最新の312-92問題集で試験を準備する

EC-COUNCIL 312-92 試験概要:

EC-COUNCIL 312-92 試験シラバストピック:

EC-COUNCIL EC-Council Certified Secure Programmer v2 認定 312-92 試験問題：

1. Shayla is designing a web-based application that will pass data to and from a company extranet. This data is very sensitive and must be protected at all costs. Shayla will use a digital certificate and a digital signature to protect the data. The digital signature she has chosen to use is based on the difficulty in computing discrete logarithms. Which digital signature has she chosen?

A) SA-PSS
B) ElGamal
C) Rabin
D) Diffie-Hellman

2. Jayson is the head developer of a team working on an inventory tracking and maintenance program. Jayson and his team are in the third phase of the software development life cycle, designing the program. In their current development phase, what material would be considered the input for their program?

A) Maintenance document
B) Design document
C) Specifications document
D) User acceptance document

3. What security package is implemented with the following code?
dwStatus = DsMakSpn
(
"ldap",
"MyServer.Mydomain.com",
NULL,
0,
NULL,
&pcSpnLength,
pszSpn
);
rpcStatus = RpcServerRegisterAuthInfo
(
psz
RPC_C_AUTHN_GSS_NEGOTIATE,
NULL,
NULL
);

A) Repurposing
B) SSPI
C) Diffie-Hellman encryption
D) SMDT

4. What is the following shellcode trying to accomplish?
int main(void) {
mkdir("A");
chdir("A");
chroot("..//..//..//..//..//..//..//..//");
system("/bin/sh")

A) Break out of "chroot jail"
B) Traverse to the /bin/sh directory
C) Create a buffer overflow
D) Corrupt the Linux kernel

5. After learning from an external auditor that his code was susceptible to attack, George decided to rewrite some of his code to look like the following. What is George preventing by changing the code?
public voif doContent(...) {
...
String s;
if ((s = getUsernameByID("userid")) != null) {
s = StringUtils.encodeToHTML(s, 50);
response.write("<br>Applicant:<u>" + s +
"</u>");
}
...
}

A) Cookie poisoning
B) SQL injection
C) Query string manipulation
D) XSS attack

質問と回答：