412-79 Exam Questions and Answers | Exam-Dumps (Page: 6)

QUESTION: 26 Topic 1, Volume A

On Linux/Unix based Web servers, what privilege should the daemon service be run under?

Guest
You cannot determine what privilege runs the daemon service
Root
Something other than root

Answer(s): D

QUESTION: 27 Topic 1, Volume A

Jason has set up a honeypot environment by creating a DMZ that has no physical or logical access to his production network. In this honeypot, he has placed a server running Windows Active Directory. He has also placed a Web server in the DMZ that services a number of web pages that offer visitors a chance to download sensitive information by clicking on a button. A week later, Jason finds in his network logs how an intruder accessed the honeypot and downloaded sensitive information. Jason uses the logs to try and prosecute the intruder for stealing sensitive corporate information. Why will this not be viable?

Intruding into a honeypot is not illegal
Entrapment
Intruding into a DMZ is not illegal
Enticement

Answer(s): B

Reveal Solution Next Question

QUESTION: 28 Topic 1, Volume A

Jessica works as systems administrator for a large electronics firm. She wants to scan her network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

Smurf scan
Tracert
Ping trace
ICMP ping sweep

Answer(s): D

Reveal Solution Next Question

QUESTION: 29 Topic 1, Volume A

Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to only allow FTP-PUT. Which firewall would be most appropriate for Harold? needs?

Application-level proxy firewall
Data link layer firewall
Packet filtering firewall
Circuit-level proxy firewall

Answer(s): A

Reveal Solution Next Question

QUESTION: 30 Topic 1, Volume A

Jonathan is a network administrator who is currently testing the internal security of his network. He is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will Jonathan not succeed?

Only an HTTPS session can be hijacked
Only DNS traffic can be hijacked
Only FTP traffic can be hijacked
HTTP protocol does not maintain session

Answer(s): D

Reveal Solution Next Question

EC-Council 412-79 Exam (page: 6) EC-Council Certified Security Analyst (ECSA) Exam Updated on: 09-Feb-2026

QUESTION: 26 Topic 1, Volume A

QUESTION: 27 Topic 1, Volume A

QUESTION: 28 Topic 1, Volume A

QUESTION: 29 Topic 1, Volume A

QUESTION: 30 Topic 1, Volume A

EC-Council 412-79 Exam (page: 6)
EC-Council Certified Security Analyst (ECSA) Exam
Updated on: 09-Feb-2026