Free 412-79V9 Exam Braindumps
EC-Council Certified Security Analyst (ECSA) v9 Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

Which of the following is developed to address security concerns on time and reduce the misuse or threat of attacks in an organization?

  1. Vulnerabilities checklists
  2. Configuration checklists
  3. Action Plan
  4. Testing Plan

Answer(s): A



Identify the type of authentication mechanism represented below:

  1. NTLMv1
  2. NTLMv2
  3. LAN Manager Hash
  4. Kerberos

Answer(s): D

Explanation:

The client authenticates itself to the Authentication Server (AS) which forwards the username to a key distribution center (KDC). The KDC issues a ticket granting ticket (TGT), which is time stamped, encrypts it using the user's password and returns the encrypted result to the user's workstation. This is done infrequently, typically at user logon; the TGT expires at some point, though may be transparently renewed by the user's session manager while they are logged in.
When the client needs to communicate with another node ("principal" in Kerberos parlance) the client sends the TGT to the ticket granting service (TGS), which usually shares the same host as the KDC. After verifying the TGT is valid and the user is permitted to access the requested service, the TGS issues a ticket and session keys, which are returned to the client. The client then sends the ticket to the service server (SS) along with its service request.


Reference:

http://en.wikipedia.org/wiki/Kerberos_(protocol)



Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to-understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?

  1. Tcpdump
  2. Capinfos
  3. Tshark
  4. Idl2wrs

Answer(s): B



How many possible sequence number combinations are there in TCP/IP protocol?

  1. 320 billion
  2. 32 million
  3. 4 billion
  4. 1 billion

Answer(s): C



Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

  1. Event Log Tracker
  2. Sawmill
  3. Syslog Manager
  4. Event Log Explorer

Answer(s): B



Viewing page 19 of 42
Viewing questions 91 - 95 out of 203 questions


Post your Comments and Discuss EC-Council 412-79V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!