EC-COUNCIL ECSAv8 Online Practice Questions and Exam Preparation

EC-COUNCIL ECSAv8 Online Questions & Answers

• Question 61:

  Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?

  A. Special-Access Policy
  B. User Identification and Password Policy
  C. Personal Computer Acceptable Use Policy
  D. User-Account Policy
  B. User Identification and Password Policy

• Question 62:

  Which of the following is the objective of Gramm-Leach-Bliley Act?

  A. To ease the transfer of financial information between institutions and banks
  B. To protect the confidentiality, integrity, and availability of data
  C. To set a new or enhanced standards for all U.S. public company boards, management and public accounting firms
  D. To certify the accuracy of the reported financial statement
  B. To protect the confidentiality, integrity, and availability of data

• Question 63:

  In Linux, /etc/shadow file stores the real password in encrypted format for user's account with added properties associated with the user's password.

  

  In the example of a /etc/shadow file below, what does the bold letter string indicate? Vivek: $1$fnffc$GteyHdicpGOfffXX40w#5:13064:0:99999:7

  A. Number of days the user is warned before the expiration date
  B. Minimum number of days required between password changes
  C. Maximum number of days the password is valid
  D. Last password changed
  B. Minimum number of days required between password changes

• Question 64:

  Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM. NTLM and LM authentication protocols are used to securely store a user's password in the SAM database using different hashing methods.

  

  The SAM file in Windows Server 2008 is located in which of the following locations?

  A. c:\windows\system32\config\SAM
  B. c:\windows\system32\drivers\SAM
  C. c:\windows\system32\Setup\SAM
  D. c:\windows\system32\Boot\SAM
  A. c:\windows\system32\config\SAM

• Question 65:

  Which of the following policies helps secure data and protects the privacy of organizational information?

  A. Special-Access Policy
  B. Document retention Policy
  C. Cryptography Policy
  D. Personal Security Policy
  C. Cryptography Policy

• Question 66:

  Identify the transition mechanism to deploy IPv6 on the IPv4 network from the following diagram.

  

  A. Translation
  B. Tunneling
  C. Dual Stacks
  D. Encapsulation
  D. Encapsulation

• Question 67:

  Which of the following methods is used to perform server discovery?

  A. Banner Grabbing
  B. Whois Lookup
  C. SQL Injection
  D. Session Hijacking
  B. Whois Lookup

• Question 68:

  SQL injection attacks are becoming significantly more popular amongst hackers and there has been an estimated 69 percent increase of this attack type.

  This exploit is used to great effect by the hacking community since it is the primary way to steal sensitive data from web applications. It takes advantage of non-validated input vulnerabilities to pass SQL commands through a web application

  for execution by a back- end database.

  The below diagram shows how attackers launched SQL injection attacks on web applications.

  

  Which of the following can the attacker use to launch an SQL injection attack?

  A. Blah' "2=2 ?
  B. Blah' and 2=2 -
  C. Blah' and 1=1 -
  D. Blah' or 1=1 -
  D. Blah' or 1=1 -

• Question 69:

  Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

  A. USA Patriot Act 2001
  B. Sarbanes-Oxley 2002
  C. Gramm-Leach-Bliley Act (GLBA)
  D. California SB 1386
  B. Sarbanes-Oxley 2002

• Question 70:

  Which of the following reports provides a summary of the complete pen testing process, its outcomes, and recommendations?

  A. Vulnerability Report
  B. Executive Report
  C. Client-side test Report
  D. Host Report
  B. Executive Report