EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 151:

  Which of the following tools combines the functionality of the traceroute and ping programs in a single network diagnostic tool?

  A. Conky
  B. Mtr
  C. Ntop
  D. Cacti
  B. Mtr

• Question 152:

  John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He observes that the We-are-secure server is vulnerable to a special type of DoS attack and he makes the following suggestions to the security authority to protect the server from this DoS attack. The countermeasures against this type of DoS attack are as follows: Disabling IP-directed broadcasts at the We-are-secure router Configuring local computers so as not to respond to such ICMP packets that are configured to be sent to IP broadcast addresses Which of the following DoS attacks has John discovered as a vulnerability for the We-are-secure security network?

  A. Smurf attack
  B. Fraggle attack
  C. Teardrop attack
  D. Jolt attack
  A. Smurf attack

• Question 153:

  In which of the following techniques does an attacker take network traffic coming towards a host at one port and forward it from that host to another host?

  A. Port redirection
  B. Snooping
  C. UDP port scanning
  D. Firewalking
  A. Port redirection

• Question 154:

  What does CSIRT stand for?

  A. Computer Security Incident Response Team
  B. Chief Security Incident Response Team
  C. Computer Security Information Response Team
  D. Chief Security Information Response Team
  A. Computer Security Incident Response Team

• Question 155:

  Which of the following is the first computer virus that was used to infect the boot sector of storage media formatted with the DOS File Allocation Table (FAT) file system?

  A. I love you
  B. Melissa
  C. Tequila
  D. Brain
  D. Brain

• Question 156:

  You work as a Network Security Administrator for NetPerfect Inc. The company has a Windowsbased network. You are incharge of the data and network security of the company. While performing a threat log analysis, you observe that one of the database administrators is pilfering confidential data. What type of threat is this?

  A. Malware
  B. External threat
  C. Internal threat
  D. Zombie
  C. Internal threat

• Question 157:

  Which of the following processes is used to convert plain text into cipher text?

  A. Steganography
  B. Encapsulation
  C. Decryption
  D. Encryption
  D. Encryption

• Question 158:

  Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages on these addresses. Which of the following e-mail crimes is Peter committing?

  A. E-mail Spam
  B. E-mail spoofing
  C. E-mail bombing
  D. E-mail Storm
  A. E-mail Spam

• Question 159:

  Which of the following tunneling protocols is used to make data transfers secure on the network layer?

  A. L2TP
  B. L2F
  C. IPSec
  D. PPTP
  C. IPSec

• Question 160:

  John works as a Professional Ethical Hacker for NetPerfect Inc. The company has a Linux-based network. All client computers are running on Red Hat 7.0 Linux. The Sales Manager of the company complains to John that his system contains an unknown package named as tar.gz and his documents are exploited. To resolve the problem, John uses a Port scanner to enquire about the open ports and finds out that the HTTP server service port on 27374 is open. He suspects that the other computers on the network are also facing the same problem. John discovers that a malicious application is using the synscan tool to randomly generate IP addresses.

  Which of the following worms has attacked the computer?

  A. Ramen
  B. Nimda
  C. Code red
  D. LoveLetter
  A. Ramen