EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 121:

  Identify the policy that defines the standards for the organizational network connectivity and security standards for computers that are connected in the organizational network.

  A. Information-Protection Policy
  B. Special-Access Policy
  C. Remote-Access Policy
  D. Acceptable-Use Policy
  C. Remote-Access Policy

• Question 122:

  Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

  A. Decreases consumed employee time and increases system uptime
  B. Increases detection and reaction time
  C. Increases response time
  D. Both Decreases consumed employee time and increases system uptime and Increases response time
  A. Decreases consumed employee time and increases system uptime

• Question 123:

  Which of the following is the range for assigned ports managed by the Internet Assigned Numbers Authority (IANA)?

  A. 3001-3100
  B. 5000-5099
  C. 6666-6674
  D. 0 - 1023
  D. 0 - 1023

• Question 124:

  Timing is an element of port-scanning that can catch one unaware. If scans are taking too long to complete or obvious ports are missing from the scan, various time parameters may need to be adjusted. Which one of the following scanned timing options in NMAP's scan is useful across slow WAN links or to hide the scan?

  A. Paranoid
  B. Sneaky
  C. Polite
  D. Normal
  C. Polite

• Question 125:

  Which of the following tasks is done after submitting the final pen testing report?

  A. Kick-off meeting
  B. System patching and hardening
  C. Exploiting vulnerabilities
  D. Mission briefing
  B. System patching and hardening

• Question 126:

  Arnold is trying to gain access to a database by inserting exploited query statements with a WHERE clause. He wants to retrieve all the entries from a particular table (e. g. StudName) using the WHERE clause. What query does Arnold need to write to retrieve the information?

  A. EXTRACT * FROM StudName WHERE roll_number = 1 order by 1000
  B. DUMP * FROM StudName WHERE roll_number = 1 AND 1=1-
  C. SELECT * FROM StudName WHERE roll_number = " or '1' = '1'
  D. RETRIVE * FROM StudName WHERE roll_number = 1'#
  C. SELECT * FROM StudName WHERE roll_number = " or '1' = '1'

• Question 127:

  Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test. The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?

  A. True negatives
  B. False negatives
  C. False positives
  D. True positives
  B. False negatives

• Question 128:

  George, an ex-employee of Netabb Ltd. with bruised feelings due to his layoff, tries to take revenge against the company. He randomly tried several attacks against the organization. As some of the employees used weak passwords to their

  user accounts, George was successful in cracking the user accounts of several employees with the help of a common passwords file.

  What type of password cracking attack did George perform?

  A. Hybrid attack
  B. Dictionary attack
  C. Brute forcing attack
  D. Birthday attack
  B. Dictionary attack

• Question 129:

  Which of the following policies helps secure data and protects the privacy of organizational information?

  A. Special-Access Policy
  B. Document retention Policy
  C. Cryptography Policy
  D. Personal Security Policy
  C. Cryptography Policy

• Question 130:

  Peter is working on a pen testing assignment. During the reconnaissance phase, Peter discovered that the client's SYSLOG systems are taken off for four hours on the second Saturday of every month for maintenance. He wants to analyze

  the client's web pages for sensitive information without triggering their logging mechanism. There are hundreds of pages on the client's website and it is difficult to analyze all the information in just four hours.

  What will Peter do to analyze all the web pages in a stealthy manner?

  A. Use HTTrack to mirror the complete website
  B. Use WayBackMachine
  C. Perform reverse DNS lookup
  D. Search the Internet, newsgroups, bulletin boards, and negative websites for information about the client
  A. Use HTTrack to mirror the complete website