312-50v12日本語リアルな試験問題312-50v12日本語練習問題集 [Q59-Q84]

312-50v12日本語リアルな試験問題312-50v12日本語練習問題集

厳密検証された312-50v12日本語試験問題集と解答で無料提供の312-50v12日本語問題と正解付き

質問 # 59
プロのハッカーであるロバートは、ターゲットの IoT デバイスに対してフォールト インジェクション攻撃を実行しようとしています。このプロセスでは、リモート実行に使用できる電源にフォールトを注入し、重要な命令のスキップも引き起こします。また、チップ全体に同期信号を配信するために使用されるクロック ネットワークにもフォールトを注入します。
上記のシナリオでロバートが実行したフォールト インジェクション攻撃は次のうちどれですか。

• A. 光電磁障害注入 (EMFI)
• B. 周波数/電圧の改ざん
• C. 電源/クロック/リセットの不具合
• D. 温度攻撃

正解：C

解説：
These types of attacks occur when faults or glitches are INJECTED into the Power supply that can be used for remote execution.

質問 # 60
あなたは、クラウドベースのサービスを提供する CloudTech Inc. のサイバーセキュリティ専門家です。機密データをパブリック クラウド サービスに移行したいクライアントのプロジェクトを管理しています。規制要件に準拠するために、クライアントは、データがクラウド上に保存されている場合でも、暗号化キーを完全に制御することを要求しています。この要件を満たすには、次のどのプラクティスを実装する必要がありますか。

• A. クラウド サービス プロバイダーの暗号化サービスを使用しますが、キーはオンプレミスに保存します。
• B. クラウドにアップロードする前にクライアント側でデータを暗号化し、暗号化キーの制御を保持します。
• C. 保存データには Secure Sockets Layer (SSL) 暗号化を使用します。
• D. クラウド サービス プロバイダーのデフォルトの暗号化およびキー管理サービスを使用します。

正解：B

解説：
The best practice to meet the client's requirement is to encrypt data client-side before uploading to the cloud and retain control of the encryption keys. This practice is also known as client-side encryption or end-to-end encryption, and it involves encrypting the data on the client's device using a software or hardware tool that generates and manages the encryption keys. The encrypted data is then uploaded to the cloud service, where it remains encrypted at rest. The encryption keys are never shared with the cloud service provider or any third party, and they are only used by the client to decrypt the data when needed. This way, the client can maintain full control over the encryption keys and the security of the data, even when the data is stored on a public cloud service12.
The other options are not as optimal as option D for the following reasons:
* A. Use the cloud service provider's encryption services but store keys on-premises: This option is not feasible because it contradicts the client's requirement of maintaining full control over the encryption keys. Using the cloud service provider's encryption services means that the client has to rely on the
* cloud service provider to generate and manage the encryption keys, even if the keys are stored on-premises. The cloud service provider may have access to the keys or the ability to decrypt the data, which may compromise the security and privacy of the data. Moreover, storing the keys on-premises may introduce additional challenges, such as key distribution, synchronization, backup, and recovery3.
* B. Use the cloud service provider's default encryption and key management services: This option is not desirable because it violates the client's requirement of maintaining full control over the encryption keys. Using the cloud service provider's default encryption and key management services means that the client has to trust the cloud service provider to encrypt and decrypt the data on the server-side, using the cloud service provider's own encryption keys and mechanisms. The cloud service provider may have access to the keys or the ability to decrypt the data, which may compromise the security and privacy of the data. Furthermore, the cloud service provider's default encryption and key management services may not meet the regulatory requirements or the security standards of the client4.
* C. Rely on Secure Sockets Layer (SSL) encryption for data at rest: This option is not sufficient because SSL encryption is not designed for data at rest, but for data in transit. SSL encryption is a protocol that encrypts the data as it travels over the internet between the client and the server, using certificates and keys that are exchanged and verified by both parties. SSL encryption can protect the data from being intercepted or modified by unauthorized parties, but it does not protect the data from being accessed or decrypted by the cloud service provider or any third party who has access to the server. Moreover, SSL encryption does not provide the client with any control over the encryption keys or the security of the data.
References:
* 1: Client-side encryption - Wikipedia
* 2: What is Client-Side Encryption? | Definition, Benefits & Best Practices | Kaspersky
* 3: Cloud Encryption Key Management: What You Need to Know | Thales
* 4: Cloud Encryption: How It Works and How to Use It | Comparitech
* : What is SSL Encryption and How Does it Work? | Norton

質問 # 61
HackerOne などのプラットフォームで企業が公開する脆弱性開示プログラムの一般的な名称は何ですか?

• A. 倫理的なハッキングプログラム
• B. バグ報奨金プログラム
• C. 脆弱性ハンティングプログラム
• D. ホワイトハットハッキングプログラム

正解：B

解説：
Bug bounty programs allow independent security researchers to report bugs to an companies and receive rewards or compensation. These bugs area unit sometimes security exploits and vulnerabilities, although they will additionally embody method problems, hardware flaws, and so on.
The reports area unit usually created through a program travel by associate degree freelance third party (like Bugcrowd or HackerOne). The companies can got wind of (and run) a program curated to the organization's wants.
Programs is also non-public (invite-only) wherever reports area unit unbroken confidential to the organization or public (where anyone will sign in and join). they will happen over a collection timeframe or with without stopping date (though the second possibility is a lot of common).
Who uses bug bounty programs?Many major organizations use bug bounties as an area of their security program, together with AOL, Android, Apple, Digital Ocean, and goldman Sachs. you'll read an inventory of all the programs offered by major bug bounty suppliers, Bugcrowd and HackerOne, at these links.
Why do corporations use bug bounty programs?Bug bounty programs provide corporations the flexibility to harness an outsized cluster of hackers so as to seek out bugs in their code.
This gives them access to a bigger variety of hackers or testers than they'd be able to access on a one-on-one basis. It {can also|also will|can even|may also|may} increase the probabilities that bugs area unit found and reported to them before malicious hackers can exploit them.
It may also be an honest publicity alternative for a firm. As bug bounties became a lot of common, having a bug bounty program will signal to the general public and even regulators that a corporation incorporates a mature security program.
This trend is likely to continue, as some have began to see bug bounty programs as an business normal that all companies ought to invest in.
Why do researchers and hackers participate in bug bounty programs?Finding and news bugs via a bug bounty program may end up in each money bonuses and recognition. In some cases, it will be a good thanks to show real-world expertise once you are looking for employment, or will even facilitate introduce you to parents on the protection team within an companies.
This can be full time income for a few of us, income to supplement employment, or the way to point out off your skills and find a full time job.
It may also be fun! it is a nice (legal) probability to check out your skills against huge companies and government agencies.
What area unit the disadvantages of a bug bounty program for independent researchers and hackers?A lot of hackers participate in these varieties of programs, and it will be tough to form a major quantity of cash on the platform.
In order to say the reward, the hacker has to be the primary person to submit the bug to the program. meaning that in apply, you may pay weeks searching for a bug to use, solely to be the person to report it and build no cash.
Roughly ninety seven of participants on major bug bounty platforms haven't sold-out a bug.
In fact, a 2019 report from HackerOne confirmed that out of quite three hundred,000 registered users, solely around two.5% received a bounty in their time on the platform.
Essentially, most hackers are not creating a lot of cash on these platforms, and really few square measure creating enough to switch a full time wage (plus they do not have advantages like vacation days, insurance, and retirement planning).
What square measure the disadvantages of bug bounty programs for organizations?These programs square measure solely helpful if the program ends up in the companies realizeing issues that they weren't able to find themselves (and if they'll fix those problems)!
If the companies is not mature enough to be able to quickly rectify known problems, a bug bounty program is not the right alternative for his or her companies.
Also, any bug bounty program is probably going to draw in an outsized range of submissions, several of which can not be high-quality submissions. a corporation must be ready to cope with the exaggerated volume of alerts, and also the risk of a coffee signal to noise magnitude relation (essentially that it's probably that they're going to receive quite few unhelpful reports for each useful report).
Additionally, if the program does not attract enough participants (or participants with the incorrect talent set, and so participants are not able to establish any bugs), the program is not useful for the companies.
The overwhelming majority of bug bounty participants consider web site vulnerabilities (72%, per HackerOn), whereas solely a number of (3.5%) value more highly to seek for package vulnerabilities.
This is probably because of the actual fact that hacking in operation systems (like network hardware and memory) needs a big quantity of extremely specialised experience. this implies that firms may even see vital come on investment for bug bounties on websites, and not for alternative applications, notably those that need specialised experience.
This conjointly implies that organizations which require to look at AN application or web site among a selected time-frame may not need to rely on a bug bounty as there is no guarantee of once or if they receive reports.
Finally, it are often probably risky to permit freelance researchers to try to penetrate your network. this could end in public speech act of bugs, inflicting name harm within the limelight (which could end in individuals not eager to purchase the organizations' product or service), or speech act of bugs to additional malicious third parties, United Nations agency may use this data to focus on the organization.

質問 # 62
最近のセキュリティ評価で、組織には非武装地帯 (DMZ) に 1 つのドメイン ネーム サーバー (DNS) があり、内部ネットワークに 2 つ目の DNS サーバーがあることがわかりました。
このタイプの DNS 構成は一般に何と呼ばれていますか?

• A. DNSSEC
• B. ダイナミックDNS
• C. DNS スキーム
• D. 分割DNS

正解：D

質問 # 63
システム上のバックドアを隠すために、コードを追加したり、オペレーティング システムのカーネル コードの一部を置き換えたりする機能が特徴のルートキットはどれですか。

• A. ユーザーモード ルートキット
• B. ライブラリレベルのルートキット
• C. カーネルレベルのルートキット
• D. ハイパーバイザーレベルのルートキット

正解：C

質問 # 64
この TCP フラグは、送信システムにバッファリングされたすべてのデータをすぐに送信するように指示します。

• A. URG
• B. SYN
• C. PSH
• D. RST
• E. FIN

正解：C

質問 # 65
インシデント調査員は、セキュリティ侵害の可能性がある組織のネットワーク上のすべてのファイアウォール、プロキシ サーバー、および侵入検知システム (IDS) からイベント ログのコピーを受け取るように依頼します。調査員がすべてのログの情報を相関させようとすると、ログに記録されたイベントの多くの順序が一致しません。
最も可能性の高い原因は何でしょうか?

• A. ネットワークデバイスがすべて同期されていません。
• B. セキュリティ侵害は誤検知でした。
• C. ログの収集中に適切な保管チェーンが遵守されませんでした。
• D. 攻撃者がログからイベントを変更または消去しました。

正解：A

解説：
Many network and system administrators don't pay enough attention to system clock accuracy and time synchronization. Computer clocks can run faster or slower over time, batteries and power sources die, or daylight-saving time changes are forgotten. Sure, there are many more pressing security issues to deal with, but not ensuring that the time on network devices is synchronized can cause problems. And these problems often only come to light after a security incident.
If you suspect a hacker is accessing your network, for example, you will want to analyze your log files to look for any suspicious activity. If your network's security devices do not have synchronized times, the timestamps' inaccuracy makes it impossible to correlate log files from different sources. Not only will you have difficulty in tracking events, but you will also find it difficult to use such evidence in court; you won't be able to illustrate a smooth progression of events as they occurred throughout your network.

質問 # 66
侵入テスターがウイルス対策システムを回避するのに役立つ Metasploit Framework ツールはどれですか?

• A. msfencode
• B. msfpayload
• C. msfd
• D. msfcli

正解：A

解説：
https://www.offensive-security.com/metasploit-unleashed/msfencode/
One of the best ways to avoid being stopped by antivirus software is to encode our payload with msfencode.
Msfencode is a useful tool that alters the code in an executable so that it looks different to antivirus software but will still run the same way. Much as the binary attachment in email is encoded in Base64, msfencode encodes the original executable in a new binary. Then, when the executable is run, msfencode decodes the original code into memory and exe-cutes it.

質問 # 67
ネットワーク ユーザーは、システムの速度が遅くなっていると不満を述べています。さらに、Web サイトにアクセスしようとするたびに、一連のポップアップ広告が表示されます。システムはどのような種類のマルウェアに感染しているのでしょうか。

• A. ウイルス
• B. トロイの木馬
• C. アドウェア
• D. スパイウェア

正解：C

解説：
Adware, or advertising supported computer code, is computer code that displays unwanted advertisements on your pc. Adware programs can tend to serve you pop-up ads, will modification your browser's homepage, add spyware and simply bombard your device with advertisements. Adware may be a additional summary name for doubtless unwanted programs. It's roughly a virulent disease and it's going to not be as clearly malicious as a great deal of different problematic code floating around on the net. create no mistake concerning it, though, that adware has to return off of no matter machine it's on. Not solely will adware be extremely annoying whenever you utilize your machine, it might additionally cause semipermanent problems for your device.
Adware a network users the browser to gather your internet browsing history so as to 'target' advertisements that appear tailored to your interests. At their most innocuous, adware infections square measure simply annoying. as an example, adware barrages you with pop-up ads that may create your net expertise markedly slower and additional labor intensive.

質問 # 68
この形式の暗号化アルゴリズムでは、各ブロックに 64 ビットのデータが含まれ、3 つのキーが使用されます。各キーは 56 ビットで構成されます。この暗号化アルゴリズムはどれですか。

• A. アイデア
• B. トリプルデータ暗号化標準
• C. AES
• D. MDS暗号化アルゴリズム

正解：B

解説：
Triple DES is another mode of DES operation. It takes three 64-bit keys, for an overall key length of 192 bits.
In Stealth, you merely type within the entire 192-bit (24 character) key instead of entering each of the three keys individually. The Triple DES DLL then breaks the user-provided key into three subkeys, padding the keys if necessary in order that they are each 64 bits long. The procedure for encryption is strictly an equivalent as regular DES, but it's repeated 3 times , hence the name Triple DES. the info is encrypted with the primary key, decrypted with the second key, and eventually encrypted again with the third key.Triple DES runs 3 times slower than DES, but is far safer if used properly. The procedure for decrypting something is that the same because the procedure for encryption, except it's executed in reverse. Like DES, data is encrypted and decrypted in 64-bit chunks. Although the input key for DES is 64 bits long, the particular key employed by DES is merely 56 bits long . the smallest amount significant (right-most) bit in each byte may be a parity , and will be set in order that there are always an odd number of 1s in every byte. These parity bits are ignored, so only the seven most vital bits of every byte are used, leading to a key length of 56 bits. this suggests that the effective key strength for Triple DES is really 168 bits because each of the three keys contains 8 parity bits that aren't used during the encryption process.Triple DES ModesTriple ECB (Electronic Code Book)* This variant of Triple DES works precisely the same way because the ECB mode of DES.* this is often the foremost commonly used mode of operation.Triple CBC (Cipher Block Chaining)* This method is extremely almost like the quality DES CBC mode.* like Triple ECB, the effective key length is 168 bits and keys are utilized in an equivalent manner, as described above, but the chaining features of CBC mode also are employed.* the primary 64-bit key acts because the Initialization Vector to DES.* Triple ECB is then executed for one 64-bit block of plaintext.* The resulting ciphertext is then XORed with subsequent plaintext block to be encrypted, and therefore the procedure is repeated.* This method adds an additional layer of security to Triple DES and is therefore safer than Triple ECB, although it's not used as widely as Triple ECB.

質問 # 69
ある組織では、重要なインフラストラクチャの運用を遠隔地から自動化しています。このため、すべての産業用制御システムはインターネットに接続されています。製造プロセスを強化し、産業用ネットワークの信頼性を確保し、ダウンタイムとサービスの中断を減らすために、組織はサイバースパイ、ゼロデイ攻撃、マルウェアなどのセキュリティインシデントからさらに保護する OT セキュリティツールをインストールすることにしました。組織が重要なインフラストラクチャを保護するために採用する必要があるツールは次のうちどれですか。

• A. バレナクラウド
• B. インテントファザー
• C. フロウモン
• D. ロボティウム

正解：C

解説：
Source: https://www.flowmon.com
Flowmon empowers manufacturers and utility companies to ensure the reliability of their industrial networks confidently to avoid downtime and disruption of service continuity. This can be achieved by continuous monitoring and anomaly detection so that malfunctioning devices or security incidents, such as cyber espionage, zero-days, or malware, can be reported and remedied as quickly as possible.

質問 # 70
個人事前共有キー (PSK) 認証を同時同等認証 (SAE) に置き換え、オフライン辞書攻撃に耐性を持つワイヤレス セキュリティ プロトコルはどれですか。

• A. WPA2-エンタープライズ
• B. ブルートゥース
• C. WPA3-パーソナル
• D. ジグビー

正解：D

質問 # 71
あなたのゾーンには、以下に示す SOA があります。
セカンダリ サーバーはプライマリ サーバーに接続して情報を同期できませんでした。セカンダリ サーバーは、ゾーンがデッドであると判断され、クエリへの応答が停止するまで、どのくらいの期間プライマリ サーバーへの接続を試行しますか?
collegae.edu.SOA、cikkye.edu ipad.college.edu。 (200302028 3600 3600 604800 3600)

• A. 1週間
• B. 1か月
• C. 1日
• D. 1時間

正解：A

質問 # 72
組織内の会計ミスや不正行為から利害関係者や一般大衆を保護することを目的とした情報セキュリティ法や標準は何ですか?

• A. PCI-DSS
• B. ISO/I EC 27001:2013
• C. FISMA
• D. SOX

正解：D

質問 # 73
攻撃者はホストにRATをインストールしました。攻撃者は、ユーザーが
「www.MyPersonalBank.com」の場合、ユーザーはフィッシング サイトに誘導されます。
攻撃者はどのファイルを変更する必要がありますか?

• A. ネットワーク
• B. スドーユーザー
• C. ホスト
• D. Boot.ini

正解：C

質問 # 74
ゾーン ファイルは、次のリソース レコード (RR) のどれで構成されますか?

• A. DNS、NS、AXFR、MX レコード
• B. SOA、NS、A、MX レコード
• C. SOA、NS、AXFR、MX レコード
• D. DNS、NS、PTR、MX レコード

正解：B

質問 # 75
クラークはプロのハッカーです。彼は、ドメイン間を素早く切り替えて検出を回避するために、同じホストを指す複数のドメインを作成して構成しました。
上記のシナリオにおける敵対者の行動を特定します。

• A. コマンドラインインターフェースの使用
• B. データステージング
• C. DNSトンネリングの使用
• D. 指定されていないプロキシアクティビティ

正解：D

解説：
A proxy server acts as a gateway between you and therefore the internet. It's an intermediary server separating end users from the websites they browse. Proxy servers provide varying levels of functionality, security, and privacy counting on your use case, needs, or company policy.If you're employing a proxy server, internet traffic flows through the proxy server on its thanks to the address you requested. A proxy server is essentially a computer on the web with its own IP address that your computer knows. once you send an internet request, your request goes to the proxy server first. The proxy server then makes your web request on your behalf, collects the response from the online server, and forwards you the online page data so you'll see the page in your browser.

質問 # 76
これらのハッカーは訓練を受けていないか、あるいはほとんど訓練を受けておらず、基本的な技術やツールの使い方しか知りません。
どのような種類のハッカーについて話しているのでしょうか?

• A. ブラックハットハッカーA
• B. スクリプトキディ
• C. グレーハットハッカー
• D. ホワイトハットハッカー

正解：B

解説：
Script Kiddies: These hackers have limited or no training and know how to use only basictechniques or tools.
Even then they may not understand any or all of what they are doing.

質問 # 77
監査後、監査人は、直ちに対処しなければならない重大な発見事項があることを通知します。監査レポートを読むと、問題はポート 389 で実行されているサービスであることがわかりました。これはどのサービスであり、どのように問題に対処すればよいでしょうか。

• A. サービスはNTPです。暗号化するにはUDPからTCPに変更する必要があります。
• B. サービスは SMTP なので、電子メールを暗号化して送信する SMIME に変更する必要があります。
• C. サービスは LDAP です。これを 636 (LDPAPS) に変更する必要があります。
• D. 調査結果は、即時の対応を必要とせず、単なる提案です。

正解：C

解説：
https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol
LDAP, the Lightweight Directory Access Protocol, is a mature, flexible, and well supported standards-based mechanism for interacting with directory servers. It's often used for authentication and storing information about users, groups, and applications, but an LDAP directory server is a fairly general-purpose data store and can be used in a wide variety of applications.
The LDAP protocol can deal in quite a bit of sensitive data: Active Directory usernames, login attempts, failed-login notifications, and more. If attackers get ahold of that data in flight, they might be able to compromise data like legitimate AD credentials and use it to poke around your network in search of valuable assets.
Encrypting LDAP traffic in flight across the network can help prevent credential theft and other malicious activity, but it's not a failsafe-and if traffic is encrypted, your own team might miss the signs of an attempted attack in progress.
While LDAP encryption isn't standard, there is a nonstandard version of LDAP called Secure LDAP, also known as "LDAPS" or "LDAP over SSL" (SSL, or Secure Socket Layer, being the now-deprecated ancestor of Transport Layer Security).
LDAPS uses its own distinct network port to connect clients and servers. The default port for LDAP is port
389, but LDAPS uses port 636 and establishes TLS/SSL upon connecting with a client.

質問 # 78
プロのハッカーであるヘイリーは、競合組織の評判を傷つけるために、さまざまな検索エンジン、ソーシャル ネットワーキング サイト、Web スパイダー ツールを使用して、従業員と顧客の電子メール アドレスのリストとその他の関連情報を収集します。このプロセスで、ヘイリーは自動化ツールを使用して、ターゲット Web サイトから単語のリストを収集し、以前に収集した電子メール アドレスに対してさらにブルート フォース攻撃を実行します。
ヘイリーが対象のウェブサイトから単語のリストを収集するために使用するツールは何ですか?

• A. セルWL
• B. オーボット
• C. サイフォン
• D. シャドウソックス

正解：A

解説：
Gathering Wordlist from the Target Website An attacker uses the CeWL tool to gather a list of words from the target website and perform a brute-force attack on the email addresses gathered earlier. # Cewl www.certifiedhacker.com (P.200/184)

質問 # 79
John は、Web アプリケーション ファイアウォールのログを調査しており、誰かが次のものを挿入しようとしていることがわかっています。
キャラバフ[10]
バフ[>o] - 'a':
これはどのような種類の攻撃ですか?

• A. バッファオーバーフロー
• B. SQLインジェクション
• C. CSRF
• D. XSS

正解：A

解説：
Buffer overflow this attack is an anomaly that happens when software writing data to a buffer overflows the buffer's capacity, leading to adjacent memory locations being overwritten. In other words, an excessive amount of information is being passed into a container that doesn't have enough space, which information finishes up replacing data in adjacent containers.Buffer overflows are often exploited by attackers with a goal of modifying a computer's memory so as to undermine or take hold of program execution.

What's a buffer?A buffer, or data buffer, is a neighborhood of physical memory storage wont to temporarily store data while it's being moved from one place to a different . These buffers typically sleep in RAM memory. Computers frequently use buffers to assist improve performance; latest hard drives cash in of buffering to efficiently access data, and lots of online services also use buffers. for instance , buffers are frequently utilized in online video streaming to stop interruption. When a video is streamed, the video player downloads and stores perhaps 20% of the video at a time during a buffer then streams from that buffer. This way, minor drops in connection speed or quick service disruptions won't affect the video stream performance.Buffers are designed to contain specific amounts of knowledge . Unless the program utilizing the buffer has built-in instructions to discard data when an excessive amount of is shipped to the buffer, the program will overwrite data in memory adjacent to the buffer.Buffer overflows are often exploited by attackers to corrupt software. Despite being well-understood, buffer overflow attacks are still a serious security problem that torment cyber-security teams. In 2014 a threat referred to as 'heartbleed' exposed many many users to attack due to a buffer overflow vulnerability in SSL software.
How do attackers exploit buffer overflows?An attacker can deliberately feed a carefully crafted input into a program which will cause the program to undertake and store that input during a buffer that isn't large enough, overwriting portions of memory connected to the buffer space. If the memory layout of the program is well-defined, the attacker can deliberately overwrite areas known to contain executable code. The attacker can then replace this code together with his own executable code, which may drastically change how the program is meant to figure .For example if the overwritten part in memory contains a pointer (an object that points to a different place in memory) the attacker's code could replace that code with another pointer that points to an exploit payload. this will transfer control of the entire program over to theattacker's code.

質問 # 80
通常は VPN で、2 つのデバイス間の安全なチャネルを設定するために使用されるプロトコルはどれですか?

• A. PEM
• B. SET
• C. IPSEC
• D. ppp

正解：C

質問 # 81
BigUniversity のネットワーク管理者である Bob は、一部の学生がインターネットにアクセスするために有線ネットワークでノートブックを接続していることに気づきました。大学のキャンパスには、教授や許可された訪問者が利用できるイーサネット ポートが多数ありますが、学生には使用できません。
IDS がネットワーク内のマルウェア活動を警告したときに、ボブはこれを認識しました。この問題を回避するにはどうすればよいでしょうか?

• A. 生徒にワイヤレスネットワークを使用するように指示する
• B. 802.1xプロトコルを使用する
• C. 生徒を別のVLANに分ける
• D. スイッチの未使用ポートを無効にする

正解：B

質問 # 82
ポートが開いている場合の NULL スキャンに対する適切な応答は何ですか?

• A. ACK
• B. PSH
• C. SYN
• D. 応答なし
• E. RST
• F. FIN

正解：D

質問 # 83
ファイアウォールは、事前に定義された一連のルールに基づいて、ターゲット ネットワークに出入りするトラフィックを制御および監視できるソフトウェアまたはハードウェア システムです。次のどのタイプのファイアウォールが SQL インジェクション攻撃から保護できますか?

• A. Web アプリケーション ファイアウォール
• B. データ駆動型ファイアウォール
• C. パケットファイアウォール
• D. ステートフルファイアウォール

正解：A

解説：
https://en.wikipedia.org/wiki/Web_application_firewall
A web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a web application's known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration.

質問 # 84
......

無料でゲット！高評価ECCouncil 312-50v12日本語試験問題集を今すぐダウンロード！：https://jp.fast2test.com/312-50v12-JPN-premium-file.html