ECSAv10 Exam Questions and Answers | Exam-Dumps (Page: 5)

QUESTION: 20

The first and foremost step for a penetration test is information gathering. The main objective of this test is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.

Which of the following information gathering terminologies refers to gathering information through social engineering on-site visits, face-to-face interviews, and direct questionnaires?

Active Information Gathering
Pseudonymous Information Gathering
Anonymous Information Gathering
Open Source or Passive Information Gathering

Answer(s): A

Reveal Solution Next Question

QUESTION: 21

Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels.
A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack.

Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

Passive Assessment
Host-based Assessment
External Assessment
Application Assessment

Answer(s): D

Reveal Solution Next Question

QUESTION: 22

George is the network administrator of a large Internet company on the west coast. Per corporate policy, none of the employees in the company are allowed to use FTP or SFTP programs without obtaining approval from the IT department.
Few managers are using SFTP program on their computers.
Before talking to his boss, George wants to have some proof of their activity. George wants to use Ethereal to monitor network traffic, but only SFTP traffic to and from his network. What filter should George use in Ethereal?

net port 22
udp port 22 and host 172.16.28.1/24
src port 22 and dst port 22
src port 23 and dst port 23

Answer(s): C

Reveal Solution Next Question

QUESTION: 23

Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

USA Patriot Act 2001
Sarbanes-Oxley 2002
Gramm-Leach-Bliley Act (GLBA)
California SB 1386

Answer(s): A

Reveal Solution Next Question

QUESTION: 24

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found.
What information will he be able to gather from this?

The SID of Hillary's network account
The network shares that Hillary has permissions
The SAM file from Hillary's computer
Hillary's network username and password hash

Answer(s): D

Reveal Solution Next Question

EC-Council ECSAv10 Exam (page: 5) EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing Updated on: 07-Feb-2026

QUESTION: 20

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

EC-Council ECSAv10 Exam (page: 5)
EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing
Updated on: 07-Feb-2026