[Oct 05, 2024] ECSS Dumps Full Questions – Exam Study Guide [Q46-Q69]

QUESTION 46
Which of the following statements best describes a certification authority?

QUESTION 47
According to the Internet Crime Report 2009, which of the following complaint categories is on the top?

QUESTION 48
Which of the following password cracking attacks is implemented by calculating all the possible hashes for a set of characters?

QUESTION 49
Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to investigate the computer of an employee, who is suspected for classified data theft. Suspect’s computer runs on Windows operating system. Peter wants to collect data and evidences for further analysis. He knows that in Windows operating system, the data is searched in pre-defined steps for proper and efficient analysis. Which of the following is the correct order for searching data on a Windows based system?

QUESTION 50
Stephen, an attacker, decided to gain access to an organization’s server. He identified a user with access to the remote server. He used sniffing programs to gain the user’s credentials and captured the authentication tokens transmitted by the user. Then, he transmitted the captured tokens back tothe server to gain unauthorized access.
Identify the technique used by Stephen to gain unauthorized access to the target server.

QUESTION 51
John works as a Desktop Technician for NetPerfect Inc. The company has a Windows-based network. For the last few days, the network of the company has become prone to the Man-in-the-Middle attack. John wants to send a confidential MS-Word file to his Manager through e-mail attachment. He wants to ensure that no one is able to open and understand the file’s message except the Manager. Which of the following should John use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

QUESTION 52
Martin, a hacker, aimed to crash a target system. For this purpose, he spoofed the source IP address with the target’s IP address and sent many ICMP ECHO request packets to an IP broadcast network, causing all the hosts to respond to the received ICMP ECHO requests and ultimately crashing the target machine.
Identify the type of attack performed by Martin in the above scenario.

QUESTION 53
You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?

QUESTION 54
Which of the following tools is used to clear the event log?

QUESTION 55
Which of the following are the two primary U.S. laws that address cybercrime?

QUESTION 56
Roxanne is a professional hacker hired by an agency to disrupt the business services of their rival company.
Roxanne employed a special type of malware that consumes a server’s memory and network bandwidth when triggered. Consequently, the target server is overloaded and stops responding.
Identify the type of malware Roxanne has used in the above scenario.

QUESTION 57
You work as a computer operator for BlueWells Inc. The company has a Windows-based network.
You find out that someone has manipulated your email account, as some of your mails have been deleted. You suspect that your password has been hacked by someone. You inform about this to Mark, who is a Security Administrator. After diagnosing your system, Mark finds a log file that contains lots of text including username and password. Mark tells you that someone has installed software on your system that is recording all the keyboard strokes in a predefined log file. Which of the following software is Mark discussing about?

QUESTION 58
In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to the target system?

QUESTION 59
Which of the following is allowed by a company to be addressed directly from the public network and is hardened to screen the rest of its network from security exposure?

QUESTION 60
Which of the following are the ways of sending secure e-mail messages over the Internet?
Each correct answer represents a complete solution. Choose two.

QUESTION 61
Which of the following titles of The Electronic Communications Privacy Act protects the privacy of the contents of files stored by service providers and records held about the subscriber by service providers, such as subscriber name, billing records, and IP addresses?

QUESTION 62
In which of the following complaint types does a fraudulent transaction take place?

QUESTION 63
Which of the following types of firewall functions by creating two different communications, one between the client and the firewall, and the other between the firewall and the end server?

QUESTION 64
You are the Administrator for a corporate network. You are concerned about denial of service attacks. Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?

QUESTION 65
You are a professional Computer Hacking forensic investigator. You have been called to collect the evidences of Buffer Overflows or Cookie snooping attack. Which of the following logs will you review to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 66
Victor works as a network administrator for DataSecu Inc. He uses a dual firewall Demilitarized Zone (DMZ) to insulate the rest of the network from the portions that is available to the Internet.
Which of the following security threats may occur if DMZ protocol attacks are performed?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 67
Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?

QUESTION 68
You are using the dsniff tool to intercept communications between two entities and establish credentials with both sides of the connections. These entities do not notice that you were retrieving the information between these two. Which of the following attacks are you performing?

QUESTION 69
Which of the following layers of the loT architecture is responsible for delivering services to respective users from different sectors such as building, industrial, manufacturing, automobile, security, and healthcare?