EC-Council Certified Security Analyst (ECSA): 412-79V8

External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

Which of the following types of penetration testing is performed with no prior knowledge of the site?

A. Blue box testing

B. White box testing C. Grey box testing

D. Black box testing

Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

A. USA Patriot Act 2001

B. Sarbanes-Oxley 2002

C. Gramm-Leach-Bliley Act (GLBA)

D. California SB 1386

Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

A. Sunbelt Network Security Inspector (SNSI)

B. CORE Impact

C. Canvas

D. Microsoft Baseline Security Analyzer (MBSA)