EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 21:

  Fill in the blank with the appropriate name of the attack.

  takes best advantage of an existing authenticated connection

  session hijacking

• Question 22:

  Which of the following tools can be used for steganography?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Anti-x
  B. Image hide
  C. Stegbreak
  D. Snow.exe
  B. Image hide
  D. Snow.exe

• Question 23:

  Which of the following refers to a computer that must be secure because it is accessible from the Internet and is vulnerable to attacks?

  A. Gateway
  B. LMHOSTS
  C. Firewall
  D. Bastion host
  D. Bastion host

• Question 24:

  Mark works as a Network Security Administrator for Umbrella Inc. The company has a Windows domain-based network. To provide security to the network, Mark plans to configure IDS. He wants to ensure that attackers are not able to modify or delete the system files. To determine such attacks, the IDS must be able to monitor the file structure of the system. Which of the following intrusion detection technologies can be used to accomplish the task?

  A. Network IDS
  B. Log File Monitor (LFM)
  C. Host-based IDS
  D. Systems Integrity Verifier (SIV)
  D. Systems Integrity Verifier (SIV)

• Question 25:

  You work as a Network Administrator for DataSoft Inc. The company needs a secure network. You have been assigned the task to track the network attacks that have occurred within the last one month. To accomplish the task, you need to scan the log files for suspicious events and patterns.

  Which of the following will you use to scan the log files?

  A. PsTools suite
  B. System Integrity Verifiers (SIV)
  C. Log File Monitor (LFM)
  D. Specter
  C. Log File Monitor (LFM)

• Question 26:

  John works as a Network Security Professional. He is assigned a project to test the security of www.we-are-secure.com. He is working on the Linux operating system and wants to install an Intrusion Detection System on the We-are-secure server so that he can receive alerts about any hacking attempts. Which of the following tools can John use to accomplish the task?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Samhain
  B. Tripwire
  C. Snort
  D. SARA
  A. Samhain
  C. Snort

• Question 27:

  You work as a Network Administrator for Maverick Inc. The company has a Linux-based network. You are working on a Linux computer. You want to see the environment variables that are set on your computer. Which of the following commands will you use?

  A. echo $shell
  B. env
  C. ls
  D. rm
  B. env

• Question 28:

  Which of the following protocols does Microsoft Windows use for traceroute?

  A. UDP
  B. TCP
  C. ICMP
  D. SNMP
  C. ICMP

• Question 29:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

  

  Which of the following tools is John using to crack the wireless encryption keys?

  A. Cain
  B. Kismet
  C. PsPasswd
  D. AirSnort
  D. AirSnort

• Question 30:

  You work as a Network Administrator for Infonet Inc. The company uses Wired Equivalent Privacy (WEP) for wireless security. Who among the following can authenticate from the access point of the network?

  A. Only users within the company.
  B. Only users with the correct WEP key.
  C. Only the administrator.
  D. Anyone can authenticate.
  B. Only users with the correct WEP key.