EC-Council Certified Security Analyst (ECSA) (412-79v8) Free Practice Test

Question 1

An antenna is a device that is designed to transmit and receive the electromagnetic waves that are generally called radio waves. Which one of the following types of antenna is developed from waveguide technology?

A. Reflector Antenna

B. Aperture Antennas

C. Leaky Wave Antennas

D. Directional Antenna

Correct Answer: B

Question 2

Which of the following is not a characteristic of a firewall?

A. Examines all traffic routed between thetwo networks to see if it meets certain criteria

B. Manages public access to private networked resources

C. Filters only inbound traffic but not outbound traffic

D. Routes packets between the networks

Correct Answer: C

Question 3

What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

A. Stealth Scanning Techniques

B. SYN Scanning Techniques

C. Port Scanning Techniques

D. Connect Scanning Techniques

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Logs are the record of the system and network activities. Syslog protocol is used for delivering log information across an IP network. Syslog messages can be sent via which one of the following?

A. UDP and SMTP

B. SMTP

C. TCP and SMTP

D. UDP and TCP

Correct Answer: D

Question 5

A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product." It is generally the motherboard chips or the chips used on the expansion card. Which one of the following is well supported in most wireless applications?

A. Orinoco chipsets

B. Cisco chipset

C. Atheros Chipset

D. Prism II chipsets

Correct Answer: D

Question 6

The first phase of the penetration testing plan is to develop the scope of the project in consultation with the client. Pen testing test components depend on the client's operating environment, threat perception, security and compliance requirements, ROE, and budget. Various components need to be considered for testing while developing the scope of the project.

Which of the following is NOT a pen testing component to be tested?

A. System Software Security

B. Outside Accomplices

C. Intrusion Detection

D. Inside Accomplices

Correct Answer: B

Question 7

Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

A. Increases response time

B. Decreases consumed employee time and increases system uptime

C. Increases detection and reaction time

D. Both a and c

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which of the following is the objective of Gramm-Leach-Bliley Act?

A. To ease the transfer of financial information between institutions and banks

B. To protect the confidentiality, integrity, and availability of data

C. To set a new or enhanced standards for all U.S. public company boards, management and public accounting firms

D. To certify the accuracy of the reported financial statement

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

A. Event Log Tracker

B. Syslog Manager

C. Event Log Explorer

D. Sawmill

Correct Answer: D

Welcome to TestSimulate

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) (412-79v8) Free Practice Test