EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 321:

  Which of the following viruses/worms uses the buffer overflow attack?

  A. Nimda virus
  B. Code red worm
  C. Chernobyl (CIH) virus
  D. Klez worm
  B. Code red worm

• Question 322:

  Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

  A. Lead investigator
  B. Information security representative
  C. Technical representative
  D. Legal representative
  C. Technical representative

• Question 323:

  Jason works as a System Administrator for Passguide Inc. The company has a Windows-based network. Sam, an employee of the company, accidentally changes some of the applications and system settings. He complains to Jason that his

  system is not working properly. To troubleshoot the problem, Jason diagnoses the internals of his computer and observes that some changes have been made in Sam's computer registry. To rectify the issue, Jason has to restore the registry.

  Which of the following utilities can Jason use to accomplish the task?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Reg.exe
  B. Resplendent registrar
  C. EventCombMT
  D. Regedit.exe
  A. Reg.exe
  B. Resplendent registrar
  D. Regedit.exe

• Question 324:

  Which of the following statements is true about IP spoofing?

  A. It is the process used by hackers for disguising the source IP address.
  B. It is the process used by hackers to access the target system.
  C. It is the process used by hackers to find the IP address of a target system.
  D. It is a process used by hackers to generate new IP addresses.
  A. It is the process used by hackers for disguising the source IP address.

• Question 325:

  In which of the following techniques does an attacker take network traffic coming towards a host at one port and forward it from that host to another host?

  A. Snooping
  B. UDP port scanning
  C. Port redirection
  D. Firewalking
  C. Port redirection

• Question 326:

  In which of the following techniques does an attacker take network traffic coming towards a host at one port and forward it from that host to another host?

  A. Firewalking
  B. Snooping
  C. Port redirection
  D. UDP port scanning
  C. Port redirection

• Question 327:

  Which of the following password cracking attacks is implemented by calculating all the possible hashes for a set of characters?

  A. Rainbow attack
  B. Dictionary attack
  C. Brute force attack
  D. SQL injection attack
  A. Rainbow attack

• Question 328:

  Which of the following are the types of DOS commands?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Direct commands
  B. Internal commands
  C. Active commands
  D. External commands
  B. Internal commands
  D. External commands

• Question 329:

  Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages on these addresses. Which of the following e-mail crimes is Peter committing?

  A. E-mail bombing
  B. E-mail spoofing
  C. E-mail Spam
  D. E-mail Storm
  C. E-mail Spam

• Question 330:

  You work as a security manager in Mariotiss Inc. Your enterprise has been facing network and software security threats since a few months. You want to renew your current security policies and management to enhance the safety of your information systems. Which of the following is the best practice to initiate the renewal process from the lowest level with the least managerial effort?

  A. Change the entire security policy.
  B. Start the Incident handling process.
  C. Switch to a new network infrastructure.
  D. Perform an IT audit.
  D. Perform an IT audit.