Certified Security Analyst (ECSA) Exam Questions PDF download

QUESTION: 36

Attackers create secret accounts and gain illegal access to resources using backdoor while bypassing the authentication procedures. Creating a backdoor is a where an attacker obtains remote access to a computer on a network.

Which of the following techniques do attackers use to create backdoors to covertly gather critical information about a target machine?

Internal network mapping to map the internal network of the target machine
Port scanning to determine what ports are open or in use on the target machine
Sniffing to monitor all the incoming and outgoing network traffic
Social engineering and spear phishing attacks to install malicious programs on the target machine

Answer(s): D

Reveal Solution Next Question

QUESTION: 37

HTTP protocol specifies that arbitrary binary characters can be passed within the URL by using %xx notation, where 'xx' is the

ASCII value of the character
Binary value of the character
Decimal value of the character
Hex value of the character

Answer(s): D

Reference:

https://books.google.nl/books?id=0RfANAwOUdIC&pg=PA720&lpg=PA720&dq=%22xx+notation%22+binary&source=bl&ots=pGMqass7ti&sig=rnIg1xZ78ScUvuIlTmDY3r7REuc&hl=nl&sa=X&ei=8C4dVYe1NorgasrzgoAL&ved=0CEQQ6AEwBQ#v=onepage&q=%22xx%20n otation%22%20binary&f=false

Reveal Solution Next Question

QUESTION: 38

Which one of the following acts makes reputational risk of poor security a reality because it requires public disclosure of any security breach that involves personal information if it is unencrypted or if it is reasonably believed that the information has been acquired by an unauthorized person?

California SB 1386
Sarbanes-Oxley 2002
Gramm-Leach-Bliley Act (GLBA)
USA Patriot Act 2001

Answer(s): A

Reveal Solution Next Question

QUESTION: 39

Which one of the following is a command line tool used for capturing data from the live network and copying those packets to a file?

Wireshark: Capinfos
Wireshark: Tcpdump
Wireshark: Text2pcap
Wireshark: Dumpcap

Answer(s): D

Reveal Solution Next Question

QUESTION: 40

Which of the following password cracking techniques is used when the attacker has some information about the password?

Hybrid Attack
Dictionary Attack
Syllable Attack
Rule-based Attack

Answer(s): D

Reference:

http://202.154.59.182/mfile/files/Information%20System/Computer%20Forensics%3B%20Hard%20Disk%20and%20Operating%20Systems/CHAPTER%207%20Application%20Pass word%20Crackers.pdf (page 4, rule-based attack)

Reveal Solution Next Question

EC-Council Certified Security Analyst (ECSA) ECSAV8 Dumps in PDF

Free EC-Council ECSAV8 Real Questions (page: 13)

QUESTION: 36

QUESTION: 37

Reference:

QUESTION: 38

QUESTION: 39

QUESTION: 40

Reference: