EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 351:

  Which among the following information is not furnished by the Rules of Engagement (ROE) document?

  A. Techniques for data collection from systems upon termination of the test
  B. Techniques for data exclusion from systems upon termination of the test
  C. Details on how data should be transmitted during and after the test
  D. Details on how organizational data is treated throughout and after the test
  A. Techniques for data collection from systems upon termination of the test

• Question 352:

  JUA Networking Solutions is a group of certified ethical hacking professionals with a large client base. Stanley works as a penetrating tester at this firm. Future group approached JUA for an internal pen test. Stanley performs various penetration testing test sequences and gains information about the network resources and shares, routing tables, audit and service settings, SNMP and DNS details, machine names, users and groups, applications and banners. Identify the technique that gave Stanley this information.

  A. Enumeration
  B. Sniffing
  C. Ping sweeps
  D. Port scanning
  A. Enumeration

• Question 353:

  Stanley, a pen tester needs to perform various tests to detect SQL injection vulnerabilities. He has to make a list of all input fields whose values could be used in crafting a SQL query. This includes the hidden fields of POST requests and then

  test them separately, attempting to interfere with the query and cause an error to generate as a result.

  In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?

  A. Dynamic Testing
  B. Static Testing
  C. Function Testing
  D. Source Code Testing
  B. Static Testing

• Question 354:

  John is working as a cloud security analyst in an organization. The management instructed him to implement a technology in the cloud infrastructure which allows the organization to share the underlying cloud resources such as server,

  storage devices, and network.

  Which of the following technologies John must employ?

  A. VoIP technology
  B. Virtualization technology
  C. RFID technology
  D. Site technology
  B. Virtualization technology