EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 1:

  Which of the following is allowed by a company to be addressed directly from the public network and is hardened to screen the rest of its network from security exposure?

  A. bastion host
  B. Intrusion detection system
  C. A computer installed in the network and configured with sender reputation
  D. Exchange ActiveSync
  A. bastion host

• Question 2:

  Which of the following is a technique of attacks in which the attacker secretly listens to the private conversation between victims?

  A. Eavesdropping
  B. Denial of service
  C. Dialler attack
  D. Intrusion
  A. Eavesdropping

• Question 3:

  Which of the following DoS attacks attempts to block service or reduce activity on a host by sending ping requests directly to the victim?

  A. Land attack
  B. Ping flood attack
  C. SYN flood attack
  D. Teardrop attack
  B. Ping flood attack

• Question 4:

  Which of the following environmental variables represents the PID value of the last child process?

  A. $?
  B. $!
  C. $$
  D. $!!
  B. $!

• Question 5:

  Which of the following organizations is dedicated to computer security research and information sharing?

  A. NIPC
  B. FBI
  C. Honeynet Project
  D. IEEE
  C. Honeynet Project

• Question 6:

  A digital signature is a type of public key cryptography. Which of the following statements are true about digital signatures? Each correct answer represents a complete solution. Choose all that apply.

  A. In order to digitally sign an electronic record, a person must use his/her public key.
  B. In order to verify a digital signature, the signer's private key must be used.
  C. In order to verify a digital signature, the signer's public key must be used.
  D. In order to digitally sign an electronic record, a person must use his/her private key.
  C. In order to verify a digital signature, the signer's public key must be used.
  D. In order to digitally sign an electronic record, a person must use his/her private key.

• Question 7:

  Which of the following Intrusion Detection Systems (IDS) is used to monitor rogue access points and the use of wireless attack tools?

  A. Snort 2.1.0
  B. WIDS
  C. NFR security
  D. LogIDS 1.0
  B. WIDS

• Question 8:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. John notices that the We-are-secure network is vulnerable to a man-in-the-middle attack since the key exchange process of the cryptographic algorithm it is using does not authenticate participants. Which of the following cryptographic algorithms is being used by the We-are-secure server?

  A. RSA
  B. Twofish
  C. Blowfish
  D. Diffie-Hellman
  D. Diffie-Hellman

• Question 9:

  Which of the following attacks is used to hack simple alphabetical passwords?

  A. Dictionary-based attack
  B. Black hat attack
  C. Sniffing
  D. Man-in-the-middle attack
  A. Dictionary-based attack

• Question 10:

  You have made a program secure.c to display which ports are open and what types of services are running on these ports. You want to write the program's output to standard output and simultaneously copy it into a specified file. Which of the following commands will you use to accomplish the task?

  A. less
  B. tee
  C. cat
  D. more
  B. tee