EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 281:

  An antenna is a device that is designed to transmit and receive the electromagnetic waves that are generally called radio waves. Which one of the following types of antenna is developed from waveguide technology?

  A. Leaky Wave Antennas
  B. Aperture Antennas
  C. Reflector Antenna
  D. Directional Antenna
  B. Aperture Antennas

• Question 282:

  Hackers today have an ever-increasing list of weaknesses in the web application structure at their disposal, which they can exploit to accomplish a wide variety of malicious tasks.

  

  New flaws in web application security measures are constantly being researched, both by hackers and by security professionals. Most of these flaws affect all dynamic web applications whilst others are dependent on specific application

  technologies.

  In both cases, one may observe how the evolution and refinement of web technologies also brings about new exploits which compromise sensitive databases, provide access to theoretically secure networks, and pose a threat to the daily

  operation of online businesses.

  What is the biggest threat to Web 2.0 technologies?

  A. SQL Injection Attacks
  B. Service Level Configuration Attacks
  C. Inside Attacks
  D. URL Tampering Attacks
  A. SQL Injection Attacks

• Question 283:

  Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer. Where should Harold navigate on the computer to find the file?

  A. %systemroot%\LSA
  B. %systemroot%\repair
  C. %systemroot%\system32\drivers\etc
  D. %systemroot%\system32\LSA
  B. %systemroot%\repair

• Question 284:

  Software firewalls work at which layer of the OSI model?

  A. Data Link
  B. Network
  C. Transport
  D. Application
  A. Data Link

• Question 285:

  Russel, a penetration tester after performing the penetration testing, wants to create a report so that he can provide details of the testing process and findings of the vulnerabilities to the management. Russel employs the commonly available

  vulnerability scoring framework called Common Vulnerability Scoring System (CVSS) v3.0 ratings for grading the severity and risk level of identified vulnerabilities in the report. For a specific SMB-based vulnerability, Russel assigned a score

  of 8.7.

  What is the level of risk or level of severity of the SMB vulnerability as per CVSS v3.0 for the assigned score?

  A. Critical
  B. Low
  C. Medium
  D. High
  D. High

• Question 286:

  Joseph, a penetration tester, was hired by Xsecurity Services. Joseph was asked to perform a pen test on a client's network. He was not provided with any information about the client organization except the company name. Identify the type of testing Joseph is going to perform for the client organization?

  A. White-box Penetration Testing
  B. Black-box Penetration Testing
  C. Announced Testing
  D. Grey-box Penetration Testing
  B. Black-box Penetration Testing

• Question 287:

  Edward is a penetration tester hired by the OBC Group. He was asked to gather information on the client's network. As part of the work assigned, Edward needs to find the range of IP addresses and the subnet mask used by the target

  organization.

  What does Edward need to do to get the required information?

  A. Search for web pages posting patterns and revision numbers
  B. Search for an appropriate Regional Internet Registry (RIR)
  C. Search for link popularity of the company's website
  D. Search for Trade Association Directories
  B. Search for an appropriate Regional Internet Registry (RIR)

• Question 288:

  Identify the port numbers used by POP3 and POP3S protocols.

  A. 113 and 981
  B. 111 and 982
  C. 110 and 995
  D. 109 and 973
  C. 110 and 995

• Question 289:

  An automated electronic mail message from a mail system which indicates that the user does not exist on that server is called as?

  A. SMTP Queue Bouncing
  B. SMTP Message Bouncing
  C. SMTP Server Bouncing
  D. SMTP Mail Bouncing
  D. SMTP Mail Bouncing

• Question 290:

  Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

  A. Event Log Tracker
  B. Sawmill
  C. Syslog Manager
  D. Event Log Explorer
  B. Sawmill