EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 281:

  Which of the following is the name given to expert groups that handle computer security incidents?

  A. Computer forensic team
  B. Z-Force
  C. Software development team
  D. CSIRT
  D. CSIRT

• Question 282:

  John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He observes that the We-are-secure server is vulnerable to a special type of DoS attack and he makes the following suggestions to the security authority to protect the server from this DoS attack. The countermeasures against this type of DoS attack are as follows: l Disabling IP-directed broadcasts at the We-are-secure router l Configuring local computers so as not to respond to such ICMP packets that are configured to be sent to IP broadcast addresses Which of the following DoS attacks has John discovered as a vulnerability for the We-are-secure security network?

  A. Smurf attack
  B. Jolt attack
  C. Fraggle attack
  D. Teardrop attack
  A. Smurf attack

• Question 283:

  Which of the following is a technique of attacks in which the attacker secretly listens to the private conversation between victims?

  A. Dialler attack
  B. Denial of service
  C. Eavesdropping
  D. Intrusion
  C. Eavesdropping

• Question 284:

  A attack is designed to bring loss of network connectivity and services by consuming the bandwidth of a user's network.

  A. Dictionary
  B. Brute force
  C. Man-in-the-middle
  D. Denial of Service (DoS)
  D. Denial of Service (DoS)

• Question 285:

  Which of the following is used to authenticate asymmetric keys?

  A. Digital signature
  B. MAC Address
  C. Password
  D. Demilitarized zone (DMZ)
  A. Digital signature

• Question 286:

  Which of the following terms is used for the process of securing a system or a device on a network infrastructure?

  A. Hardening
  B. Authentication
  C. Cryptography
  D. Sanitization
  A. Hardening

• Question 287:

  Which of the following password cracking attacks does not use any software for cracking e-mail passwords? Each correct answer represents a complete solution. Choose all that apply.

  A. Brute force attack
  B. Shoulder surfing
  C. Social engineering
  D. Dictionary attack
  B. Shoulder surfing
  C. Social engineering

• Question 288:

  You work as a Network Administrator for Maverick Inc. The company has a Linux-based network.

  You are working on a Linux computer. You want to see the environment variables that are set on your computer. Which of the following commands will you use?

  A. ls
  B. echo $shell
  C. rm
  D. env
  D. env

• Question 289:

  Which of the following forensic tool suite is developed for Linux operating system?

  A. MForensicsLab
  B. S.M.A.R.T.
  C. Wetstone
  D. ProDiscover
  B. S.M.A.R.T.

• Question 290:

  Which of the following layers of the OSI model provides non-repudiation services?

  A. The application layer
  B. The physical layer
  C. The data-link layer
  D. The presentation layer
  A. The application layer