EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 131:

  Which of the following is a set of exclusive rights granted by a state to an inventor or his assignee for a fixed period of time in exchange for the disclosure of an invention?

  A. Snooping
  B. Copyright
  C. Utility model
  D. Patent
  D. Patent

• Question 132:

  Which of the following Trojans is used by attackers to modify the Web browser settings?

  A. Trojan.Lodear
  B. Win32/Pacex.Gen
  C. WMA/TrojanDownloader.GetCodec
  D. Win32/FlyStudio
  D. Win32/FlyStudio

• Question 133:

  You work as a Security Administrator for DataSoft Inc. The company has a Windows-based network. You have been assigned a project to strengthen the system security and also to provide a user friendly environment to the employees so that they can work efficiently. Which of the following concepts should you take into consideration to meet the goals of your project?

  A. The security, functionality, and accessibility triangle.
  B. The security, complexity, and accessibility triangle
  C. The security, complexity, and functionality triangle
  D. The security, functionality, and ease of use triangle.
  D. The security, functionality, and ease of use triangle.

• Question 134:

  Which of the following tools automates the password guessing in NetBIOS sessions and can also be used to perform a manual dictionary attack?

  A. KerbCrack
  B. Legion
  C. THC Hydra
  D. Pwdump
  B. Legion

• Question 135:

  Which of the following processes is used by hackers to find information about the target system?

  A. Banner grabbing
  B. Cracking
  C. Covering tracks
  D. Foot printing
  D. Foot printing

• Question 136:

  What does CSIRT stand for?

  A. Computer Security Information Response Team
  B. Chief Security Incident Response Team
  C. Computer Security Incident Response Team
  D. Chief Security Information Response Team
  C. Computer Security Incident Response Team

• Question 137:

  Which of the following password cracking attacks is implemented by calculating all the possible hashes for a set of characters?

  A. Rainbow attack
  B. Brute force attack
  C. SQL injection attack
  D. Dictionary attack
  A. Rainbow attack

• Question 138:

  Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows-based network. Jason successfully enters the target system remotely by using the advantage of vulnerability. He places a Trojan to maintain future access and then disconnects the remote session.

  The employees of the company complain to Mark, who works as a Professional Ethical Hacker for DataSoft Inc., that some computers are very slow. Mark diagnoses the network and finds that some irrelevant log files and signs of Trojans are present on the computers. He suspects that a malicious hacker has accessed the network. Mark takes the help from Forensic Investigators and catches Jason. Which of the following mistakes made by Jason helped the Forensic Investigators catch him?

  A. Jason did not perform a vulnerability assessment.
  B. Jason did not perform port scanning.
  C. Jason did not perform covering tracks.
  D. Jason did not perform foot printing.
  E. Jason did not perform OS fingerprinting.
  C. Jason did not perform covering tracks.

• Question 139:

  Which of the following is a valid IP address for class B Networks?

  A. 212.136.45.8
  B. 172.157.88.3
  C. 80.33.5.7
  D. 225.128.98.7
  B. 172.157.88.3

• Question 140:

  Which of the following tools provides a great solution for auditing and testing the recognition and response capabilities of the corporate security defenses?

  A. Traffic IQ Professional
  B. IPSentry
  C. Burp Suite
  D. F-Secure
  A. Traffic IQ Professional