EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 291:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

  

  Which of the following tools is John using to crack the wireless encryption keys?

  A. AirSnort
  B. Kismet
  C. PsPasswd
  D. Cain
  A. AirSnort

• Question 292:

  What are the two common parts of a Remote Access Trojan (RAT)?

  A. A client component and a server component
  B. The outbound port and the inbound port
  C. The ARP cache and the CAM table
  D. The payload and the wrapper
  A. A client component and a server component

• Question 293:

  Fill in the blank with the appropriate layer name of the OSI model.

  Secure Socket Layer (SSL) operates at the ______ layer of the OSI model.

  transport

• Question 294:

  In which of the following access control models can a user not grant permissions to other users to see a copy of an object marked as secret that he has received, unless they have the appropriate permissions?

  A. Role Based Access Control (RBAC)
  B. Mandatory Access Control (MAC)
  C. Access Control List (ACL)
  D. Discretionary Access Control (DAC)
  B. Mandatory Access Control (MAC)

• Question 295:

  What is the major difference between a worm and a Trojan horse?

  A. A worm is self replicating, while a Trojan horse is not.
  B. A worm is a form of malicious program, while a Trojan horse is a utility.
  C. A worm spreads via e-mail, while a Trojan horse does not.
  D. A Trojan horse is a malicious program, while a worm is an anti-virus software.
  A. A worm is self replicating, while a Trojan horse is not.

• Question 296:

  Mark works as a Network Security Administrator for BlueWells Inc. The company has a Windowsbased network. Mark is giving a presentation on Network security threats to the newly recruited employees of the company. His presentation is about the External threats that the company recently faced in the past. Which of the following statements are true about external threats?

  Each correct answer represents a complete solution. Choose three.

  A. These are the threats that originate from within the organization.
  B. These are the threats intended to flood a network with large volumes of access requests.
  C. These threats can be countered by implementing security controls on the perimeters of the network, such as firewalls, which limit user access to the Internet.
  D. These are the threats that originate from outside an organization in which the attacker attempts to gain unauthorized access.
  B. These are the threats intended to flood a network with large volumes of access requests.
  C. These threats can be countered by implementing security controls on the perimeters of the network, such as firewalls, which limit user access to the Internet.
  D. These are the threats that originate from outside an organization in which the attacker attempts to gain unauthorized access.

• Question 297:

  Maria works as a professional Ethical Hacker. She recently has been assigned a project to test the security of www.we-are-secure.com. The company has provided the following information about the infrastructure of its network:

  ꞏ Network diagrams of the we-are-secure infrastructure ꞏ Source code of the security tools ꞏ IP addressing information of the we-are-secure network

  Which of the following testing methodologies is we-are-secure.com using to test the security of its network?

  A. Graybox
  B. Blackbox
  C. Alpha testing
  D. Whitebox
  D. Whitebox

• Question 298:

  Which of the following is the correct order of digital investigations Standard Operating Procedure (SOP)?

  A. Initial analysis, request for service, data collection, data reporting, data analysis
  B. Request for service, initial analysis, data collection, data reporting, data analysis
  C. Request for service, initial analysis, data collection, data analysis, data reporting
  D. Initial analysis, request for service, data collection, data analysis, data reporting
  C. Request for service, initial analysis, data collection, data analysis, data reporting

• Question 299:

  A firewall is a combination of hardware and software, used to provide security to a network. It is used to protect an internal network or intranet against unauthorized access from the Internet or other outside networks. It restricts inbound and outbound access and can analyze all traffic between an internal network and the Internet. Users can configure a firewall to pass or block packets from specific IP addresses and ports. Which of the following tools works as a firewall for the Linux 2.4 kernel?

  A. Stunnel
  B. IPChains
  C. IPTables
  D. OpenSSH
  C. IPTables

• Question 300:

  Which of the following OSI layers is used for routers?

  A. Application layer
  B. Network layer
  C. Physical layer
  D. Transport layer
  B. Network layer