EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing (ECSAv10) Free Practice Test

Question 1

John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?

A. C:\Windows\System32\restore

B. C:\WINDOWS\system32\cmd.exe

C. C:\Windows\System32\Boot

D. C:\WINNT\system32\drivers\etc

Correct Answer: D

Question 2

The Internet is a giant database where people store some of their most private information on the cloud, trusting that the service provider can keep it all safe. Trojans, Viruses, DoS attacks, website defacement, lost computers, accidental publishing, and more have all been sources of major leaks over the last 15 years.

What is the biggest source of data leaks in organizations today?

A. Insufficient IT security budget

B. Vulnerabilities, risks, and threats facing Web sites

C. Weak passwords and lack of identity management

D. Rogue employees and insider attacks

Correct Answer: D

Question 3

A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

A. Firewalls implemented on a hardware firewall are highly scalable

B. Operating system firewalls are highly configured

C. Appliance based firewalls cannot be upgraded

D. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system

Correct Answer: C

Question 4

Which of the following is the objective of Gramm-Leach-Bliley Act?

A. To ease the transfer of financial information between institutions and banks

B. To protect the confidentiality, integrity, and availability of data

C. To set a new or enhanced standards for all U.S. public company boards, management and public accounting firms

D. To certify the accuracy of the reported financial statement

Correct Answer: A

Question 5

Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?

A. User Identification and Password Policy

B. User-Account Policy

C. Special-Access Policy

D. Personal Computer Acceptable Use Policy

Correct Answer: A

Question 6

A firewall's decision to forward or reject traffic in network filtering is dependent upon which of the following?

A. Protocol used

B. Source address

C. Destination address

D. Port numbers

Correct Answer: A

Question 7

After passively scanning the network of Department of Defense (DoD), you switch over to active scanning to identify live hosts on their network. DoD is a large organization and should respond to any number of scans. You start an ICMP ping sweep by sending an IP packet to the broadcast address.
Only five hosts responds to your ICMP pings; definitely not the number of hosts you were expecting. Why did this ping sweep only produce a few responses?

A. Only Windows systems will reply to this scan

B. Only Unix and Unix-like systems will reply to this scan

C. Only IBM AS/400 will reply to this scan

D. A switched network will not respond to packets sent to the broadcast address

Correct Answer: B

Question 8

You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive.org and view the HTML code of news.com. You then navigate to the current news.com website and copy over the source code.
While searching through the code, you come across something abnormal:
<img
src=http://coolwebsearch.com/ads/pixel.news.com width=1 height=1 border=0
>
What have you found?

A. Trojan.downloader

B. Web bug

C. Blind bug

D. CGI code

Correct Answer: B

Question 9

Identify the policy that defines the standards for the organizational network connectivity and security standards for computers that are connected in the organizational network.

A. Information-Protection Policy

B. Acceptable-Use Policy

C. Remote-Access Policy

D. Special-Access Policy

Correct Answer: C

Welcome to TestSimulate

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing (ECSAv10) Free Practice Test