EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 41:

  Which of the following software can be used to protect a computer system from external threats (viruses, worms, malware, or Trojans) and malicious attacks? Each correct answer represents a part of the solution. Choose all that apply.

  A. Employee monitoring software
  B. Burp Suite
  C. Antivirus
  D. Firewall
  C. Antivirus
  D. Firewall

• Question 42:

  Peter works as a professional Computer Hacking Forensic Investigator for eLaw-Suit law firm. He is working on a case of a cyber crime. Peter knows that the good investigative report should not only communicate the relevant facts, but also present expert opinion. This report should not include the cases in which the expert acted as a lay witness. Which of the following type of witnesses is a lay witness?

  A. One who can give a firsthand account of something seen, heard, or experienced.
  B. One with special knowledge of the subject about which he or she is testifying.
  C. One who observes an event.
  D. One who is not qualified as an expert witness.
  D. One who is not qualified as an expert witness.

• Question 43:

  Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to investigate the computer of an employee, who is suspected for classified data theft. Suspect's computer runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He knows that in Windows operating system, the data is searched in pre-defined steps for proper and efficient analysis. Which of the following is the correct order for searching data on a Windows based system?

  A. Volatile data, file slack, registry, memory dumps, file system, system state backup, interne t traces
  B. Volatile data, file slack, registry, system state backup, internet traces, file system, memory dumps
  C. Volatile data, file slack, internet traces, registry, memory dumps, system state backup, file system
  D. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces
  D. Volatile data, file slack, file system, registry, memory dumps, system state backup, interne t traces

• Question 44:

  Which of the following parameters are required to be followed on receiving a suspicious mail according to the Department of Justice?

  Each correct answer represents a part of the solution. Choose all that apply.

  A. Call
  B. Look
  C. Identify
  D. Stop
  A. Call
  B. Look
  D. Stop

• Question 45:

  Which of the following Trojans is used by attackers to modify the Web browser settings?

  A. WMA/TrojanDownloader.GetCodec
  B. Win32/Pacex.Gen
  C. Win32/FlyStudio
  D. Trojan.Lodear
  C. Win32/FlyStudio

• Question 46:

  Which of the following law does not protect intellectual property?

  A. Patent law
  B. Copyright
  C. Murphy's law
  D. Trademark
  C. Murphy's law

• Question 47:

  Which of the following types of attacks cannot be prevented by technical measures only?

  A. Brute force
  B. Ping flood attack
  C. Smurf DoS
  D. Social engineering
  D. Social engineering

• Question 48:

  Which of the following types of firewall functions by creating two different communications, one between the client and the firewall, and the other between the firewall and the end server?

  A. Endian firewall
  B. Stateful firewall
  C. Packet filter firewall
  D. Proxy-based firewall
  D. Proxy-based firewall

• Question 49:

  John, a malicious hacker, forces a router to stop forwarding packets by flooding it with many open connections simultaneously so that all hosts behind it are effectively disabled. Which of the following attacks is John performing?

  A. DoS attack
  B. Rainbow attack
  C. ARP spoofing
  D. Replay attack
  A. DoS attack

• Question 50:

  In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to the target system?

  A. Fraggle
  B. Jolt
  C. Teardrop
  D. Ping of death
  D. Ping of death