ECSS Online Practice Questions and Answers
You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network. What method would be best for finding such flaws?
A. Vulnerability scanning
B. Manual penetration testing
C. Automated penetration testing
D. Code review
You work as a Network Security Analyzer. You got a suspicious email while working on a forensic project. Now, you want to know the IP address of the sender so that you can analyze various information such as the actual location, domain information, operating system being used, contact information, etc. of the email sender with the help of various tools and resources. You also want to check whether this email is fake or real. You know that analysis of email headers is a good starting point in such cases. The email header of the suspicious email is given below:
What is the IP address of the sender of this email?
A. 209.191.91.180
B. 141.1.1.1
C. 172.16.10.90
D. 216.168.54.25
Which of the following commands is used in Mac OS X to exit Open Firmware and to continue the booting process?
A. mac-load
B. boot
C. load
D. mac-boot
What is the critical evaluation of the most relevant information on a given topic known as?
A. Incident report
B. Feasibility report
C. Case study
D. Investigative report
Which of the following environmental variables represents the PID value of the last child process?
A. $?
B. $!
C. $!!
D. $$
Maria works as a professional Ethical Hacker. She recently has been assigned a project to test the security of www.we-are-secure.com. The company has provided the following information about the infrastructure of its network:
· Network diagrams of the we-are-secure infrastructure · Source code of the security tools · IP addressing information of the we-are-secure network
Which of the following testing methodologies is we-are-secure.com using to test the security of its network?
A. Graybox
B. Blackbox
C. Alpha testing
D. Whitebox
Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.
A. Routers are responsible for making decisions about which of several paths network (or Internet) traffic will follow.
B. Routers organize addresses into classes, which are used to determine how to move packets from one network to another.
C. Routers do not limit physical broadcast traffic.
D. Routers act as protocol translators and bind dissimilar networks.
Which of the following algorithms produces a digital signature which is used to authenticate the bit- stream images?
A. BOINIC
B. HashClash
C. MD5
D. MD6
Which of the following attacks is used to hack simple alphabetical passwords?
A. Man-in-the-middle attack
B. Dictionary-based attack
C. Black hat attack
D. Sniffing
Which of the following components are usually found in an Intrusion detection system (IDS)?
Each correct answer represents a complete solution. Choose two.
A. Modem
B. Console
C. Sensor
D. Gateway
E. Firewall