EC-COUNCIL ECSAv8 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAv8 Online Questions & Answers

• Question 31:

  In which of the following firewalls are the incoming or outgoing packets blocked from accessing services for which there is no proxy?

  A. Circuit level firewalls
  B. Packet filters firewalls
  C. Stateful multilayer inspection firewalls
  D. Application level firewalls
  D. Application level firewalls

• Question 32:

  External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

  

  Which of the following types of penetration testing is performed with no prior knowledge of the site?

  A. Blue box testing
  B. White box testing
  C. Grey box testing
  D. Black box testing
  D. Black box testing

• Question 33:

  Identify the attack represented in the diagram below:

  

  A. Input Validation
  B. Session Hijacking
  C. SQL Injection
  D. Denial-of-Service
  B. Session Hijacking

• Question 34:

  Which of the following is NOT related to the Internal Security Assessment penetration testing strategy?

  A. Testing to provide a more complete view of site security
  B. Testing focused on the servers, infrastructure, and the underlying software, including the target
  C. Testing including tiers and DMZs within the environment, the corporate network, or partner company connections
  D. Testing performed from a number of network access points representing each logical and physical segment
  D. Testing performed from a number of network access points representing each logical and physical segment

• Question 35:

  Assessing a network from a hacker's point of view to discover the exploits and vulnerabilities that are accessible to the outside world is which sort of vulnerability assessment?

  A. Network Assessments
  B. Application Assessments
  C. Wireless Network Assessments
  D. External Assessment
  D. External Assessment

• Question 36:

  Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.

  

  What does a vulnerability assessment identify?

  A. Disgruntled employees
  B. Weaknesses that could be exploited
  C. Physical security breaches
  D. Organizational structure
  B. Weaknesses that could be exploited

• Question 37:

  Phishing is typically carried out by email spoofing or instant messaging and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one.

  Phishing is an example of social engineering techniques used to deceive users, and exploits the poor usability of current web security technologies. Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical security measures.

  

  What characteristics do phishing messages often have that may make them identifiable?

  A. Invalid email signatures or contact information
  B. Suspiciously good grammar and capitalization
  C. They trigger warning pop-ups
  D. Suspicious attachments
  D. Suspicious attachments

• Question 38:

  In the TCP/IP model, the transport layer is responsible for reliability and flow control from source to the destination. TCP provides the mechanism for flow control by allowing the sending and receiving hosts to communicate. A flow control mechanism avoids the problem with a transmitting host overflowing the buffers in the receiving host.

  

  Which of the following flow control mechanism guarantees reliable delivery of data?

  A. Sliding Windows
  B. Windowing
  C. Positive Acknowledgment with Retransmission (PAR)
  D. Synchronization
  C. Positive Acknowledgment with Retransmission (PAR)

• Question 39:

  This is a group of people hired to give details of the vulnerabilities present in the system found after a penetration test. They are elite and extremely competent penetration testers and intrusion analysts. This team prepares a report on the vulnerabilities in the system, attack methods, and how to defend against them.

  

  What is this team called?

  A. Blue team
  B. Tiger team
  C. Gorilla team
  D. Lion team
  B. Tiger team

• Question 40:

  Packet filtering firewalls are usually a part of a router. In a packet filtering firewall, each packet is compared to a set of criteria before it is forwarded.

  Depending on the packet and the criteria, the firewall can:

  i)Drop the packet

  ii)Forward it or send a message to the originator

  

  At which level of the OSI model do the packet filtering firewalls work?

  A. Application layer
  B. Physical layer
  C. Transport layer
  D. Network layer
  D. Network layer