구매 전에 SEC504 샘플 문제를 무료로 확인해 보실 수 있습니다. ExamPassdump이 제공하는 SANS Hacker Tools, Techniques, Exploits and Incident Handling 데모로 문제 품질과 구성을 직접 살펴보신 후 결정하시기 바랍니다.

SANS SEC504 시험 개요:

SANS SEC504 시험 요강 주제:

SANS SEC504 시험에 대한 질문과 답변 모음

최신 Certified Incident Handler SEC504 무료샘플문제

문제 #1

Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

A. Land attack
B. Teardrop attack
C. Denial of Service attack
D. Replay attack

문제 #2

Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP spoofing may allow an attacker to sniff data frames on a local area network (LAN), modify the traffic, or stop the traffic altogether. The principle of ARP spoofing is to send fake ARP messages to an Ethernet LAN. What steps can be used as a countermeasure of ARP spoofing?
Each correct answer represents a complete solution. Choose all that apply.

A. Using ARP Guard utility
B. Using smash guard utility
C. Using static ARP entries on servers, workstation and routers
D. Using ARP watch utility
E. Using IDS Sensors to check continually for large amount of ARP traffic on local subnets

문제 #3

Which of the following is a network worm that exploits the RPC sub-system vulnerability present in the Microsoft Windows operating system?

A. Win32/PSW.OnLineGames
B. WMA/TrojanDownloader.GetCodec
C. Win32/Conflicker
D. Win32/Agent

문제 #4

You work as a Senior Marketing Manager for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning. The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident response team announced that this was a controlled event not an incident.
Which of the following steps of an incident handling process was performed by the incident response team?

A. Eradication
B. Identification
C. Containment
D. Preparation

문제 #5

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network. Which of the following phases of the Incident handling process should you follow next to handle this incident?

A. Recovery
B. Identification
C. Containment
D. Preparation

질문과 대답: