Free 412-79V9 Exam Braindumps
EC-Council Certified Security Analyst (ECSA) v9 Questions 101–105 (page: 22)

Updated On: 10-Feb-2026

You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using Idp.exe.
What are you trying to accomplish here?

  1. Poison the DNS records with false records
  2. Enumerate MX and A records from DNS
  3. Establish a remote connection to the Domain Controller
  4. Enumerate domain user accounts and built-in groups

Answer(s): D



Which of the following statements is true about the LM hash?

  1. Disabled in Windows Vista and 7 OSs
  2. Separated into two 8-character strings
  3. Letters are converted to the lowercase
  4. Padded with NULL to 16 characters

Answer(s): A


Reference:

http://www.onlinehashcrack.com/how_to_crack_windows_passwords.php (first paragraph of the page)



Output modules allow Snort to be much more flexible in the formatting and presentation of output to its users. Snort has 9 output plug-ins that push out data in different formats.
Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?

  1. unified
  2. csv
  3. alert_unixsock
  4. alert_fast

Answer(s): B



Mason is footprinting an organization to gather competitive intelligence. He visits the company's website for contact information and telephone numbers but does not find any. He knows the entire staff directory was listed on their website 12 months. How can he find the directory?

  1. Visit Google's search engine and view the cached copy
  2. Crawl and download the entire website using the Surfoffline tool and save them to his computer
  3. Visit the company's partners' and customers' website for this information
  4. Use WayBackMachine in Archive.org web site to retrieve the Internet archive

Answer(s): D



Which of the following shields Internet users from artificial DNS data, such as a deceptive or mischievous address instead of the genuine address that was requested?

  1. DNSSEC
  2. Firewall
  3. Packet filtering
  4. IPSec

Answer(s): A


Reference:

http://tools.ietf.org/html/draft-osterweil-dane-ipsec-01 (abstract, first para)



Viewing page 22 of 42
Viewing questions 106 - 110 out of 203 questions


Post your Comments and Discuss EC-Council 412-79V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!