EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 161:

  The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control. This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them.

  

  What is the best way to protect web applications from parameter tampering attacks?

  A. Validating some parameters of the web application
  B. Minimizing the allowable length of parameters
  C. Using an easily guessable hashing algorithm
  D. Applying effective input field filtering parameters
  D. Applying effective input field filtering parameters

• Question 162:

  Output modules allow Snort to be much more flexible in the formatting and presentation of output to its users. Snort has 9 output plug-ins that push out data in different formats. Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?

  A. unified
  B. csv
  C. alert_unixsock
  D. alert_fast
  B. csv

• Question 163:

  Watson works as a Penetrating test engineer at Neo security services. The company found its wireless network operating in an unusual manner, with signs that a possible cyber attack might have happened. Watson was asked to resolve this

  problem. Watson starts a wireless penetrating test, with the first step of discovering wireless networks by war-driving. After several thorough checks, he identifies that there is some problem with rogue access points and resolves it. Identifying

  rogue access points involves a series of steps.

  Which of the following arguments is NOT valid when identifying the rogue access points?

  A. If a radio media type used by any discovered AP is not present in the authorized list of media types, it is considered as a rogue AP
  B. If any new AP which is not present in the authorized list of APs is detected, it would be considered as a rogue AP
  C. If the radio channel used by any discovered AP is not present in the authorized list of channels, it is considered as a rogue AP
  D. If the MAC of any discovered AP is present in the authorized list of MAC addresses, it would be considered as a rogue AP
  D. If the MAC of any discovered AP is present in the authorized list of MAC addresses, it would be considered as a rogue AP

• Question 164:

  While scanning a server, you found rpc, nfs and mountd services running on it. During the investigation, you were told that NFS Shares were mentioned in the /etc/exports list of the NFS server. Based on this information, which among the following commands would you issue to view the NFS Shares running on the server?

  A. showmount
  B. nfsenum
  C. mount
  D. rpcinfo
  A. showmount

• Question 165:

  What are the 6 core concepts in IT security?

  

  A. Server management, website domains, firewalls, IDS, IPS, and auditing
  B. Authentication, authorization, confidentiality, integrity, availability, and non-repudiation
  C. Passwords, logins, access controls, restricted domains, configurations, and tunnels
  D. Biometrics, cloud security, social engineering, DoS attack, viruses, and Trojans
  B. Authentication, authorization, confidentiality, integrity, availability, and non-repudiation

• Question 166:

  Firewall and DMZ architectures are characterized according to its design. Which one of the following architectures is used when routers have better high-bandwidth data stream handling capacity?

  A. Weak Screened Subnet Architecture
  B. "Inside Versus Outside" Architecture
  C. "Three-Homed Firewall" DMZ Architecture
  D. Strong Screened-Subnet Architecture
  A. Weak Screened Subnet Architecture

• Question 167:

  While auditing a web application for vulnerabilities, Donald uses Burp proxy and modifies the get requests as below:

  http://www.example.com/GET/process.php./../../../../../../../../etc/password

  What is Donald trying to achieve?

  A. Donald is modifying process.php file to extract /etc/password file
  B. Donald is trying directory traversal to extract /etc/password file
  C. Donald is trying SQL injection to extract the contents of /etc/password file
  D. Donald is trying to upload /etc/password file to the web server root folder
  B. Donald is trying directory traversal to extract /etc/password file

• Question 168:

  Why is a legal agreement important to have before launching a penetration test?

  

  A. Guarantees your consultant fees
  B. Allows you to perform a penetration test without the knowledge and consent of the organization's upper management
  C. It establishes the legality of the penetration test by documenting the scope of the project and the consent of the company.
  D. It is important to ensure that the target organization has implemented mandatory security policies
  C. It establishes the legality of the penetration test by documenting the scope of the project and the consent of the company.

• Question 169:

  During an internal network audit, you are asked to see if there is any RPC server running on the network and if found, enumerate the associate RPC services. Which port would you scan to determine the RPC server and which command will you use to enumerate the RPC services?

  A. Port 111, rpcinfo
  B. Port 111, rpcenum
  C. Port 145, rpcinfo
  D. Port 145, rpcenum
  A. Port 111, rpcinfo

• Question 170:

  You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple

  macro and encrypted viruses.

  You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?

  A. Metamorphic
  B. Oligomorhic
  C. Polymorphic
  D. Transmorphic
  A. Metamorphic