412-79V9 Exam Questions and Answers

QUESTION: 33

Identify the person who will lead the penetration-testing project and be the client point of contact.

Database Penetration Tester
Policy Penetration Tester
Chief Penetration Tester
Application Penetration Tester

Answer(s): C

Reference:

http://www.scribd.com/doc/133635286/LPTv4-Module-15-Pre-Penetration- Testing-Checklist-NoRestriction (page 15)

QUESTION: 34

Logs are the record of the system and network activities. Syslog protocol is used for delivering log information across an IP network. Syslog messages can be sent via which one of the following?

UDP and TCP
TCP and SMTP
SMTP
UDP and SMTP

Answer(s): A

Reveal Solution Next Question

The IP protocol was designed for use on a wide variety of transmission links. Although the maximum length of an IP datagram is 64K, most transmission links enforce a smaller maximum packet length limit, called a MTU.
The value of the MTU depends on the type of the transmission link. The design of IP accommodates MTU differences by allowing routers to fragment IP datagrams as necessary. The receiving station is responsible for reassembling the fragments back into the original full size IP datagram.
IP fragmentation involves breaking a datagram into a number of pieces that can be reassembled later. The IP source, destination, identification, total length, and fragment offset fields in the IP header, are used for IP fragmentation and reassembly.

The fragment offset is 13 bits and indicates where a fragment belongs in the original IP datagram. This value is a:

Multiple of four bytes
Multiple of two bytes
Multiple of eight bytes
Multiple of six bytes

Answer(s): C

Reference:

http://www.freesoft.org/CIE/Course/Section3/7.htm (fragment offset: 13 bits)

Reveal Solution Next Question

QUESTION: 36

Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

Sunbelt Network Security Inspector (SNSI).
CORE Impact
Canvas
Microsoft Baseline Security Analyzer (MBSA)

Answer(s): C

Reveal Solution Next Question

QUESTION: 37

Which of the following is the objective of Gramm-Leach-Bliley Act?

To ease the transfer of financial information between institutions and banks
To protect the confidentiality, integrity, and availability of data
To set a new or enhanced standards for all U.S. public company boards, management and public accounting firms
To certify the accuracy of the reported financial statement

Answer(s): A

Reference:

http://www.itap.purdue.edu/security/policies/glb_safeguards_rule_training_general.pdf

Reveal Solution Next Question

QUESTION: 38

Port numbers are used to keep track of different conversations crossing the network at the same time. Both TCP and UDP use port (socket) numbers to pass information to the upper layers. Port numbers have the assigned ranges. The port numbers above 1024 are considered as which one of the following? (Select all that apply)

Well-known port numbers
Dynamically assigned port numbers
Unregistered port numbers
Statically assigned port numbers

Answer(s): B

Reveal Solution Next Question

QUESTION: 39

The Internet is a giant database where people store some of their most private information on the cloud, trusting that the service provider can keep it all safe. Trojans, Viruses, DoS attacks, website defacement, lost computers, accidental publishing, and more have all been sources of major leaks over the last 15 years.

What is the biggest source of data leaks in organizations today?

Weak passwords and lack of identity management
Insufficient IT security budget
Rogue employees and insider attacks
Vulnerabilities, risks, and threats facing Web sites

Answer(s): C

Reveal Solution Next Question

QUESTION: 40

Identify the injection attack represented in the diagram below:

XPath Injection Attack
XML Request Attack
XML Injection Attack
Frame Injection Attack

Answer(s): C

Reference:

http://projects.webappsec.org/w/page/13247004/XML%20Injection

Reveal Solution Next Question

EC-Council 412-79V9 Exam (page: 5)
EC-Council Certified Security Analyst (ECSA) v9
Updated on: 12-Feb-2026

QUESTION: 33

Reference:

QUESTION: 34

QUESTION: 35

Reference:

QUESTION: 36

QUESTION: 37

Reference:

QUESTION: 38

QUESTION: 39

QUESTION: 40

Reference:

EC-Council 412-79V9 Exam (page: 5) EC-Council Certified Security Analyst (ECSA) v9 Updated on: 12-Feb-2026

QUESTION: 33

Reference:

QUESTION: 34

QUESTION: 35

Reference:

QUESTION: 36

QUESTION: 37

Reference:

QUESTION: 38

QUESTION: 39

QUESTION: 40

Reference:

EC-Council 412-79V9 Exam (page: 5)
EC-Council Certified Security Analyst (ECSA) v9
Updated on: 12-Feb-2026