412-79V9 Exam Questions and Answers

QUESTION: 17

You are conducting a penetration test against a company and you would like to know a personal email address of John, a crucial employee. What is the fastest, cheapest way to find out John's email address.

Call his wife and ask for his personal email account
Call a receptionist and ask for John Stevens' personal email account
Search in Google for his personal email ID
Send an email to John stating that you cannot send him an important spreadsheet attachment file to his business email account and ask him if he has any other email accounts

Answer(s): D

Reveal Solution Next Question

QUESTION: 18

NTP protocol is used to synchronize the system clocks of computers with a remote time server or time source over a network. Which one of the following ports is used by NTP as its transport layer?

TCP port 152
UDP port 177
UDP port 123
TCP port 113

Answer(s): C

Reveal Solution Next Question

QUESTION: 19

A framework is a fundamental structure used to support and resolve complex issues. The framework that delivers an efficient set of technologies in order to develop applications which are more secure in using Internet and Intranet is:

Microsoft Internet Security Framework
Information System Security Assessment Framework (ISSAF)
Bell Labs Network Security Framework
The IBM Security Framework

Answer(s): A

Reveal Solution Next Question

QUESTION: 20

In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?

IPS evasion technique
IDS evasion technique
UDP evasion technique
TTL evasion technique

Answer(s): D

Reference:

http://is.muni.cz/th/172999/fi_m/MT_Bukac.pdf (page 24)

Reveal Solution Next Question

QUESTION: 21

Which of the following protocol's traffic is captured by using the filter tcp.port==3389 in the Wireshark tool?

Reverse Gossip Transport Protocol (RGTP)
Real-time Transport Protocol (RTP)
Remote Desktop Protocol (RDP)
Session Initiation Protocol (SIP)

Answer(s): C

Reference:

http://wiki.wireshark.org/RDP

Reveal Solution Next Question

QUESTION: 22

Which among the following information is not furnished by the Rules of Engagement (ROE) document?

Techniques for data collection from systems upon termination of the test
Techniques for data exclusion from systems upon termination of the test
Details on how data should be transmitted during and after the test
Details on how organizational data is treated throughout and after the test

Answer(s): A

Reveal Solution Next Question

QUESTION: 23

Metasploit framework in an open source platform for vulnerability research, development, and penetration testing. Which one of the following metasploit options is used to exploit multiple systems at once?

NinjaDontKill
NinjaHost
RandomNops
EnablePython

Answer(s): A

Reveal Solution Next Question

QUESTION: 24

Which one of the following acts makes reputational risk of poor security a reality because it requires public disclosure of any security breach that involves personal information if it is unencrypted or if it is reasonably believed that the information has been acquired by an unauthorized person?

California SB 1386
Sarbanes-Oxley 2002
Gramm-Leach-Bliley Act (GLBA)
USA Patriot Act 2001

Answer(s): A

Reveal Solution Next Question

EC-Council 412-79V9 Exam (page: 3) EC-Council Certified Security Analyst (ECSA) v9 Updated on: 12-Feb-2026

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

Reference:

QUESTION: 21

Reference:

QUESTION: 22

QUESTION: 23

QUESTION: 24

EC-Council 412-79V9 Exam (page: 3)
EC-Council Certified Security Analyst (ECSA) v9
Updated on: 12-Feb-2026