112-52問題集、EC-COUNCIL実際の試験問題

質問 1

Which technique is MOST effective in preventing SQL Injection attacks?

A. Input validation and prepared statements

B. Disabling TLS encryption

C. Allowing dynamic SQL queries

D. Increasing database size

正解: A

質問 2

Which of the following is the primary objective of information security?

A. Ensuring network speed

B. Reducing software costs

C. Increasing employee productivity

D. Protecting confidentiality, integrity, and availability of data

正解: D

質問 3

Which password cracking technique uses precomputed hash values?

A. Rainbow table attack

B. Phishing

C. Dictionary attack

D. Session hijacking

正解: A

質問 4

What vulnerability is particularly concerning for IoT devices due to their widespread and often unattended deployment?

A. Social engineering

B. Buffer overflow attacks

C. Cross-site scripting

D. Insecure default configurations

正解: D

質問 5

What is an effective countermeasure for mitigating DDoS attacks?

A. Using strong encryption

B. Deploying antivirus solutions

C. Implementing rate limiting

D. Enabling geofencing

正解: C

質問 6

In the context of network security, what is session hijacking?

A. Redirecting a user to a malicious site

B. Hijacking the routing table of a router

C. Intercepting and exploiting valid session control mechanisms

D. The process of forcibly ending a user's session

正解: C

質問 7

Which of the following is a type of malware?

A. Virus

B. Proxy server

C. Firewall

D. VPN

正解: A

質問 8

Which practice should be implemented to secure a cloud environment effectively?

A. Using single-factor authentication

B. Avoiding regular security assessments

C. Enforcing encryption for data at rest and in transit

D. Allowing unrestricted access

正解: C

質問 9

Which method involves guessing passwords through an automated process of trial and error?

A. Social engineering

B. Brute force attack

C. Phishing

D. Spoofing

正解: B

質問 10

Which phase of penetration testing involves gathering information about the target?

A. Reconnaissance

B. Post-exploitation

C. Exploitation

D. Reporting

正解: A

質問 11

Containers offer a lightweight alternative to virtual machines by sharing the host OS's kernel.
What is a key security practice for containers?

A. Ensuring containers use as much host resource as possible

B. Using containers to run multiple different applications on a single host

C. Running containers with default settings

D. Regularly scanning containers and images for vulnerabilities

正解: D

質問 12

Which of the following is a strong indicator of a potential insider threat?

A. Consistent adherence to security policies

B. Prompt reporting of suspicious activity

C. Increased data usage

D. Regular participation in security training

正解: C

質問 13

What is a key benefit of conducting penetration testing?

A. Enhancing the physical security of data centers

B. Reducing the need for IT training

C. Validating compliance with security policies

D. Increasing the efficiency of IT operations

正解: C

質問 14

Which of the following is considered an insider threat?

A. A disgruntled employee transmitting confidential data to a competitor

B. A hacker exploiting a vulnerability in the firewall

C. A malware infection from an email attachment

D. A denial-of-service attack from an unknown external source

正解: A

EC-COUNCIL EC-Council Ethical Hacking Essentials (EHE) - 112-52 模擬練習