EC-COUNCIL EC-COUNCIL Certifications ECSAV10 Questions & Answers

• Question 141:

  Which of the following will not handle routing protocols properly?

  A. "Internet-router-firewall-net architecture"

  B. "Internet-firewall-router-net architecture"

  C. "Internet-firewall -net architecture"

  D. "Internet-firewall/router(edge device)-net architecture"

  Correct Answer: B

• Question 142:

  Which of the following external pen testing tests reveals information on price, usernames and passwords, sessions, URL characters, special instructors, encryption used, and web page behaviors?

  

  A. Check for Directory Consistency and Page Naming Syntax of the Web Pages

  B. Examine Server Side Includes (SSI)

  C. Examine Hidden Fields

  D. Examine E-commerce and Payment Gateways Handled by the Web Server

  Correct Answer: C

• Question 143:

  ESTION NO: 92 In Linux, /etc/shadow file stores the real password in encrypted format for user's account with added properties associated with the user's password.

  

  In the example of a /etc/shadow file below, what does the bold letter string indicate? Vivek: $1$fnffc$GteyHdicpGOfffXX40w#5:13064:0:99999:7

  A. Number of days the user is warned before the expiration date

  B. Minimum number of days required between password changes

  C. Maximum number of days the password is valid

  D. Last password changed

  Correct Answer: B

• Question 144:

  Which of the following is not a characteristic of a firewall?

  A. Manages public access to private networked resources

  B. Routes packets between the networks

  C. Examines all traffic routed between the two networks to see if it meets certain criteria

  D. Filters only inbound traffic but not outbound traffic

  Correct Answer: D

• Question 145:

  In which of the following firewalls are the incoming or outgoing packets blocked from accessing services for which there is no proxy?

  A. Circuit level firewalls

  B. Packet filters firewalls

  C. Stateful multilayer inspection firewalls

  D. Application level firewalls

  Correct Answer: D

• Question 146:

  Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

  A. Decreases consumed employee time and increases system uptime

  B. Increases detection and reaction time

  C. Increases response time

  D. Both Decreases consumed employee time and increases system uptime and Increases response time

  Correct Answer: A

• Question 147:

  An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet. The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker.

  

  During external penetration testing, which of the following scanning techniques allow you to determine a port's state without making a full connection to the host?

  A. XMAS Scan

  B. SYN scan

  C. FIN Scan

  D. NULL Scan

  Correct Answer: B

• Question 148:

  Which of the following equipment could a pen tester use to perform shoulder surfing?

  A. Binoculars

  B. Painted ultraviolet material

  C. Microphone

  D. All the above

  Correct Answer: A

• Question 149:

  Transmission control protocol accepts data from a data stream, divides it into chunks, and adds a TCP header creating a TCP segment. The TCP header is the first 24 bytes of a TCP segment that contains the parameters and state of an end-to- end TCP socket. It is used to track the state of communication between two TCP endpoints. For a connection to be established or initialized, the two hosts must synchronize. The synchronization requires each side to send its own initial sequence number and to receive a confirmation of exchange in an acknowledgment (ACK) from the other side The below diagram shows the TCP Header format:

  

  A. 16 bits

  B. 32 bits

  C. 8 bits

  D. 24 bits

  Correct Answer: B

• Question 150:

  An automated electronic mail message from a mail system which indicates that the user does not exist on that server is called as?

  A. SMTP Queue Bouncing

  B. SMTP Message Bouncing

  C. SMTP Server Bouncing

  D. SMTP Mail Bouncing

  Correct Answer: D