QUESTION: 1

A WHERE clause in SQL specifies that a SQL Data Manipulation Language (DML) statement should only affect rows that meet specified criteria. The criteria are expressed in the form of predicates. WHERE clauses are not mandatory clauses of SQL DML statements, but can be used to limit the number of rows affected by a SQL DML statement or returned by a query.

A pen tester is trying to gain access to a database by inserting exploited query statements with a WHERE clause. The pen tester wants to retrieve all the entries from the database using the WHERE clause from a particular table (e.g. StudentTable).
What query does he need to write to retrieve the information?

EXTRACT* FROM StudentTable WHERE roll_number = 1 order by 1000
DUMP * FROM StudentTable WHERE roll_number = 1 AND 1=1--
SELECT * FROM StudentTable WHERE roll_number = '' or '1' = '1`
RETRIVE * FROM StudentTable WHERE roll_number = 1'#

Answer(s): C

Reveal Solution Next Question

QUESTION: 2

Which of the following has an offset field that specifies the length of the header and data?

IP Header
UDP Header
ICMP Header
TCP Header

Answer(s): D

Reveal Solution Next Question

QUESTION: 3

War Driving is the act of moving around a specific area, mapping the population of wireless access points for statistical purposes. These statistics are then used to raise awareness of the security problems associated with these types of networks.
Which one of the following is a Linux based program that exploits the weak IV (Initialization Vector) problem documented with static WEP?

Airsnort
Aircrack
WEPCrack
Airpwn

Answer(s): A

Reveal Solution Next Question

QUESTION: 4

Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

Sunbelt Network Security Inspector (SNSI)
CORE Impact
Canvas
Microsoft Baseline Security Analyzer (MBSA)

Answer(s): C

Reveal Solution Next Question

Free 412-79 Exam Braindumps (page: 2)

Pass your EC-Council Certified Security Analyst (ECSA) Exam exam with these free Actual Questions and Answers

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

412-79 Exam Discussions & Posts