Free 412-79v10 Exam Dumps

Question 21

Which among the following information is not furnished by the Rules of Engagement (ROE) document?

A. Techniques for data collection from systems upon termination of the test
B. Techniques for data exclusion from systems upon termination of the test
C. Details on how data should be transmitted during and after the test
D. Details on how organizational data is treated throughout and after the test

Correct Answer:A

Question 22

Jessica works as systems administrator for a large electronics firm. She wants to scan her network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

A. Smurf scan
B. Tracert
C. Ping trace
D. ICMP ping sweep

Correct Answer:D

Question 23

Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

A. USA Patriot Act 2001
B. Sarbanes-Oxley 2002
C. Gramm-Leach-Bliley Act (GLBA)
D. California SB 1386

Correct Answer:A

Question 24

How many bits is Source Port Number in TCP Header packet?

A. 48
B. 32
C. 64
D. 16

Correct Answer:D

Question 25

If a web application sends HTTP cookies as its method for transmitting session tokens, it may be vulnerable which of the following attacks?

A. Parameter tampering Attack
B. Sql injection attack
C. Session Hijacking
D. Cross-site request attack

Correct Answer:D

The certification names are the trademarks of their respective owners. testpreplab.com certstest.com