EC-Council Certified Security Analyst (ECSA) v10

Jacob is a penetration tester at TechSoft Inc. based at Singapore. The company assigned him the task of conducting penetration test on the IoT devices connected to the corporate network. As part of this process, he captured the network traffic of the devices, their mobile applications, and cloud connections to check whether any critical data are transmitted in plain text. Also, he tried to check whether SSL/TLS protocols are properly updated and implemented.

Which of the following IoT security issues Jacob is dealing with?

During an internal network audit, you are asked to see if there is any RPC server running on the network and if found, enumerate the associate RPC services.

Which port would you scan to determine the RPC server and which command will you use to enumerate the RPC services?

What is the target host IP in the following command?

C:\> firewalk -F 80 10.10.150.1 172.16.28.95 -p UDP

ARP spoofing is a technique whereby an attacker sends fake ("spoofed") Address Resolution Protocol (ARP) messages onto a Local Area Network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host (such as the default gateway), causing any traffic meant for that IP address to be sent to the attacker instead.
ARP spoofing attack is used as an opening for other attacks.

What type of attack would you launch after successfully deploying ARP spoofing?

Choose the correct option to define the Prefix Length.

A security analyst at Techsoft Solutions is performing penetration testing on the critical IT assets of the company. As part of this process, he is simulating the methodologies and techniques of a real attacker because he is provided with limited or zero information about the company and its assets.
Identify the type of testing performed by the security analyst?

Which Wireshark filter displays all the packets where the IP address of the source host is 10.0.0.7?

Joseph, a penetration tester, was hired by Xsecurity Services. Joseph was asked to perform a pen test on a client's network. He was not provided with any information about the client organization except the company name.
Identify the type of testing Joseph is going to perform for the client organization?

You are a security analyst performing a penetration tests for a company in the Midwest. After some initial

reconnaissance, you discover the IP addresses of some Cisco routers used by the company. You type in the following URL that includes the IP address of one of the routers:
http://172.168.4.131/level/99/exec/show/configAftertypinginthisURL,youarepresentedwiththeentireconfigurationfileforthatrouter.Whathaveyoudiscovered?

You are working on a pen testing assignment. Your client has asked for a document that shows them the detailed progress of the pen testing.

Which document is the client asking for?