by attackers and used as a command and control mechanism. IRC normally uses which one of the following TCP ports?

• A.6771 TCP port
• B.6257 TCP port
• C.6566 TCP port
• D.6667 TCP port

Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

• A.Service-based Assessment Solutions
• B.Tree-based Assessment
• C.Inference-based Assessment
• D.Product-based Assessment Solutions

You work as an IT security auditor hired by a law firm in Boston. You have been assigned the responsibility to audit the client for security risks. When assessing the risk to the clients network, what step should you take first?

• A.Evaluating the existing perimeter and internal security
• B.Checking for a written security policy
• C.Analyzing the use of existing management and control architecture
• D.Analyzing, categorizing and prioritizing resources

Frank is working on a vulnerability assessment for a company on the West coast. The company hired Frank to assess its network security through scanning, pen tests, and vulnerability assessments. After discovering numerous known vulnerabilities detected by a temporary IDS he set up, he notices a number of items that show up as unknown but questionable in the logs.
He looks up the behavior on the Internet, but cannot find anything related. What organization should Frank submit the log to find out if it is a new vulnerability or not?

• A.IANA
• B.CVE
• C.APIPA
• D.RIPE

Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate.
He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to only allow FTP-PUT.
Which firewall would be most appropriate for Harold?

• A.Data link layer firewall
• B.Application-level proxy firewall
• C.Packet filtering firewall
• D.Circuit-level proxy firewall