Certified Security Analyst (ECSA) Exam Exam Questions PDF download

QUESTION: 41 Topic 1, Volume A

Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

Poison the switch's MAC address table by flooding it with ACK bits
Enable tunneling feature on the switch
Trick the switch into thinking it already has a session with Terri's computer
Crash the switch with a DoS attack since switches cannot send ACK bits

Answer(s): C

Reveal Solution Next Question

QUESTION: 42 Topic 1, Volume A

Tyler is setting up a wireless network for his business that he runs out of his home. He has followed all the directions from the ISP as well as the wireless router manual. He does not have any encryption set and the SSID is being broadcast. On his laptop, he can pick up the wireless signal for short periods of time, but then the connection drops and the signal goes away. Eventually the wireless signal shows back up, but drops intermittently. What could be Tyler issue with his home wireless network?

2.4 Ghz Cordless phones
Satellite television
CB radio
Computers on his wired network

Answer(s): A

Reveal Solution Next Question

QUESTION: 43 Topic 1, Volume A

You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?

Enumerate domain user accounts and built-in groups
Establish a remote connection to the Domain Controller
Poison the DNS records with false records
Enumerate MX and A records from DNS

Answer(s): A

Reveal Solution Next Question

QUESTION: 44 Topic 1, Volume A

Why is it a good idea to perform a penetration test from the inside?

It is easier to hack from the inside
It is never a good idea to perform a penetration test from the inside
To attack a network from a hacker's perspective
Because 70% of attacks are from inside the organization

Answer(s): D

Reveal Solution Next Question

QUESTION: 45 Topic 1, Volume A

Click on the Exhibit Button
Paulette works for an IT security consulting company that is currently performing an audit for the firm ACE Unlimited. Paulette's duties include logging on to all the company's network equipment to ensure IOS versions are up-to-date and all the other security settings are as stringent as possible. Paulette presents the following screenshot to her boss so he can inform the client about necessary changes need to be made. From the screenshot, what changes should the client company make?
Exhibit:

The banner should not state "only authorized IT personnel may proceed"
Remove any identifying numbers, names, or version information
The banner should include the Cisco tech support contact information as well
The banner should have more detail on the version numbers for the network equipment

Answer(s): B

Reveal Solution Next Question

EC-Council Certified Security Analyst (ECSA) Exam 412-79 Dumps in PDF

Free EC-Council 412-79 Real Questions (page: 12)

QUESTION: 41 Topic 1, Volume A

QUESTION: 42 Topic 1, Volume A

QUESTION: 43 Topic 1, Volume A

QUESTION: 44 Topic 1, Volume A

QUESTION: 45 Topic 1, Volume A