EC-COUNCIL ECSS Online Practice Questions and Exam Preparation

EC-COUNCIL ECSS Online Questions & Answers

• Question 51:

  Which of the following protocols is used the most by web servers?

  A. COM
  B. FTP
  C. HTTP
  D. ORG
  C. HTTP

• Question 52:

  Which of the following components are usually found in an Intrusion detection system (IDS)? Each correct answer represents a complete solution. Choose two.

  A. Modem
  B. Console
  C. Sensor
  D. Gateway
  E. Firewall
  B. Console
  C. Sensor

• Question 53:

  Which of the following password cracking attacks is implemented by calculating all the possible hashes for a set of characters?

  A. Rainbow attack
  B. Brute force attack
  C. SQL injection attack
  D. Dictionary attack
  A. Rainbow attack

• Question 54:

  Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice's password read from the last session, which Bob accepts. Which of the following attacks is being used by Eve?

  A. Firewalking
  B. Replay
  C. Session fixation
  D. Cross site scripting
  B. Replay

• Question 55:

  Which of the following commands is used to make traceroute wait 5 seconds for a response to a packet?

  A. traceroute -T
  B. traceroute -q
  C. traceroute -r
  D. traceroute -w
  D. traceroute -w

• Question 56:

  John works as a Security Administrator for NetPerfect Inc. The company uses Windows-based

  systems. A project has been assigned to John to track malicious hackers and to strengthen the company's security system. John configures a computer system to trick malicious hackers into thinking that it is the company's main server, which

  in fact is a decoy system to track hackers.

  Which system is John using to track the malicious hackers?

  A. Honeypot
  B. Intrusion Detection System (IDS)
  C. Bastion host
  D. Honeytokens
  A. Honeypot

• Question 57:

  Mark has been assigned a project to configure a wireless network for a company. The network should contain a Windows 2003 server and 30 Windows XP client computers. Mark has a single dedicated Internet connection that has to be shared among all the client computers and the server. The configuration needs to be done in a manner that the server should act as a proxy server for the client computers. Which of the following programs can Mark use to fulfill this requirement?

  A. Microsoft Internet Security and Acceleration Server (ISA)
  B. Wingate
  C. SOCKS
  D. Sniffer
  B. Wingate

• Question 58:

  What is the major difference between a worm and a Trojan horse?

  A. A worm is self replicating, while a Trojan horse is not.
  B. A Trojan horse is a malicious program, while a worm is an anti-virus software.
  C. A worm spreads via e-mail, while a Trojan horse does not.
  D. A worm is a form of malicious program, while a Trojan horse is a utility.
  A. A worm is self replicating, while a Trojan horse is not.

• Question 59:

  An Anti-Virus software is used to prevent, detect, and remove malware from a system, including computer viruses, worms, and Trojan horses. Which of the following companies are the providers of Anti-virus softwares?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Kaspersky Lab
  B. Symantec Corporation
  C. AVG Technologies
  D. McAfee Inc.
  E. F-Secure Corporation
  A. Kaspersky Lab
  B. Symantec Corporation
  C. AVG Technologies
  D. McAfee Inc.
  E. F-Secure Corporation

• Question 60:

  You work as a professional Ethical Hacker. You are assigned a project to perform blackbox testing of the security of www.we-are-secure.com. Now you want to perform banner grabbing to retrieve information about the Webserver being used by we-are-secure. Which of the following tools can you use to accomplish the task?

  A. Wget
  B. WinSSLMiM
  C. Whisker
  D. httprint
  D. httprint