EC-COUNCIL ECSAv8 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAv8 Online Questions & Answers

• Question 1:

  Identify the type of authentication mechanism represented below:

  

  A. NTLMv1
  B. NTLMv2
  C. LAN Manager Hash
  D. Kerberos
  D. Kerberos

• Question 2:

  Which of the following will not handle routing protocols properly?

  A. "Internet-router-firewall-net architecture"
  B. "Internet-firewall-router-net architecture"
  C. "Internet-firewall -net architecture"
  D. "Internet-firewall/router(edge device)-net architecture"
  A. "Internet-router-firewall-net architecture"

• Question 3:

  Due to illegal inputs, various types of TCP stacks respond in a different manner. Some IDSs do not take into account the TCP protocol's urgency feature, which could allow testers to evade the IDS.

  

  Penetration tester needs to try different combinations of TCP flags (e.g. none, SYN/FIN, SYN/RST, SYN/FIN/ACK, SYN/RST/ACK, and All Flags) to test the IDS. Which of the following TCP flag combinations combines the problem of initiation, midstream, and termination flags with the PSH and URG?

  A. SYN/RST/ACK
  B. SYN/FIN/ACK
  C. SYN/FIN
  D. All Flags
  D. All Flags

• Question 4:

  Internet Control Message Protocol (ICMP) messages occur in many situations, such as whenever a datagram cannot reach the destination or the gateway does not have the buffering capacity to forward a datagram. Each ICMP message contains three fields: type, code, and checksum. Different types of Internet Control Message Protocols (ICMPs) are identified by a type and code field.

  

  Which of the following ICMP messages will be generated if the destination port is not reachable?

  A. ICMP Type 11 code 1
  B. ICMP Type 5 code 3
  C. ICMP Type 3 code 2
  D. ICMP Type 3 code 3
  D. ICMP Type 3 code 3

• Question 5:

  Which of the following defines the details of services to be provided for the client's organization and the list of services required for performing the test in the organization?

  A. Draft
  B. Report
  C. Requirement list
  D. Quotation
  D. Quotation

• Question 6:

  John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?

  A. C:\Windows\System32\Boot
  B. C:\WINNT\system32\drivers\etc
  C. C:\WINDOWS\system32\cmd.exe
  D. C:\Windows\System32\restore
  B. C:\WINNT\system32\drivers\etc

• Question 7:

  In the example of a /etc/passwd file below, what does the bold letter string indicate? nomad:HrLNrZ3VS3TF2:501:100: Simple Nomad:/home/nomad:/bin/bash

  A. Maximum number of days the password is valid
  B. Group number
  C. GECOS information
  D. User number
  D. User number

• Question 8:

  A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

  

  Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

  A. Appliance based firewalls cannot be upgraded
  B. Firewalls implemented on a hardware firewall are highly scalable
  C. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system
  D. Operating system firewalls are highly configured
  C. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system

• Question 9:

  Which of the following shields Internet users from artificial DNS data, such as a deceptive or mischievous address instead of the genuine address that was requested?

  A. DNSSEC
  B. Firewall
  C. Packet filtering
  D. IPSec
  A. DNSSEC

• Question 10:

  Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

  

  A. Service-based Assessment Solutions
  B. Product-based Assessment Solutions
  C. Tree-based Assessment
  D. Inference-based Assessment
  C. Tree-based Assessment