EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 121:

  Which of the following is the phase of Incident handling process in which the distinction between an event and an incident is made?

  A. Identification phase
  B. Preparation phase
  C. Eradication phase
  D. Differential phase
  A. Identification phase

• Question 122:

  Which of the following proxy servers is also referred to as transparent proxies or forced proxies?

  A. Intercepting proxy server
  B. Anonymous proxy server
  C. Reverse proxy server
  D. Tunneling proxy server
  A. Intercepting proxy server

• Question 123:

  Which of the following needs to be documented to preserve evidences for presentation in court?

  A. Incident response policy
  B. Account lockout policy
  C. Separation of duties
  D. Chain of custody
  D. Chain of custody

• Question 124:

  Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that apply.

  A. TIS authentication
  B. Password-based authentication
  C. Kerberos authentication
  D. Rhosts (rsh-style) authentication
  A. TIS authentication
  C. Kerberos authentication
  D. Rhosts (rsh-style) authentication

• Question 125:

  Which of the following is a network worm that exploits the RPC sub-system vulnerability present in the Microsoft Windows operating system?

  A. WMA/TrojanDownloader.GetCodec
  B. Win32/PSW.OnLineGames
  C. Win32/Agent
  D. Win32/Conflicker
  D. Win32/Conflicker

• Question 126:

  Which of the following commands is used to make traceroute wait 5 seconds for a response to a packet?

  A. traceroute -r
  B. traceroute -w
  C. traceroute -q
  D. traceroute -T
  B. traceroute -w

• Question 127:

  Which of the following techniques is used to log network traffic?

  A. Cracking
  B. IP address spoofing
  C. Sniffing
  D. Tunneling
  C. Sniffing

• Question 128:

  Which of the following statements are true about routers?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic will follow.
  B. Routers do not limit physical broadcast traffic.
  C. Routers organize addresses into classes, which are used to determine how to move packets fromone network to another.
  D. Routers act as protocol translators and bind dissimilar networks.
  A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic will follow.
  C. Routers organize addresses into classes, which are used to determine how to move packets fromone network to another.
  D. Routers act as protocol translators and bind dissimilar networks.

• Question 129:

  Which of the following malicious codes is used by a hacker to get control over the system files of a victim?

  A. Worm
  B. Multipartite virus
  C. Macro virus
  D. Trojan
  D. Trojan

• Question 130:

  Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses 'Faulkner' as the password for the gmail account. After a few days, he starts receiving a lot of e-mails stating that his gmail account has been hacked. He also finds that some of his important mails have been deleted by someone. Which of the following methods has the attacker used to crack Andrew's password?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Brute force attack
  B. Dictionary-based attack
  C. Rainbow attack
  D. Zero-day attack
  E. Password guessing
  F. Social engineering
  G. Denial-of-service (DoS) attack
  H. Buffer-overflow attack
  A. Brute force attack
  B. Dictionary-based attack
  C. Rainbow attack
  E. Password guessing
  F. Social engineering