EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 71:

  What is a good security method to prevent unauthorized users from "tailgating"?

  A. Electronic key systems
  B. Man trap
  C. Pick-resistant locks
  D. Electronic combination locks
  B. Man trap

• Question 72:

  The security team found the network switch has changed its behavior to learning mode and is functioning like a hub. The CAM table of the switch was filled with unnecessary traffic. Someone tried to penetrate into the network space by

  attacking the network switches. They wrote a report and submitted to higher authorities.

  What kind of an attack did the attackers perform against the network switch?

  A. DNS Poisoning
  B. MITM Attack
  C. MAC Flooding
  D. ARP Poisoning
  C. MAC Flooding

• Question 73:

  You are enumerating a target system. Which of the following PortQry commands will give a result similar to the screenshot below:

  

  A. portqry -n myserver -p udp -e 389
  B. portqry -n myserver -p udp -e 123
  C. portqry -n myserver -p TCP -e 389
  D. portqry -n myserver -p TCP -e 123
  C. portqry -n myserver -p TCP -e 389

• Question 74:

  A penetration tester at Trinity Ltd. is performing IoT device testing. As part of this process, he is checking the IoT devices for open ports using port scanners such as Nmap. After identifying the open ports, he started using automated tools to

  check each open port for any exploitable vulnerabilities.

  Identify the IoT security issues the penetration tester is trying to uncover?

  A. Insecure software/firmware
  B. Lack of transport encryption
  C. Insecure network services
  D. Insufficient security configurability
  D. Insufficient security configurability

• Question 75:

  Wireless communication allows networks to extend to places that might otherwise go untouched by the wired networks. When most people say `Wireless' these days, they are referring to one of the 802.11 standards. There are three main

  802.11 standards: B, A, and G.

  Which one of the following 802.11 types uses DSSS Modulation, splitting the 2.4ghz band into channels?

  A. 802.11b
  B. 802.11g
  C. 802.11-Legacy
  D. 802.11n
  A. 802.11b

• Question 76:

  Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposure the site has received so far. Harold

  navigates to google.com and types in the following search.

  link:www.ghttech.net

  What will this search produce?

  A. All sites that link to ghttech.net
  B. Sites that contain the code: link:www.ghttech.net
  C. All sites that ghttech.net links to
  D. All search engines that link to .net domains
  A. All sites that link to ghttech.net

• Question 77:

  What is the purpose of the Traceroute command?

  A. For extracting information about the network topology, trusted routers, and firewall locations
  B. For extracting information about closed ports
  C. For extracting information about the server functioning
  D. For extracting information about opened ports
  A. For extracting information about the network topology, trusted routers, and firewall locations

• Question 78:

  Which type of vulnerability assessment tool provides security to the IT system by testing for vulnerabilities in the applications and operation system?

  A. Active/Passive Tools
  B. Application-layer Vulnerability Assessment Tools
  C. Location/Data Examined Tools
  D. Scope Assessment Tools
  D. Scope Assessment Tools

• Question 79:

  In the context of penetration testing, what does blue teaming mean?

  

  A. A penetration test performed with the knowledge and consent of the organization's IT staff
  B. It is the most expensive and most widely used
  C. It may be conducted with or without warning
  D. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management
  A. A penetration test performed with the knowledge and consent of the organization's IT staff

• Question 80:

  The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

  A. HIPAA
  B. Sarbanes-Oxley 2002
  C. Gramm-Leach-Bliley Act
  D. California SB 1386a
  C. Gramm-Leach-Bliley Act