Free ECSS Exam Dumps Preview

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He observes that the We-are-secure server is vulnerable to a special type of DoS attack and he makes the following suggestions to the security authority to protect the server from this DoS attack. The countermeasures against this type of DoS attack are as follows:

l Disabling IP-directed broadcasts at the We-are-secure router

l Configuring local computers so as not to respond to such ICMP packets that are configured to be sent to IP broadcast addresses

Which of the following DoS attacks has John discovered as a vulnerability for the We-are-secure security network?

Which of the following is the first computer virus that was used to infect the boot sector of storage media formatted with the DOS File Allocation Table (FAT) file system?

Sam, a bank employee, develops a program and uploads it to the bank's server. He deducts $1 a month from the account of every customer using the program. Probably no account holder will notice this type of illegal debit, but Sam will make a good amount of money every month.

Which of the following types of cybercrime is Sam performing?

Which of the following is an example of a worm used in the Linux operating system?

You work as a Network Administrator for Infonet Inc. The company uses Wired Equivalent Privacy (WEP) for wireless security.
Who among the following can authenticate from the access point of the network?

A attack is designed to bring loss of network connectivity and services by consuming the bandwidth of a user's network.

What is the name of the first computer virus that infected the boot sector of the MS-DOS operating system?

Which of the following password cracking attacks is implemented by calculating all the possible hashes for a set of characters?

Which of the following malware spread through the Internet and caused a large DoS attack in 1988?

Which of the following is provided by Digital signatures?

Which of the following Trojans opens a very large number of Web browser windows?

Which of the following components are usually found in an Intrusion detection system (IDS)?

Each correct answer represents a complete solution. Choose two.

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following pre-attack phases while testing the security of the server:

- Footprinting
- Scanning

Now he wants to conduct the enumeration phase. Which of the following tools can John use to conduct it?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements are true about routers?

Each correct answer represents a complete solution. Choose all that apply.

What is the critical evaluation of the most relevant information on a given topic known as?

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using dumpster diving to gather information about Weare-secure, Inc.
In which of the following steps of malicious hacking does dumpster diving come under?

Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?

You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network.

What method would be best for finding such flaws?

Which of the following statements explains the dumpster diving hacking technique?

Which of the following tools provides a great solution for auditing and testing the recognition and response capabilities of the corporate security defenses?

You work as a Network Administrator for Infonet Inc. The company's office has a wireless network.
Wireless access point on the network works as a router and DHCP server. You want to configure a laptop to connect to the wireless network.

What will you configure on the laptop to accomplish the task?

Which of the following wireless networks transmits data probably at 115 Kbps?

Which of the following protocols of the TCP/IP suite is used in the application layer of the OSI model?

Which of the following attacks CANNOT be detected by an Intrusion Detection System (IDS)?

Each correct answer represents a complete solution. Choose all that apply.

Victor is a novice Ethical Hacker. He is learning the hacking process, i.e., the steps taken by malicious hackers to perform hacking.

Which of the following steps is NOT included in the hacking process?

Firewalking is a technique that can be used to gather information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which of the following are pre-requisites for an attacker to conduct firewalking?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

What level of encryption is used by syskey?

According to the Internet Crime Report 2009, which of the following complaint categories is on the top?

You are the Administrator for a corporate network. You are concerned about denial of service attacks.

Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?

Which of the following is an example of a social engineering attack?

Which of the following proxy servers is placed anonymously between the client and remote server and handles all of the traffic from the client?

Which of the following laws was formed by the legislative branch of the United States government?

Which of the following parameters are required to be followed on receiving a suspicious mail according to the Department of Justice?

Each correct answer represents a part of the solution. Choose all that apply.

Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some confidential information is being leaked out by an employee of the company. Rick suspects that someone is sending the information through email. He checks the emails sent by some employees to other networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography technique to send data in a disguised form. Which of the following techniques is Sam using?

Each correct answer represents a part of the solution. Choose all that apply.

Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise?

Which of the following forensic tool suite is developed for Linux operating system?

Which of the following statements correctly defines a script kiddie?

Which of the following tools automates the password guessing in NetBIOS sessions and can also be used to perform a manual dictionary attack?

Adam, a novice Web user is getting large amount of unsolicited commercial emails on his email address.
He suspects that the emails he is receiving are the Spam. Which of the following steps will he take to stop the Spam?

Each correct answer represents a complete solution. Choose all that apply.

By gaining full control of router, hackers often acquire full control of the network. Which of the following methods are commonly used to attack Routers?

Each correct answer represents a complete solution. Choose all that apply.

You are a professional Computer Hacking forensic investigator. You have been called to collect the evidences of Buffer Overflows or Cookie snooping attack. Which of the following logs will you review to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following steps of the preattack phase:

-Information gathering
-Determining network range
-Identifying active machines
-Finding open ports and applications
-OS fingerprinting
-Fingerprinting services

Now John wants to perform network mapping of the We-are-secure network. Which of the following tools can he use to accomplish his task?

Each correct answer represents a complete solution. Choose all that apply.

You have made a program secure.c to display which ports are open and what types of services are running on these ports. You want to write the program's output to standard output and simultaneously copy it into a specified file.

Which of the following commands will you use to accomplish the task?

Jason works as a System Administrator for Passguide Inc. The company has a Windows-based network.
Sam, an employee of the company, accidentally changes some of the applications and system settings. He complains to Jason that his system is not working properly. To troubleshoot the problem, Jason diagnoses the internals of his computer and observes that some changes have been made in Sam's computer registry. To rectify the issue, Jason has to restore the registry.

Which of the following utilities can Jason use to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

Maria works as the Chief Security Officer for PassGuide Inc. She wants to send secret messages to the CEO of the company. To secure these messages, she uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'.

What technique is Maria using?

You work as a professional Computer Hacking Forensic Investigator for DataEnet Inc. You want to investigate e-mail information of an employee of the company. The suspected employee is using an online e-mail system such as Hotmail or Yahoo. Which of the following folders on the local computer will you review to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He observes that the We-are-secure server is vulnerable to a special type of DoS attack and he makes the following suggestions to the security authority to protect the server from this DoS attack. The countermeasures against this type of DoS attack are as follows:

Disabling IP-directed broadcasts at the We-are-secure router

Configuring local computers so as not to respond to such ICMP packets that are configured to be sent to IP broadcast addresses

Which of the following DoS attacks has John discovered as a vulnerability for the We-are-secure security network?

Which of the following software can be used to protect a computer system from external threats (viruses, worms, malware, or Trojans) and malicious attacks?

Each correct answer represents a part of the solution. Choose all that apply.

Brutus is a password cracking tool that can be used to crack the following authentications:

-HTTP (Basic Authentication)
-HTTP (HTML Form/CGI)
-POP3 (Post Office Protocol v3)
-FTP (File Transfer Protocol)
-SMB (Server Message Block)
-Telnet

Which of the following attacks can be performed by Brutus for password cracking?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following is a transport layer circuit-level proxy server?