ECSAV8 Exam Questions and Answers | Exam-Dumps (Page: 4)

QUESTION: 16

Snort, an open source network-based intrusion detection sensor, is the most widely installed NIDS in the world. It can be configured to run in the four modes. Which one of the following modes reads the packets off the network and displays them in a continuous stream on the console (screen)?

Packet Sniffer Mode
Packet Logger Mode
Network Intrusion Detection System Mode
Inline Mode

Answer(s): A

Reveal Solution Next Question

QUESTION: 17

What is the difference between penetration testing and vulnerability testing?

Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of ‘in-depth ethical hacking’
Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities
Vulnerability testing is more expensive than penetration testing
Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans

Answer(s): A

Reveal Solution Next Question

QUESTION: 18

In Linux, /etc/shadow file stores the real password in encrypted format for user’s account with added properties associated with the user’s password.

In the example of a /etc/shadow file below, what does the bold letter string indicate?
Vivek: $1$fnffc$GteyHdicpGOfffXX40w#5:13064:0:99999:7

Number of days the user is warned before the expiration date
Minimum number of days required between password changes
Maximum number of days the password is valid
Last password changed

Answer(s): B

Reference:

http://www.cyberciti.biz/faq/understanding-etcshadow-file/ (bullet # 4)

Reveal Solution Next Question

QUESTION: 19

The first and foremost step for a penetration test is information gathering. The main objective of this test is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.

Which of the following information gathering terminologies refers to gathering information through social engineering on-site visits, face-to-face interviews, and direct questionnaires?

Active Information Gathering
Pseudonymous Information Gathering
Anonymous Information Gathering
Open Source or Passive Information Gathering

Answer(s): A

Reveal Solution Next Question

QUESTION: 20

DMZ is a network designed to give the public access to the specific internal resources and you might want to do the same thing for guests visiting organizations without compromising the integrity of the internal resources. In general, attacks on the wireless networks fall into four basic categories. Identify the attacks that fall under Passive attacks category.(Select all that apply)

Wardriving
Spoofing
Sniffing
Network Hijacking

Answer(s): A

Reveal Solution Next Question

EC-Council ECSAV8 Exam (page: 4) EC-Council Certified Security Analyst (ECSA) Updated on: 15-Feb-2026

QUESTION: 16

QUESTION: 17

QUESTION: 18

Reference:

QUESTION: 19

QUESTION: 20

EC-Council ECSAV8 Exam (page: 4)
EC-Council Certified Security Analyst (ECSA)
Updated on: 15-Feb-2026