EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 201:

  Fill in the blank with the appropriate word is software that is a subcategory of malware and refers to unwanted software that performs malicious actions on a user's computer. Some its examples are Trojan, adware, and spyware.

  Crimeware

• Question 202:

  Which of the following algorithms produces a digital signature which is used to authenticate the bit- stream images?

  A. BOINIC
  B. HashClash
  C. MD5
  D. MD6
  C. MD5

• Question 203:

  Which of the following is a name, symbol, or slogan with which a product is identified?

  A. Copyright
  B. Trademark
  C. Trade secret
  D. Patent
  B. Trademark

• Question 204:

  Fill in the blank with the appropriate layer name of the OSI model.

  Secure Socket Layer (SSL) operates at the _______ layer of the OSI model.

  transport

• Question 205:

  Which of the following codes is used to crack Windows login passwords?

  A. I love you code
  B. Glide code
  C. Code red
  D. Code blue
  B. Glide code

• Question 206:

  Which of the following is a valid IP address for class B Networks?

  A. 225.128.98.7
  B. 212.136.45.8
  C. 80.33.5.7
  D. 172.157.88.3
  D. 172.157.88.3

• Question 207:

  Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

  A. Lead investigator
  B. Legal representative
  C. Information security representative
  D. Technical representative
  D. Technical representative

• Question 208:

  Which of the following terms is used for the process of securing a system or a device on a network infrastructure?

  A. Hardening
  B. Sanitization
  C. Authentication
  D. Cryptography
  A. Hardening

• Question 209:

  Which of the following statements are correct about spoofing and session hijacking? Each correct answer represents a complete solution. Choose all that apply.

  A. Spoofing is an attack in which an attacker can spoof the IP address or other identity of the targetand the valid user cannot be active.
  B. Session hijacking is an attack in which an attacker takes over the session, and the valid user'ssession is disconnected.
  C. Session hijacking is an attack in which an attacker takes over the session, and the valid user'ssession is not disconnected.
  D. Spoofing is an attack in which an attacker can spoof the IP address or other identity of the targetbut the valid user can be active.
  C. Session hijacking is an attack in which an attacker takes over the session, and the valid user'ssession is not disconnected.
  D. Spoofing is an attack in which an attacker can spoof the IP address or other identity of the targetbut the valid user can be active.

• Question 210:

  You work as a Network Administrator for Infonet Inc. The company's network is connected to the Internet. The network has a Web server that is accessible to Internet users. For security, you want to keep the Web server separate from other servers on the network. Where will you place the Web server?

  A. In a virtual private network (VPN)
  B. With the authentication server
  C. In a demilitarized zone (DMZ)
  D. With the database server
  C. In a demilitarized zone (DMZ)