EC-COUNCIL ECSA ECSAv8 Questions & Answers

• Question 11:

  What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

  A. Connect Scanning Techniques

  B. SYN Scanning Techniques

  C. Stealth Scanning Techniques

  D. Port Scanning Techniques

  Correct Answer: C

  Reference: http://wwww.pcfreak.net/tutorials/hacking_info/arkin%20network%20scanning%20techniques.pdf (page 7

• Question 12:

  Which of the following attacks does a hacker perform in order to obtain UDDI information such as businessEntity, businesService, bindingTemplate, and tModel?

  A. Web Services Footprinting Attack

  B. Service Level Configuration Attacks

  C. URL Tampering Attacks

  D. Inside Attacks

  Correct Answer: A

  Reference: http://www.scribd.com/doc/184891017/CEHv8-Module-13-Hacking-Web- Applications-pdf (page 99)

• Question 13:

  DNS information records provide important data about:

  A. Phone and Fax Numbers

  B. Location and Type of Servers

  C. Agents Providing Service to Company Staff

  D. New Customer

  Correct Answer: B

• Question 14:

  The first phase of the penetration testing plan is to develop the scope of the project in consultation with the client. Pen testing test components depend on the client's operating environment, threat perception, security and compliance requirements, ROE, and budget. Various components need to be considered for testing while developing the scope of the project.

  

  Which of the following is NOT a pen testing component to be tested?

  A. System Software Security

  B. Intrusion Detection

  C. Outside Accomplices

  D. Inside Accomplices

  Correct Answer: C

• Question 15:

  Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM.

  NTLM and LM authentication protocols are used to securely store a user's password in the SAM database using different hashing methods.

  

  The SAM file in Windows Server 2008 is located in which of the following locations?

  A. c:\windows\system32\config\SAM

  B. c:\windows\system32\drivers\SAM

  C. c:\windows\system32\Setup\SAM

  D. c:\windows\system32\Boot\SAM

  Correct Answer: A

• Question 16:

  In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?

  A. IPS evasion technique

  B. IDS evasion technique

  C. UDP evasion technique D. TTL evasion technique

  Correct Answer: B

  Reference: http://is.muni.cz/th/172999/fi_m/MT_Bukac.pdf (page 24)

• Question 17:

  The first and foremost step for a penetration test is information gathering. The main objective of this test is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.

  

  Which of the following information gathering terminologies refers to gathering information through social engineering on-site visits, face-to-face interviews, and direct questionnaires?

  A. Active Information Gathering

  B. Pseudonymous Information Gathering

  C. Anonymous Information Gathering

  D. Open Source or Passive Information Gathering

  Correct Answer: A

• Question 18:

  Today, most organizations would agree that their most valuable IT assets reside within applications and databases. Most would probably also agree that these are areas that have the weakest levels of security, thus making them the prime target for malicious activity from system administrators, DBAs, contractors, consultants, partners, and customers.

  

  Which of the following flaws refers to an application using poorly written encryption code to securely encrypt and store sensitive data in the database and allows an attacker to steal or modify weakly protected data such as credit card numbers, SSNs, and other authentication credentials?

  A. SSI injection attack

  B. Insecure cryptographic storage attack

  C. Hidden field manipulation attack

  D. Man-in-the-Middle attack

  Correct Answer: B

• Question 19:

  James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

  A. Smurf

  B. Trinoo

  C. Fraggle

  D. SYN flood

  Correct Answer: A

• Question 20:

  Which of the following defines the details of services to be provided for the client's organization and the list of services required for performing the test in the organization?

  A. Draft

  B. Report

  C. Requirement list

  D. Quotation

  Correct Answer: D