EC-COUNCIL ECSAv8 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAv8 Online Questions & Answers

• Question 131:

  SQL injection attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application.

  A successful SQL injection attack can:

  i)Read sensitive data from the database

  iii)Modify database data (insert/update/delete)

  iii)Execute administration operations on the database (such as shutdown the DBMS)

  iV)Recover the content of a given file existing on the DBMS file system or write files into the file system

  v)Issue commands to the operating system

  

  Pen tester needs to perform various tests to detect SQL injection vulnerability. He has to make a list of all input fields whose values could be used in crafting a SQL query, including the hidden fields of POST requests and then test them separately, trying to interfere with the query and to generate an error.

  In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?

  A. Automated Testing
  B. Function Testing
  C. Dynamic Testing
  D. Static Testing
  A. Automated Testing

• Question 132:

  Transmission control protocol accepts data from a data stream, divides it into chunks, and adds a TCP header creating a TCP segment.

  The TCP header is the first 24 bytes of a TCP segment that contains the parameters and state of an end-to-end TCP socket. It is used to track the state of communication between two TCP endpoints.

  For a connection to be established or initialized, the two hosts must synchronize. The synchronization requires each side to send its own initial sequence number and to receive a confirmation of exchange in an acknowledgment (ACK) from

  the other side

  The below diagram shows the TCP Header format:

  

  How many bits is a acknowledgement number?

  A. 16 bits
  B. 32 bits
  C. 8 bits
  D. 24 bits
  B. 32 bits

• Question 133:

  Which of the following scan option is able to identify the SSL services?

  A. 璼S
  B. 璼V
  C. 璼U
  D. 璼T
  B. 璼V

• Question 134:

  Traceroute is a computer network diagnostic tool for displaying the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network. It sends a sequence of three Internet Control Message Protocol (ICMP) echo request packets addressed to a destination host.

  The time-to-live (TTL) value, also known as hop limit, is used in determining the intermediate routers being traversed towards the destination.

  

  During routing, each router reduces packets' TTL value by

  A. 3
  B. 1
  C. 4
  D. 2
  B. 1

• Question 135:

  One of the steps in information gathering is to run searches on a company using complex keywords in Google.

  

  Which search keywords would you use in the Google search engine to find all the PowerPoint presentations containing information about a target company, ROCHESTON?

  A. ROCHESTON fileformat:+ppt
  B. ROCHESTON ppt:filestring
  C. ROCHESTON filetype:ppt
  D. ROCHESTON +ppt:filesearch
  C. ROCHESTON filetype:ppt

• Question 136:

  Which type of vulnerability assessment tool provides security to the IT system by testing for vulnerabilities in the applications and operation system?

  A. Active/Passive Tools
  B. Application-layer Vulnerability Assessment Tools
  C. Location/Data Examined Tools
  D. Scope Assessment Tools
  D. Scope Assessment Tools

• Question 137:

  If a web application sends HTTP cookies as its method for transmitting session tokens, it may be vulnerable which of the following attacks?

  A. Parameter tampering Attack
  B. Sql injection attack
  C. Session Hijacking
  D. Cross-site request attack
  D. Cross-site request attack

• Question 138:

  Which of the following statements is true about the LM hash?

  A. Disabled in Windows Vista and 7 OSs
  B. Separated into two 8-character strings
  C. Letters are converted to the lowercase
  D. Padded with NULL to 16 characters
  A. Disabled in Windows Vista and 7 OSs

• Question 139:

  Which of the following is not a condition specified by Hamel and Prahalad (1990)?

  A. Core competency should be aimed at protecting company interests
  B. Core competency is hard for competitors to imitate
  C. Core competency provides customer benefits
  D. Core competency can be leveraged widely to many products and markets
  A. Core competency should be aimed at protecting company interests

• Question 140:

  Which of the following documents helps in creating a confidential relationship between the pen tester and client to protect critical and confidential information or trade secrets?

  A. Penetration Testing Agreement
  B. Rules of Behavior Agreement
  C. Liability Insurance
  D. Non-Disclosure Agreement
  D. Non-Disclosure Agreement