EC-COUNCIL 312-92 시험 개요:

EC-COUNCIL 312-92 시험 요강 주제:

최신 ECSP 312-92 무료샘플문제

문제 #1
Lori is creating a login page using Java on one of her websites with the following code.
What vulnerability or issue is the code susceptible to?
conn = pool.getConnection();
String sql = "select * from user where
username='" + "' and password='" + password +
"'";
stmt = conn.createstatement();
rs = stmt.executeQuery(sql);
if (rs.next())
{
loggedIn = true;
out.println("Successfully logged in");
}
else
{
out.println("Username and/or password not valid");
}

A. Directory transversal
B. SQL slamming
C. Query string manipulation
D. SQL injection

문제 #2
What will the following SQL command accomplish?
USE Accounting
GO
EXECUTE
sp_grantdbaccess guest

A. Change default database for guest user to Accounting database
B. Add guest user to the Accounting security group
C. Add guest user to the Accounting database
D. Add guest group to the Accounting database

문제 #3
John is creating a website using ASP. John's web pages will have a number of calculations, so he decides to create an include file that the pages will call so he does not have to rewrite the formula numerous times. John's website will be hosted by a server running IIS. John wants to ensure that the include source code is not revealed when the pages are viewed, so he gives the include an .asp extension.
When IIS processes the include file, which system file will be used to hide the include source code?

A. Include.dll
B. IISASP.dll
C. IIS.dll
D. ASP.dll

문제 #4
Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha.
The developers in Kenny's company have just finished creating a 3D first person shooter game that will be released to the market within the next couple of months. Kenny is trying to decide what type of license or activation code structure they should use for the game to prevent piracy and protect their product. Kenny decides to go with an approach that will allow each sold copy to be activated online up to five times because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?

A. Loose license enforced - reasonable use
B. Strict license terms enforced
C. Monitor only mode
D. License terms enforced - fair use

문제 #5
Paul wants to capture audit information on PLSQL so he executes the following command:
sqlplus "sys / as sysdba"
Enter password: password123!!!!
SQL> ALTER SYSTEM SET AUDIT_TRAIL = OS
SCOPE=SPFILE;
SQL> SHUTDOWN NORMAL;
SQL> STARTUP;
What privileges has Paul logged on with?

A. SYS
B. SYSDBA
C. Root
D. ADMIN

질문과 대답: