EC-COUNCIL EC-COUNCIL Certifications ECSS Questions & Answers

• Question 311:

  Which of the following is the first computer virus that was used to infect the boot sector of storage media formatted with the DOS File Allocation Table (FAT) file system?

  A. I love you

  B. Melissa

  C. Tequila

  D. Brain

  Correct Answer: D

• Question 312:

  Which of the following needs to be documented to preserve evidences for presentation in court?

  A. Incident response policy

  B. Account lockout policy

  C. Separation of duties

  D. Chain of custody

  Correct Answer: D

• Question 313:

  Kerberos is a computer network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Which of the following statements are true about the Kerberos authentication scheme?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Kerberos requires continuous availability of a central server.

  B. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.

  C. Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject'spasswords.

  D. Kerberos requires the clocks of the involved hosts to be synchronized.

  Correct Answer: ACD

• Question 314:

  Which of the following is used in asymmetric encryption?

  A. Public key and user key

  B. SSL

  C. Public key and private key

  D. NTFS

  Correct Answer: C

• Question 315:

  Sam, a malicious hacker, targets the electric power grid of Umbrella Inc. and gains access to the electronic control systems. Which of the following types of cybercrime has Sam performed?

  A. Cyber defamation

  B. Cybertrespass

  C. Cyberterrorism

  D. Cybertheft

  Correct Answer: C

• Question 316:

  Which of the following statements best describes a certification authority?

  A. A certification authority is a type of encryption that uses a public key and a private key pair fordata encryption.

  B. A certification authority is an entity that issues digital certificates for use by other parties.

  C. A certification authority is a technique to authenticate digital documents by using computercryptography.

  D. A certification authority is a type of encryption that uses a single key to encrypt and decryp t data.

  Correct Answer: B

• Question 317:

  You have just set up a wireless network for customers at a coffee shop. Which of the following are good security measures to implement? Each correct answer represents a complete solution. Choose two.

  A. Using WEP encryption

  B. Using WPA encryption

  C. Not broadcasting SSID

  D. MAC filtering the router

  Correct Answer: AB

• Question 318:

  Linux traffic monitoring tools are used to monitor and quickly detect faults in the network or a system. Which of the following tools are used to monitor traffic of the Linux operating system? Each correct answer represents a complete solution. Choose all that apply.

  A. PsExec

  B. IPTraf

  C. MRTG

  D. PsLogList

  E. Ntop

  Correct Answer: BCE

• Question 319:

  John works as an Office Assistant in DataSoft Inc. He has received an e-mail from [email protected] with the following message: The DueSoft Lottery Incorporation This is to inform you that you have just won a prize of $7,500.00 for this year's Annual Lottery promotion, which was organized by Msn/Yahoo Lottery in conjunction with DueSoft. We collect active online e-mails and select five people every

  year as our winners through an electronic balloting machine. Please reply within three days of receiving this e-mail with your full details like Name, Address, Sex, Occupation, Age, State, Telephone number, and Country to claim your prize. If John replies to this e-mail, which of the following attacks may he become vulnerable to?

  A. Salami attack

  B. Man-in-the-Middle attack

  C. Phishing attack

  D. DoS attack

  Correct Answer: C

• Question 320:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

  

  Which of the following tools is John using to crack the wireless encryption keys?

  A. AirSnort

  B. Kismet

  C. PsPasswd

  D. Cain

  Correct Answer: A