EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 41:

  After passively scanning the network of Department of Defense (DoD), you switch over to active scanning to identify live hosts on their network. DoD is a large organization and should respond to any number of scans. You start an ICMP ping

  sweep by sending an IP packet to the broadcast address.

  Only five hosts responds to your ICMP pings; definitely not the number of hosts you were expecting. Why did this ping sweep only produce a few responses?

  A. A switched network will not respond to packets sent to the broadcast address
  B. Only IBM AS/400 will reply to this scan
  C. Only Unix and Unix-like systems will reply to this scan
  D. Only Windows systems will reply to this scan
  C. Only Unix and Unix-like systems will reply to this scan

• Question 42:

  Choose the correct option to define the Prefix Length.

  

  A. Prefix Length = Subnet + Host portions
  B. Prefix Length = Network + Host portions
  C. Prefix Length = Network + Subnet portions
  D. Prefix Length = Network + Subnet + Host portions
  C. Prefix Length = Network + Subnet portions

• Question 43:

  James is a security consultant at Big Frog Software Pvt Ltd. He is an expert in Footprinting and Social engineering tasks. His team lead tasked him to find details about the target through passive reconnaissance. James used websites to

  check the link popularity of the client's domain name.

  What information does the link popularity provide?

  A. Information about the network resources
  B. Information about visitors, their geolocations, etc.
  C. Information about the server and its infrastructure
  D. Information about the partner of the organization
  D. Information about the partner of the organization

• Question 44:

  Which of the following defines the details of services to be provided for the client's organization and the list of services required for performing the test in the organization?

  A. Draft
  B. Report
  C. Requirement list
  D. Quotation
  D. Quotation

• Question 45:

  Which of the following pre-engagement documents identifies the systems to be tested, types of tests, and the depth of the testing?

  A. Draft Report
  B. Letter of Intent
  C. Rule of Engagement
  D. Authorization Letter
  C. Rule of Engagement

• Question 46:

  Identify the person who will lead the penetration-testing project and be the client point of contact.

  A. Database Penetration Tester
  B. Policy Penetration Tester
  C. Chief Penetration Tester
  D. Application Penetration Tester
  C. Chief Penetration Tester

• Question 47:

  Variables are used to define parameters for detection, specifically those of your local network and/or specific servers or ports for inclusion or exclusion in rules. These are simple substitution variables set with the var keyword. Which one of the following operator is used to define meta-variables?

  A. "$"
  B. "#"
  C. "*"
  D. "?"
  A. "$"

• Question 48:

  Linson, an employee in Skitac Ltd., notices a USB flash drive on the pavement of the company. Before he could hand it over to the security guard, he tries to check it out. He connects it with an OTG to his mobile phone and finds some of his

  favorite music playlists and games. He tries to download them into his mobile, but very lately he came to know that he has been attacked and some of his sensitive financial information was exposed to attackers.

  What type of attacks did Linson face?

  A. Social engineering attack
  B. Phishing attack
  C. Wardriving attack
  D. Impersonation attack
  A. Social engineering attack

• Question 49:

  A framework for security analysis is composed of a set of instructions, assumptions, and limitations to analyze and solve security concerns and develop threat free applications.

  Which of the following frameworks helps an organization in the evaluation of the company's information security with that of the industrial standards?

  A. Microsoft Internet Security Framework
  B. Information System Security Assessment Framework
  C. The IBM Security Framework
  D. Nortell's Unified Security Framework
  B. Information System Security Assessment Framework

• Question 50:

  Which one of the following Snort logger mode commands is associated to run a binary log file through Snort in sniffer mode to dump the packets to the screen?

  A. ./snort -dvr packet.log icmp
  B. ./snort -dev -l ./log
  C. ./snort -dv -r packet.log
  D. ./snort -l ./log -b
  C. ./snort -dv -r packet.log