EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 231:

  Adam works as a Security Analyst for Umbrella Inc. He is retrieving large amount of log data from syslog servers and network devices such as Router and switches. He is facing difficulty in analyzing the logs that he has retrieved. To solve this problem, Adam decides to use software called Sawmill. Which of the following statements are true about Sawmill?

  Each correct answer represents a complete solution. Choose all that apply.

  A. It is used to analyze any device or software package, which produces a log file such as Web servers, network devices (switches and routers etc.), syslog servers etc.
  B. It incorporates real-time reporting and real-time alerting.
  C. It comes only as a software package for user deployment.
  D. It is a software package for the statistical analysis and reporting of log files.
  A. It is used to analyze any device or software package, which produces a log file such as Web servers, network devices (switches and routers etc.), syslog servers etc.
  B. It incorporates real-time reporting and real-time alerting.
  D. It is a software package for the statistical analysis and reporting of log files.

• Question 232:

  Burp Suite is a Java application for attacking web applications. This tool includes a proxy server, a spider, an intruder, and a repeater. Which of the following can be used to perform stress testing?

  A. Repeater
  B. Spider
  C. Intruder
  D. Proxy Server
  A. Repeater

• Question 233:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using dumpster diving to gather information about Weare- secure, Inc. In which of the following steps of malicious hacking does dumpster diving come under?

  A. Gaining access
  B. Scanning
  C. Maintaining access
  D. Reconnaissance
  D. Reconnaissance

• Question 234:

  Which of the following attacks is a man-in-the-middle exploit where a third party can gain HTTPS cookie data?

  A. Cookie poisoning
  B. CookieMonster attack
  C. Cross site scripting attack
  D. Smart Force Attack
  B. CookieMonster attack

• Question 235:

  Which of the following commands is used to test a network connection?

  A. Popd
  B. Path
  C. Perfmon
  D. Ping
  D. Ping

• Question 236:

  Which of the following Linux rootkits allows attackers to hide files, processes, and network connections? Each correct answer represents a complete solution. Choose all that apply.

  A. Phalanx2
  B. Adore
  C. Knark
  D. Beastkit
  B. Adore
  C. Knark

• Question 237:

  Andrew works as a Forensic Investigator for PassGuide Inc. The company has a Windows-based environment. The company's employees use Microsoft Outlook Express as their e-mail client program. E-mails of some employees have been deleted due to a virus attack on the network. Andrew is therefore assigned the task to recover the deleted mails. Which of the following tools can Andrew use to accomplish the task?

  Each correct answer represents a complete solution. Choose two.

  A. EventCombMT
  B. eMailTrackerPro
  C. FINALeMAIL
  D. R-mail
  C. FINALeMAIL
  D. R-mail

• Question 238:

  John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is as follows:

  A. This vulnerability helps in a cross site scripting attack.
  B. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the attacker.
  C. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.
  D. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
  A. This vulnerability helps in a cross site scripting attack.
  C. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.
  D. The countermeasure to 'printenv' vulnerability is to remove the CGI script.

• Question 239:

  Which of the following Linux rootkits is installed via stolen SSH keys?

  A. Phalanx2
  B. Beastkit
  C. Adore
  D. Linux.Ramen
  A. Phalanx2

• Question 240:

  Which of the following statements are true about routers?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Routers are responsible for making decisions about which of several paths network (or Internet) traffic will follow.
  B. Routers organize addresses into classes, which are used to determine how to move packets from one network to another.
  C. Routers do not limit physical broadcast traffic.
  D. Routers act as protocol translators and bind dissimilar networks.
  A. Routers are responsible for making decisions about which of several paths network (or Internet) traffic will follow.
  B. Routers organize addresses into classes, which are used to determine how to move packets from one network to another.
  D. Routers act as protocol translators and bind dissimilar networks.