EC-COUNCIL EC-COUNCIL Certifications ECSAV10 Questions & Answers

• Question 121:

  The objective of social engineering pen testing is to test the strength of human factors in a security chain within the organization. It is often used to raise the level of security awareness among employees.

  

  The tester should demonstrate extreme care and professionalism during a social engineering pen test as it might involve legal issues such as violation of privacy and may result in an embarrassing situation for the organization. Which of the following methods of attempting social engineering is associated with bribing, handing out gifts, and becoming involved in a personal relationship to befriend someone inside the company?

  A. Accomplice social engineering technique

  B. Identity theft

  C. Dumpster diving

  D. Phishing social engineering technique

  Correct Answer: A

• Question 122:

  John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?

  A. C:\Windows\System32\Boot

  B. C:\WINNT\system32\drivers\etc

  C. C:\WINDOWS\system32\cmd.exe

  D. C:\Windows\System32\restore

  Correct Answer: B

• Question 123:

  How many possible sequence number combinations are there in TCP/IP protocol?

  A. 320 billion

  B. 32 million

  C. 4 billion

  D. 1 billion

  Correct Answer: C

• Question 124:

  An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?

  A. Frame Injection Attack

  B. LDAP Injection Attack

  C. XPath Injection Attack

  D. SOAP Injection Attack

  Correct Answer: D

• Question 125:

  Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

  A. Event Log Tracker

  B. Sawmill

  C. Syslog Manager

  D. Event Log Explorer

  Correct Answer: B

• Question 126:

  One of the steps in information gathering is to run searches on a company using complex keywords in Google.

  

  Which search keywords would you use in the Google search engine to find all the PowerPoint presentations containing information about a target company, ROCHESTON?

  A. ROCHESTON fileformat:+ppt

  B. ROCHESTON ppt:filestring

  C. ROCHESTON filetype:ppt

  D. ROCHESTON +ppt:filesearch

  Correct Answer: C

• Question 127:

  Security auditors determine the use of WAPs on their networks with Nessus vulnerability scanner which identifies the commonly used WAPs. One of the plug-ins that the Nessus Vulnerability Scanner uses is ID #11026 and is named "Access Point Detection". This plug-in uses four techniques to identify the presence of a WAP. Which one of the following techniques is mostly used for uploading new firmware images while upgrading the WAP device?

  A. NMAP TCP/IP fingerprinting

  B. HTTP fingerprinting

  C. FTP fingerprinting

  D. SNMP fingerprinting

  Correct Answer: C

• Question 128:

  Which of the following is not the SQL injection attack character?

  A. $

  B. PRINT

  C. #

  D. @@variable

  Correct Answer: A

• Question 129:

  You are running through a series of tests on your network to check for any security vulnerabilities. After normal working hours, you initiate a DoS attack against your external firewall. The firewall quickly freezes up and becomes unusable. You then initiate an FTP connection from an external IP into your internal network. The connection is successful even though you have FTP blocked at the external firewall. What has happened?

  A. The firewall failed-open

  B. The firewall failed-bypass

  C. The firewall failed-closed

  D. The firewall ACL has been purged

  Correct Answer: A

• Question 130:

  Identify the person who will lead the penetration-testing project and be the client point of contact.

  A. Database Penetration Tester

  B. Policy Penetration Tester

  C. Chief Penetration Tester

  D. Application Penetration Tester

  Correct Answer: C