EC-COUNCIL ECSAv8 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAv8 Online Questions & Answers

• Question 21:

  A penetration test consists of three phases: pre-attack phase, attack phase, and post- attack phase.

  

  Active reconnaissance which includes activities such as network mapping, web profiling, and perimeter mapping is a part which phase(s)?

  A. Post-attack phase
  B. Pre-attack phase and attack phase
  C. Attack phase
  D. Pre-attack phase
  D. Pre-attack phase

• Question 22:

  Which of the following equipment could a pen tester use to perform shoulder surfing?

  A. Binoculars
  B. Painted ultraviolet material
  C. Microphone
  D. All the above
  A. Binoculars

• Question 23:

  Which of the following is developed to address security concerns on time and reduce the misuse or threat of attacks in an organization?

  A. Vulnerabilities checklists
  B. Configuration checklists
  C. Action Plan
  D. Testing Plan
  A. Vulnerabilities checklists

• Question 24:

  What information can be collected by dumpster diving?

  A. Sensitive documents
  B. Email messages
  C. Customer contact information
  D. All the above
  A. Sensitive documents

• Question 25:

  The IP protocol was designed for use on a wide variety of transmission links. Although the maximum length of an IP datagram is 64K, most transmission links enforce a smaller maximum packet length limit, called a MTU.

  The value of the MTU depends on the type of the transmission link. The design of IP accommodates MTU differences by allowing routers to fragment IP datagrams as necessary. The receiving station is responsible for reassembling the fragments back into the original full size IP datagram.

  IP fragmentation involves breaking a datagram into a number of pieces that can be reassembled later. The IP source, destination, identification, total length, and fragment offset fields in the IP header, are used for IP fragmentation and reassembly.

  

  The fragment offset is 13 bits and indicates where a fragment belongs in the original IP datagram. This value is a:

  A. Multiple of four bytes
  B. Multiple of two bytes
  C. Multiple of eight bytes
  D. Multiple of six bytes
  C. Multiple of eight bytes

• Question 26:

  Which of the following statement holds true for TCP Operation?

  

  A. Port numbers are used to know which application the receiving host should pass the data to
  B. Sequence numbers are used to track the number of packets lost in transmission
  C. Flow control shows the trend of a transmitting host overflowing the buffers in the receiving host
  D. Data transfer begins even before the connection is established
  C. Flow control shows the trend of a transmitting host overflowing the buffers in the receiving host

• Question 27:

  Which Wireshark filter displays all the packets where the IP address of the source host is 10.0.0.7?

  

  A. ip.dst==10.0.0.7
  B. ip.port==10.0.0.7
  C. ip.src==10.0.0.7
  D. ip.dstport==10.0.0.7
  C. ip.src==10.0.0.7

• Question 28:

  A wireless intrusion detection system (WIDS) monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools. The system monitors the radio spectrum used by wireless LANs, and

  immediately alerts a systems administrator whenever a rogue access point is detected.

  Conventionally it is achieved by comparing the MAC address of the participating wireless devices.

  Which of the following attacks can be detected with the help of wireless intrusion detection system (WIDS)?

  

  A. Social engineering
  B. SQL injection
  C. Parameter tampering
  D. Man-in-the-middle attack
  D. Man-in-the-middle attack

• Question 29:

  A penetration tester performs OS fingerprinting on the target server to identify the operating system used on the target server with the help of ICMP packets.

  

  While performing ICMP scanning using Nmap tool, message received/type displays "3 ?Destination Unreachable[5]" and code 3. Which of the following is an appropriate description of this response?

  A. Destination port unreachable
  B. Destination host unavailable
  C. Destination host unreachable
  D. Destination protocol unreachable
  A. Destination port unreachable

• Question 30:

  What sort of vulnerability assessment approach starts by building an inventory of protocols found on the machine?

  A. Inference-based Assessment
  B. Service-based Assessment Solutions
  C. Product-based Assessment Solutions
  D. Tree-based Assessment
  A. Inference-based Assessment