Online Access Free 412-79v10 Exam Questions

External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

Which of the following types of penetration testing is performed with no prior knowledge of the site?

• A.Grey box testing
• B.Black box testing
• C.White box testing
• D.Blue box testing

Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.

What does a vulnerability assessment identify?

• A.Weaknesses that could be exploited
• B.Organizational structure
• C.Disgruntled employees
• D.Physical security breaches

Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels.
A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack.

Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

• A.Host-based Assessment
• B.Application Assessment
• C.Passive Assessment
• D.External Assessment

Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer. Where should Harold navigate on the computer to find the file?

• A.%systemroot%\repair
• B.%systemroot%\system32\drivers\etc
• C.%systemroot%\system32\LSA
• D.%systemroot%\LSA

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing. Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.

Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?

• A.Points of contact for the penetration testing team
• B.A list of employees in the client organization
• C.Specific IP addresses/ranges to be tested
• D.A list of acceptable testing techniques