EC-COUNCIL EC-COUNCIL Certifications ECSAV10 Questions & Answers

• Question 91:

  During the process of fingerprinting a web application environment, what do you need to do in order to analyze HTTP and HTTPS request headers and the HTML source code?

  A. Examine Source of the Available Pages

  B. Perform Web Spidering

  C. Perform Banner Grabbing

  D. Check the HTTP and HTML Processing by the Browser

  Correct Answer: D

• Question 92:

  In the context of penetration testing, what does blue teaming mean?

  

  A. A penetration test performed with the knowledge and consent of the organization's IT staff

  B. It is the most expensive and most widely used

  C. It may be conducted with or without warning

  D. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management

  Correct Answer: A

• Question 93:

  Identify the type of firewall represented in the diagram below:

  

  A. Stateful multilayer inspection firewall

  B. Application level gateway

  C. Packet filter

  D. Circuit level gateway

  Correct Answer: A

• Question 94:

  In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?

  A. IPS evasion technique

  B. IDS evasion technique

  C. UDP evasion technique

  D. TTL evasion technique

  Correct Answer: D

• Question 95:

  What operating system would respond to the following command?

  C:\> nmap -a W 10.10.145.65

  A. Mac OS X

  B. Windows XP

  C. Windows 95

  D. FreeBSD

  Correct Answer: D

• Question 96:

  In a virtual test environment, Michael is testing the strength and security of BGP using multiple routers to mimic the backbone of the Internet. This project will help him write his doctoral thesis on "bringing down the Internet". Without sniffing the traffic between the routers, Michael sends millions of RESET packets to the routers in an attempt to shut one or all of them down. After a few hours, one of the routers finally shuts itself down. What will the other routers communicate between themselves?

  A. More RESET packets to the affected router to get it to power back up

  B. RESTART packets to the affected router to get it to power back up

  C. The change in the routing fabric to bypass the affected router

  D. STOP packets to all other routers warning of where the attack originated

  Correct Answer: C

• Question 97:

  Which of the following is a framework of open standards developed by the Internet Engineering Task Force (IETF) that provides secure transmission of the sensitive data over an unprotected medium, such as the Internet?

  A. DNSSEC

  B. Netsec

  C. IKE

  D. IPsec

  Correct Answer: D

• Question 98:

  Meyer Electronics Systems just recently had a number of laptops stolen out of their office. On these laptops contained sensitive corporate information regarding patents and company strategies. A month after the laptops were stolen, a competing company was found to have just developed products that almost exactly duplicated products that Meyer produces. What could have prevented this information from being stolen from the laptops?

  A. SDW Encryption

  B. EFS Encryption

  C. DFS Encryption

  D. IPS Encryption

  Correct Answer: B

• Question 99:

  A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria; If it does, it is routed between the networks, otherwise it is stopped.

  

  Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

  A. Appliance based firewalls cannot be upgraded

  B. Firewalls implemented on a hardware firewall are highly scalable

  C. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system

  D. Operating system firewalls are highly configured

  Correct Answer: C

• Question 100:

  In Linux, what is the smallest possible shellcode?

  A. 800 bytes

  B. 8 bytes

  C. 80 bytes

  D. 24 bytes

  Correct Answer: D