EC-COUNCIL ECSAV10 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAV10 Online Questions & Answers

• Question 81:

  Which one of the following architectures has the drawback of internally considering the hosted services individually?

  A. Weak Screened Subnet Architecture
  B. "Inside Versus Outside" Architecture
  C. "Three-Homed Firewall" DMZ Architecture
  D. Strong Screened-Subnet Architecture
  C. "Three-Homed Firewall" DMZ Architecture

• Question 82:

  After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a DMZ, statefull firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken, none of the hosts on her

  network can reach the Internet.

  Why is that?

  A. IPSEC does not work with packet filtering firewalls
  B. NAT does not work with IPSEC
  C. NAT does not work with statefull firewalls
  D. Statefull firewalls do not work with packet filtering firewalls
  B. NAT does not work with IPSEC

• Question 83:

  A web application developer is writing code for validating the user input. His aim is to verify the user input against a list of predefined negative inputs to ensure that the received input is not one among the negative conditions. Identify the input filtering mechanism being implemented by the developer?

  A. Black listing
  B. White listing
  C. Authentication
  D. Authorization
  A. Black listing

• Question 84:

  Which one of the following 802.11 types uses either FHSS or DSSS for modulation?

  A. 802.11b
  B. 802.11a
  C. 802.11n
  D. 802.11-Legacy
  D. 802.11-Legacy

• Question 85:

  Sarah is a pen tester at JK Hopes and Sons based in Las Vegas. As a part of the penetration testing, she was asked to perform the test without exposing the test to anyone else in the organization. Only a few people in the organization know

  about the test. This test covers the organization's security monitoring, incident identification and its response procedures.

  What kind of pen testing is Sarah performing?

  A. Double-blind Testing
  B. Announced Testing
  C. Unannounced Testing
  D. Blind Testing
  A. Double-blind Testing

• Question 86:

  Attackers create secret accounts and gain illegal access to resources using backdoor while bypassing the authentication procedures. Creating a backdoor is a where an attacker obtains remote access to a computer on a network.

  

  Which of the following techniques do attackers use to create backdoors to covertly gather critical information about a target machine?

  A. Internal network mapping to map the internal network of the target machine
  B. Port scanning to determine what ports are open or in use on the target machine
  C. Sniffing to monitor all the incoming and outgoing network traffic
  D. Social engineering and spear phishing attacks to install malicious programs on the target machine
  D. Social engineering and spear phishing attacks to install malicious programs on the target machine

• Question 87:

  Which one of the following is a useful formatting token that takes an int * as an argument, and writes the number of bytes already written, to that location?

  A. "%n"
  B. "%s"
  C. "%p"
  D. "%w"
  A. "%n"

• Question 88:

  Sandra, a wireless network auditor, discovered her client is using WEP. To prove the point that the WEP encryption is very weak, she wants to decrypt some WEP packets. She successfully captured the WEP data packets, but could not

  reach the content as the data is encrypted.

  Which of the following will help Sandra decrypt the data packets without knowing the key?

  A. Fragmentation Attack
  B. Chopchop Attack
  C. ARP Poisoning Attack
  D. Packet injection Attack
  B. Chopchop Attack

• Question 89:

  An organization has deployed a web application that uses encoding technique before transmitting the data over the Internet. This encoding technique helps the organization to hide the confidential data such as user credentials, email

  attachments, etc. when in transit. This encoding technique takes 3 bytes of binary data and divides it into four chunks of 6 bits. Each chunk is further encoded into respective printable character.

  Identify the encoding technique employed by the organization?

  A. Unicode encoding
  B. Base64 encoding
  C. URL encoding
  D. HTMS encoding
  B. Base64 encoding

• Question 90:

  What is the objective of the following bash script?

  

  A. It gives a list of IP addresses that have an FTP port open
  B. It tries to connect to FTP port on a target machine
  C. It checks if a target host has the FTP port open and quits
  D. It checks if an FTP port on a target machine is vulnerable to arracks
  A. It gives a list of IP addresses that have an FTP port open