EC-COUNCIL 312-92 考試概覽:

認證廠商:	EC-Council
考試名稱:	EC-Council 認證安全程式設計師 v2 (ECSP)
考試代碼:	312-92
實際考試題數:	約 99 題
支援語言:	English
範例考題:	EC-COUNCIL 312-92 範例考題
官方大綱網址:	https://www.eccouncil.org/

EC-COUNCIL 312-92 考試大綱主題:

章節	目標
主題 1: 應用程式安全測試	- 靜態分析與動態測試 - 滲透測試基礎
主題 2: 安全程式設計原則	- 安全程式設計基礎 - 特定語言的安全實務 (.NET/Java)
主題 3: 開發生命週期的安全機制	- 將安全機制整合至 SDLC - 安全開發生命週期模型
主題 4: 弱點與攻擊利用	- 防範攻擊利用的技術 - 常見軟體弱點

最新的 ECSP 312-92 免費考試真題：

問題 #1

Mathew is working on a Fedora machine and is having issues with some shellcode he wrote that is producing errors. Mathew decides to download and use Ktrace to debug the shellcode to see where the errors are originating from. Why will his plan not work?

A. Ktrace cannot debug errors, it only notifies of successful calls
B. Ktrace cannot debug shellcode
C. Ktrace only works on *BSD platforms
D. Ktrace only works on Windows platforms

答案：C

問題 #2

Harold is writing a J2ME program that run an inventory application on his company's PDAs.
Employees will use their PDA to scan barcodes into the program Harold is writing. Harold is very concerned about securing his program's code and ensuring its integrity once it is utilized. Harold particularly wants to stop the execution of class files loaded in the virtual machine in any way, what is not allowed by java virtual machine specification. What level of J2ME security should Harold implement to accomplish this?

A. Application level security
B. End-to-end security
C. High-end security
D. Low-level-security

答案：D

問題 #3

Shayla is designing a web-based application that will pass data to and from a company extranet. This data is very sensitive and must be protected at all costs. Shayla will use a digital certificate and a digital signature to protect the data. The digital signature she has chosen to use is based on the difficulty in computing discrete logarithms. Which digital signature has she chosen?

A. Diffie-Hellman
B. Rabin
C. ElGamal
D. SA-PSS

答案：C

問題 #4

David is a developer that has created an application using the secure RPC protocol. Before anyone can actually use the program, where must David add entries for the users so that they can gain access?

A. /etc/root/pkusers
B. /etc/publickey
C. /system/root/rpcusers
D. /system/root/publickey

答案：B

問題 #5

What function can be used with SQL to encrypt user supplied-passwords to that they can be compared with the encrypted passwords stored on the SQL server?