EC-COUNCIL 412-79v8 Actual Free Exam Questions & Community Discussion

  • Exam Code/Number: 412-79v8
  • Exam Name/Title: EC-Council Certified Security Analyst (ECSA)
  • Certification Provider: EC-COUNCIL
  • Corresponding Certification: Certified Ethical Hacker
  • Exam Questions: 196
  • Updated On: May 30, 2026
In the context of penetration testing, what does blue teaming mean?
Correct Answer: B Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Network scanning is used to identify the available network resources. Which one of the following is also known as a half-open scan, because a full TCP connection is never completed and it is used to determine which ports are open and listening on a target device?
Correct Answer: A Vote an answer
Firewall is an IP packet filter that enforces the filtering and security policies to the flowing network traffic. Using firewalls in IPv6 is still the best way of protection from low level attacks at the network and transport layers. Which one of the following cannot handle routing protocols properly?
Correct Answer: C Vote an answer
Identify the transition mechanism to deploy IPv6 on the IPv4 network from the following diagram.
Correct Answer: B Vote an answer
Which of the following methods is used to perform server discovery?
Correct Answer: B Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which one of the following 802.11 types uses either FHSS or DSSS for modulation?
Correct Answer: A Vote an answer
The amount of data stored in organizational databases has increased rapidly in recent years due to the rapid advancement of information technologies. A high percentage of these data is sensitive, private and critical to the organizations, their clients and partners.
Therefore, databases are usually installed behind internal firewalls, protected with intrusion detection mechanisms and accessed only by applications. To access a database, users have to connect to one of these applications and submit queries through them to the database. The threat to databases arises when these applications do not behave properly and construct these queries without sanitizing user inputs first.
Identify the injection attack represented in the diagram below:
Correct Answer: D Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following is not a condition specified by Hamel and Prahalad (1990)?
Correct Answer: D Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Variables are used to define parameters for detection, specifically those of your local network and/or specific servers or ports for inclusion or exclusion in rules. These are simple substitution variables set with the var keyword. Which one of the following operator is used to define metavariables?
Correct Answer: B Vote an answer
Amazon, an IT based company, conducts a survey on the usage of the Internet. They found that company employees spend most of the time at work surfing the web for their personal use and for inappropriate web site viewing. Management decide to block all such web sites using URL filtering software.

How can employees continue to see the blocked websites?
Correct Answer: D Vote an answer
Identify the type of firewall represented in the diagram below:
Correct Answer: A Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following statement holds true for TCP Operation?
Correct Answer: C Vote an answer
Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?
Correct Answer: A Vote an answer
Firewall and DMZ architectures are characterized according to its design. Which one of the following architectures is used when routers have better high-bandwidth data stream handling capacity?
Correct Answer: B Vote an answer
0
0
0
10