EC-COUNCIL ECSAv8 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAv8 Online Questions & Answers

• Question 51:

  A firewall's decision to forward or reject traffic in network filtering is dependent upon which of the following?

  A. Destination address
  B. Port numbers
  C. Source address
  D. Protocol used
  D. Protocol used

• Question 52:

  You are conducting a penetration test against a company and you would like to know a personal email address of John, a crucial employee. What is the fastest, cheapest way to find out John's email address.

  

  A. Call his wife and ask for his personal email account
  B. Call a receptionist and ask for John Stevens' personal email account
  C. Search in Google for his personal email ID
  D. Send an email to John stating that you cannot send him an important spreadsheet attachment file to his business email account and ask him if he has any other email accounts
  D. Send an email to John stating that you cannot send him an important spreadsheet attachment file to his business email account and ask him if he has any other email accounts

• Question 53:

  Traffic on which port is unusual for both the TCP and UDP ports?

  A. Port 81
  B. Port 443
  C. Port 0
  D. Port21
  C. Port 0

• Question 54:

  What are placeholders (or markers) in an HTML document that the web server will dynamically replace with data just before sending the requested documents to a browser?

  A. Server Side Includes
  B. Sort Server Includes
  C. Server Sort Includes
  D. Slide Server Includes
  A. Server Side Includes

• Question 55:

  During external penetration testing, which of the following techniques uses tools like Nmap to predict the sequence numbers generated by the targeted server and use this information to perform session hijacking techniques?

  A. TCP Sequence Number Prediction
  B. IPID State Number Prediction
  C. TCP State Number Prediction
  D. IPID Sequence Number Prediction
  A. TCP Sequence Number Prediction

• Question 56:

  Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?

  A. Threat-Assessment Phase
  B. Pre-Assessment Phase
  C. Assessment Phase
  D. Post-Assessment Phase
  B. Pre-Assessment Phase

• Question 57:

  Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?

  A. Project Goal
  B. Success Factors
  C. Objectives
  D. Assumptions
  B. Success Factors

• Question 58:

  Which of the following attributes has a LM and NTLMv1 value as 64bit + 64bit + 64bit and NTLMv2 value as 128 bits?

  A. Hash Key Length
  B. C/R Value Length
  C. C/R Key Length
  D. Hash Value Length
  B. C/R Value Length

• Question 59:

  What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

  A. Connect Scanning Techniques
  B. SYN Scanning Techniques
  C. Stealth Scanning Techniques
  D. Port Scanning Techniques
  C. Stealth Scanning Techniques

• Question 60:

  During the process of fingerprinting a web application environment, what do you need to do in order to analyze HTTP and HTTPS request headers and the HTML source code?

  A. Examine Source of the Available Pages
  B. Perform Web Spidering
  C. Perform Banner Grabbing
  D. Check the HTTP and HTML Processing by the Browser
  C. Perform Banner Grabbing