EC-COUNCIL 412-79 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Network Penetration Testing - Internal | 10-12% | - LAN and Active Directory testing - Internal network enumeration - Local system and privilege escalation |
| Topic 2: Wireless & Mobile Penetration Testing | 6-8% | - Mobile application vulnerabilities - Bluetooth and radio protocol testing - Wi-Fi security assessment |
| Topic 3: Open-Source Intelligence (OSINT) | 5-6% | - OSINT automation tools - Web-based intelligence gathering - Social media and public data analysis |
| Topic 4: Cloud & Virtual Environment Testing | 6-8% | - Virtualization infrastructure assessment - Identity and access management in cloud - Cloud service model security |
| Topic 5: Analysis & Reporting | 8-10% | - Vulnerability validation and risk ranking - Remediation recommendations - Executive and technical report writing |
| Topic 6: Pre-Penetration Testing Steps | 7-9% | - Scope definition and rules of engagement - Test plan development - Legal and compliance considerations |
| Topic 7: Database Penetration Testing | 7-9% | - Database enumeration and discovery - SQL injection techniques - Database security controls |
| Topic 8: Penetration Testing Scoping & Engagement | 5-7% | - Risk assessment and impact analysis - Engagement boundaries - Contract and agreement preparation |
| Topic 9: Network Penetration Testing - External | 10-12% | - External vulnerability assessment - Firewall and perimeter testing - External reconnaissance and scanning |
| Topic 10: Web Application Penetration Testing | 12-14% | - OWASP Top 10 vulnerabilities - Input validation and injection attacks - Authentication and session testing |
| Topic 11: Information Gathering Methodology | 8-10% | - DNS, WHOIS, and network enumeration - OSINT and passive information collection - Footprinting and reconnaissance techniques |
EC-COUNCIL EC-Council Certified Security Analyst (ECSA) Sample Questions:
1. Due to illegal inputs, various types of TCP stacks respond in a different manner. Some IDSs do not take into account the TCP protocol's urgency feature, which could allow testers to evade the IDS.
Penetration tester needs to try different combinations of TCP flags (e.g. none, SYN/FIN, SYN/RST, SYN/FIN/ACK, SYN/RST/ACK, and All Flags) to test the IDS.
Which of the following TCP flag combinations combines the problem of initiation, midstream, and termination flags with the PSH and URG?
A) SYN/FIN/ACK
B) SYN/FIN
C) All Flags
D) SYN/RST/ACK
2. John, a penetration tester, was asked for a document that defines the project, specifies goals, objectives, deadlines, the resources required, and the approach of the project. Which of the following includes all of these requirements?
A) Penetration testing project plan
B) Penetration testing schedule plan
C) Penetration testing software project management plan
D) Penetration testing project scope report
3. How many bits is Source Port Number in TCP Header packet?
A) 16
B) 48
C) 64
D) 32
4. Which one of the following is a useful formatting token that takes an int * as an argument, and writes the number of bytes already written, to that location?
A) "%w"
B) "%s"
C) "%n"
D) "%p"
5. Which of the following scan option is able to identify the SSL services?
A) -sS
B) -sV
C) -sU
D) -sT
Solutions:
| Question # 1 Answer: C | Question # 2 Answer: A | Question # 3 Answer: A | Question # 4 Answer: C | Question # 5 Answer: B |
1107 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
