EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 211:

  Which of the following statements is true about a honeyfarm?

  A. It is a centralized collection of honeypots.
  B. It is a firewall.
  C. It is a computer system used to attract hackers to identify them.
  D. It is a computer system that has no security.
  A. It is a centralized collection of honeypots.

• Question 212:

  What is the size of Master Boot Record (MBR)?

  A. 2 KB
  B. 512 bytes
  C. 256 bytes
  D. 1 KB
  B. 512 bytes

• Question 213:

  You manage a Windows Server 2008 server named uCert1 in a domain named PassGuide.com.

  uCert1 has the Web Server (IIS) role installed and hosts an intranet Web site named

  PassGuideInternal.

  You want to ensure that all authentication traffic to the Web site is encrypted securely without the use of SSL. You disable Anonymous Authentication. What else should you do?

  A. Enable Windows Authentication and Forms Authentication.
  B. Enable Windows Authentication and Digest Authentication.
  C. Enable Basic Authentication and Windows Authentication.
  D. Enable Digest Authentication and Forms Authentication.
  B. Enable Windows Authentication and Digest Authentication.

• Question 214:

  Which of the following is an example of a social engineering attack?

  A. Phishing
  B. Man-in-the-middle attack
  C. Browser Sniffing
  D. E-mail bombing
  A. Phishing

• Question 215:

  Mark has been assigned a project to configure a wireless network for a company. The network should contain a Windows 2003 server and 30 Windows XP client computers. Mark has a single dedicated Internet connection that has to be shared among all the client computers and the server. The configuration needs to be done in a manner that the server should act as a proxy server for the client computers. Which of the following programs can Mark use to fulfill this requirement?

  A. Wingate
  B. SOCKS
  C. Sniffer
  D. Microsoft Internet Security and Acceleration Server (ISA)
  A. Wingate

• Question 216:

  Which of the following statements are true about firewalking?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Firewalking works on the UDP packets.
  B. A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
  C. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
  D. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.
  B. A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
  C. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
  D. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.

• Question 217:

  Which of the following programs is used to monitor the keystrokes that a user types on a specific computer's keyboard?

  A. Keylogger
  B. Brutus
  C. Ettercap
  D. THC-Hydra
  A. Keylogger

• Question 218:

  Peter works as a professional Computer Hacking Forensic Investigator for eLaw-Suit law firm. He is working on a case of a cyber crime. Peter knows that the good investigative report should not only communicate the relevant facts, but also present expert opinion. This report should not include the cases in which the expert acted as a lay witness. Which of the following type of witnesses is a lay witness?

  A. One who observes an event.
  B. One with special knowledge of the subject about which he or she is testifying.
  C. One who can give a firsthand account of something seen, heard, or experienced.
  D. One who is not qualified as an expert witness.
  D. One who is not qualified as an expert witness.

• Question 219:

  Which of the following is NOT a Wired Equivalent Privacy authentication method?

  A. Media access authentication
  B. Shared key authentication
  C. Kerberos authentication
  D. Open system authentication
  C. Kerberos authentication

• Question 220:

  Which of the following proxy servers is used to retrieve web pages?

  A. FTP proxy server
  B. NAT proxy server
  C. HTTP proxy server
  D. Socks proxy server
  C. HTTP proxy server