EC-COUNCIL EC-COUNCIL Certifications ECSAV10 Questions & Answers

• Question 131:

  Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and Zombies? What type of Penetration Testing is Larry planning to carry out?

  A. Internal Penetration Testing

  B. Firewall Penetration Testing

  C. DoS Penetration Testing

  D. Router Penetration Testing

  Correct Answer: C

• Question 132:

  Identify the port numbers used by POP3 and POP3S protocols.

  A. 113 and 981

  B. 111 and 982

  C. 110 and 995

  D. 109 and 973

  Correct Answer: C

• Question 133:

  Which one of the following Snort logger mode commands is associated to run a binary log file through Snort in sniffer mode to dump the packets to the screen?

  A. ./snort -dvr packet.log icmp

  B. ./snort -dev -l ./log

  C. ./snort -dv -r packet.log

  D. ./snort -l ./log -b

  Correct Answer: C

• Question 134:

  Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test. The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?

  A. True negatives

  B. False negatives

  C. False positives

  D. True positives

  Correct Answer: B

• Question 135:

  In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc. They first access the web application using a low privileged account and then escalate privileges to access protected resources. What attack has been carried out?

  A. XPath Injection Attack

  B. Authorization Attack

  C. Authentication Attack

  D. Frame Injection Attack

  Correct Answer: B

• Question 136:

  The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

  A. HIPAA

  B. Sarbanes-Oxley 2002

  C. Gramm-Leach-Bliley Act

  D. California SB 1386a

  Correct Answer: C

• Question 137:

  The SnortMain () function begins by associating a set of handlers for the signals, Snort receives. It does this using the signal () function. Which one of the following functions is used as a programspecific signal and the handler for this calls the DropStats() function to output the current Snort statistics?

  A. SIGUSR1

  B. SIGTERM

  C. SIGINT

  D. SIGHUP

  Correct Answer: A

• Question 138:

  Output modules allow Snort to be much more flexible in the formatting and presentation of output to its users. Snort has 9 output plug-ins that push out data in different formats. Which one of the following output plug-ins allows alert data to be written in a format easily importable to a database?

  A. unified

  B. csv

  C. alert_unixsock

  D. alert_fast

  Correct Answer: B

• Question 139:

  From where can clues about the underlying application environment can be collected?

  A. From source code

  B. From file types and directories

  C. From executable file

  D. From the extension of the file

  Correct Answer: D

• Question 140:

  Which of the following is NOT related to the Internal Security Assessment penetration testing strategy?

  A. Testing to provide a more complete view of site security

  B. Testing focused on the servers, infrastructure, and the underlying software, including the target

  C. Testing including tiers and DMZs within the environment, the corporate network, or partner company connections

  D. Testing performed from a number of network access points representing each logical and physical segment

  Correct Answer: B