EC0-479最も有効な質問と解答で勉強

2026年にEC-COUNCIL EC-Council Certified Security Analyst(ECSA)へ挑戦するなら、再受験にかかる費用負担はできるだけ避けたいところです。Tech4ExamのEC0-479練習問題で本番形式の問い方に慣れておけば、一度で結果を出すための土台づくりが進みます。

EC-COUNCIL EC0-479 試験概要:

EC-COUNCIL EC0-479 試験シラバストピック:

EC0-479に挑戦する方へ – よくある質問まとめ

EC-COUNCIL EC-Council Certified Security Analyst(ECSA) 認定 EC0-479 試験問題：

問題 #1

Jessica works as systems administrator for a large electronics firm. She wants to scan her
network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

A. Smurf scan
B. Ping trace
C. Tracert
D. ICMP ping sweep

問題 #2

Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposure the site has received so far. Harold navigates to google.com and types in the following search.
link:www.ghttech.net
What will this search produce?

A. All search engines that link to .net domains
B. All sites that link to ghttech.net
C. All sites that ghttech.net links to
D. Sites that contain the code: link:www.ghttech.net

問題 #3

Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

A. Stealth
B. Filtered
C. Closed
D. Open

問題 #4

You are the security analyst working for a private company out of France. Your current assignment is to obtain credit card information from a Swiss bank owned by that company. After initial reconnaissance, you discover that the bank security defenses are very strong and would take too long to penetrate. You decide to get the information by monitoring the traffic between the bank and one of its subsidiaries in London. After monitoring some of the traffic, you see a lot of FTP packets traveling back and forth. You want to sniff the traffic and extract usernames and passwords. What tool could you use to get this information?

A. Airsnort
B. Snort
C. Ettercap
D. RaidSniff

問題 #5

Study the log given below and answer the following question: Apr 24 14:46:46 [4663]: spp_portscan: portscan detected from 194.222.156.169 Apr 24 14:46:46 [4663]: IDS27/FIN Scan: 194.222.156.169:56693 -> 172.16.1.107:482 Apr 24 18:01:05 [4663]: IDS/DNSversion-query: 212.244.97.121:3485 -> 172.16.1.107:53 Apr 24 19:04:01 [4663]: IDS213/ftp-passwd-retrieval: 194.222.156.169:1425 -> 172.16.1.107:21 Apr 25 08:02:41 [5875]: spp_portscan: PORTSCAN DETECTED from 24.9.255.53 Apr 25 02:08:07 [5875]: IDS277/DNS-version-query: 63.226.81.13:4499 -> 172.16.1.107:53 Apr 25 02:08:07 [5875]: IDS277/DNS-version-query: 63.226.81.13:4630 -> 172.16.1.101:53 Apr 25
02:38:17 [5875]: IDS/RPC-rpcinfo-query: 212.251.1.94:642 -> 172.16.1.107:111 Apr 25
19:37:32 [5875]: IDS230/web-cgi-space-wildcard: 198.173.35.164:4221 -> 172.16.1.107:80 Apr 26 05:45:12 [6283]: IDS212/dns-zone-transfer: 38.31.107.87:2291 -> 172.16.1.101:53 Apr 26 06:43:05 [6283]: IDS181/nops-x86: 63.226.81.13:1351 -> 172.16.1.107:53 Apr 26
06:44:25 victim7 PAM_pwdb[12509]: (login) session opened for user simple by (uid=0) Apr 26 06:44:36 victim7 PAM_pwdb[12521]: (su) session opened for user simon by simple(uid=506) Apr 26 06:45:34 [6283]: IDS175/socks-probe: 24.112.167.35:20 -> 172.16.1.107:1080 Apr 26 06:52:10 [6283]: IDS127/telnet-login-incorrect: 172.16.1.107:23 > 213.28.22.189:4558 Precautionary measures to prevent this attack would include writing firewall rules. Of these firewall rules,
which among the following would be appropriate?

A. Block all UDP traffic
B. Disallow TCP53 in from secondaries or ISP server to DNS server
C. Disallow UDP53 in from outside to DNS server
D. Allow UDP53 in from DNS server to outside

解説：