Free EC-COUNCIL 412-79v9 Exam Dumps Questions & Answers

Traffic on which port is unusual for both the TCP and UDP ports?

• A.  Port 0
• B.  Port 81
• C.  Port 443
• D.  Port21

Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM.
NTLM and LM authentication protocols are used to securely store a user's password in the
SAM database using different hashing methods.

The SAM file in Windows Server 2008 is located in which of the following locations?

• A.  c:\windows\system32\Boot\SAM
• B.  c:\windows\system32\Setup\SAM
• C.  c:\windows\system32\config\SAM
• D.  c:\windows\system32\drivers\SAM

A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.

What are the two types of 'white-box' penetration testing?

• A.  Announced testing and unannounced testing
• B.  Blind testing and unannounced testing
• C.  Blind testing and double blind testing
• D.  Announced testing and blind testing

A Demilitarized Zone (DMZ) is a computer host or small network inserted as a "neutral zone" between a company's private network and the outside public network. Usage of a protocol within a DMZ environment is highly variable based on the specific needs of an organization. Privilege escalation, system is compromised when the code runs under root credentials, and DoS attacks are the basic weakness of which one of the following
Protocol?

• A.  Secure Shell (SSH)
• B.  Simple Network Management Protocol (SNMP)
• C.  Lightweight Directory Access Protocol (LDAP)
• D.  Telnet

Output modules allow Snort to be much more flexible in the formatting and presentation of output to its users. Snort has 9 output plug-ins that push out data in different formats.
Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?

• A.  unified
• B.  csv
• C.  alert_fast
• D.  alert_unixsock