최신EC-COUNCIL EC-Council Certified Secure Programmer v2 - 312-92무료샘플문제
문제1
Lori is creating a login page using Java on one of her websites with the following code.
What vulnerability or issue is the code susceptible to?
conn = pool.getConnection();
String sql = "select * from user where
username='" + "' and password='" + password +
"'";
stmt = conn.createstatement();
rs = stmt.executeQuery(sql);
if (rs.next())
{
loggedIn = true;
out.println("Successfully logged in");
}
else
{
out.println("Username and/or password not valid");
}
Lori is creating a login page using Java on one of her websites with the following code.
What vulnerability or issue is the code susceptible to?
conn = pool.getConnection();
String sql = "select * from user where
username='" + "' and password='" + password +
"'";
stmt = conn.createstatement();
rs = stmt.executeQuery(sql);
if (rs.next())
{
loggedIn = true;
out.println("Successfully logged in");
}
else
{
out.println("Username and/or password not valid");
}
정답: A
문제2
What will the following command accomplish?
c:\signtool12winnt\signtool -L -d a:\tmpcert:a:\cert
What will the following command accomplish?
c:\signtool12winnt\signtool -L -d a:\tmpcert:a:\cert
정답: D
문제3
Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha.
The developers in Kenny's company have just finished creating a 3D first person shooter game that will be released to the market within the next couple of months. Kenny is trying to decide what type of license or activation code structure they should use for the game to prevent piracy and protect their product. Kenny decides to go with an approach that will allow each sold copy to be activated online up to five times because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?
Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha.
The developers in Kenny's company have just finished creating a 3D first person shooter game that will be released to the market within the next couple of months. Kenny is trying to decide what type of license or activation code structure they should use for the game to prevent piracy and protect their product. Kenny decides to go with an approach that will allow each sold copy to be activated online up to five times because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?
정답: A
문제4
What type of encryption will be used from the following code?
Dim Publickey As Byte() = {214,46,220,83,160,73,40,39,201
155,19,202,3,11,191,178,56,74,90,36,248,103,
18,144,170,163,145,87,54,61,34,220,222,207,
137,149,173,14,92,120,206,222,158,28,40,24,
30,16,175,108,128,35,203,118,40,121,113,125,
216,130,11,24,9,0,48,194,240,105,44,76,34,57,
249,228,125,80,38,9,136,29,117,207,139,168,181,
85,137,126,10,126,242,120,247,121,8,100,12,201,
171,38,226,193,180,190,117,177,87,143,242,213,
11,44,18,0,113,93,106,99,179,68,175,211,164,116,
64,148,226,254,172,147}
Dim Exponent As Byte() = {1,0,1}
Dim Encrypted SymmetricKey() As Byte
Dim Encrypted SymmetricIV() As Byte
Dim RSA as New RSACryptoServiceProvider()
Dim RSAKeyInfo As New RSAParameters()
RSAKeyInfo.Modules = PublicKey
RSAKeyInfo.Exponent = Exponent
RSA.ImportParameters(RSAKeyInfo)
Dim RM As New RijendaelManaged()
EncryptedSymmetricKey = RSA.Encrypt(RM.Key,False)
EncryptedSymmetricIV = RSA.Encrypt(RM.Key,False)
What type of encryption will be used from the following code?
Dim Publickey As Byte() = {214,46,220,83,160,73,40,39,201
155,19,202,3,11,191,178,56,74,90,36,248,103,
18,144,170,163,145,87,54,61,34,220,222,207,
137,149,173,14,92,120,206,222,158,28,40,24,
30,16,175,108,128,35,203,118,40,121,113,125,
216,130,11,24,9,0,48,194,240,105,44,76,34,57,
249,228,125,80,38,9,136,29,117,207,139,168,181,
85,137,126,10,126,242,120,247,121,8,100,12,201,
171,38,226,193,180,190,117,177,87,143,242,213,
11,44,18,0,113,93,106,99,179,68,175,211,164,116,
64,148,226,254,172,147}
Dim Exponent As Byte() = {1,0,1}
Dim Encrypted SymmetricKey() As Byte
Dim Encrypted SymmetricIV() As Byte
Dim RSA as New RSACryptoServiceProvider()
Dim RSAKeyInfo As New RSAParameters()
RSAKeyInfo.Modules = PublicKey
RSAKeyInfo.Exponent = Exponent
RSA.ImportParameters(RSAKeyInfo)
Dim RM As New RijendaelManaged()
EncryptedSymmetricKey = RSA.Encrypt(RM.Key,False)
EncryptedSymmetricIV = RSA.Encrypt(RM.Key,False)
정답: D
문제5
What type of error will result from the following statement?
int main(int argc, char* argv[])
{
char i[7];
strncpy(i, "sdfusdofof", sizeof(i));
}
What type of error will result from the following statement?
int main(int argc, char* argv[])
{
char i[7];
strncpy(i, "sdfusdofof", sizeof(i));
}
정답: C
문제6
Carl is writing cgi-bin scripts in PERL for some web pages. He is concerned about malicious users trying to exploit the site and/or the cgi-sripts. If Carl uses the following code, what will he be able to prevent?
$filename =~ s/[^A-Za-z0-9_-.//g
Carl is writing cgi-bin scripts in PERL for some web pages. He is concerned about malicious users trying to exploit the site and/or the cgi-sripts. If Carl uses the following code, what will he be able to prevent?
$filename =~ s/[^A-Za-z0-9_-.//g
정답: A
문제7
Gregory is a system administrator who oversees 15 Mac OS X servers for his company.
Three of his servers are at remote sites, but they still need to replicate and communicate with the servers at the main office. Gregory wants to use SSL to protect the LDAP traffic between all servers for security. For this to work properly, what port must be opened on the firewalls so that the SSL LDAP traffic can pass through?
Gregory is a system administrator who oversees 15 Mac OS X servers for his company.
Three of his servers are at remote sites, but they still need to replicate and communicate with the servers at the main office. Gregory wants to use SSL to protect the LDAP traffic between all servers for security. For this to work properly, what port must be opened on the firewalls so that the SSL LDAP traffic can pass through?
정답: A
문제8
Kevin is developing a webpage using html and javascript code. The webpage will have a lot of important content and will have a number of functions that Kevin does not want revealed through the source code. Why would Kevin choose to employ HTML Guardian to hide the source code of his webpage?
Kevin is developing a webpage using html and javascript code. The webpage will have a lot of important content and will have a number of functions that Kevin does not want revealed through the source code. Why would Kevin choose to employ HTML Guardian to hide the source code of his webpage?
정답: B
문제9
Kevin wants to use an SSL certificate from his Mac OS X server so that he can send and receive encrypted email. What would Kevin accomplish by typing in the following command?
certtool c k=/Users/root/Library/Keychains/certkc
Kevin wants to use an SSL certificate from his Mac OS X server so that he can send and receive encrypted email. What would Kevin accomplish by typing in the following command?
certtool c k=/Users/root/Library/Keychains/certkc
정답: B
문제10
Harold is writing a client-side socket program that will create a TCP connection to a remote server to retrieve data. What function should Harold use to create this connection?
Harold is writing a client-side socket program that will create a TCP connection to a remote server to retrieve data. What function should Harold use to create this connection?
정답: A