最新のECSAv8問題集で試験を準備する

EC-COUNCIL ECSAv8 試験概要:

EC-COUNCIL ECSAv8 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 ECSAv8 試験問題：

1. A penetration tester performs OS fingerprinting on the target server to identify the operating system used on the target server with the help of ICMP packets.

While performing ICMP scanning using Nmap tool, message received/type displays "3 - Destination Unreachable[5]" and code 3.
Which of the following is an appropriate description of this response?

A) Destination protocol unreachable
B) Destination port unreachable
C) Destination host unavailable
D) Destination host unreachable

2. A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

A) Operating system firewalls are highly configured
B) Firewalls implemented on a hardware firewall are highly scalable
C) Appliance based firewalls cannot be upgraded
D) Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system

3. A directory traversal (or path traversal) consists in exploiting insufficient security validation/sanitization of user-supplied input file names, so that characters representing "traverse to parent directory" are passed through to the file APIs.
The goal of this attack is to order an application to access a computer file that is not intended to be accessible. This attack exploits a lack of security (the software is acting exactly as it is supposed to) as opposed to exploiting a bug in the code.

To perform a directory traversal attack, which sequence does a pen tester need to follow to manipulate variables of reference files?

A) SQL Injection sequence
B) Brute force sequence
C) Denial-of-Service sequence
D) dot-dot-slash (../) sequence

4. Which of the following methods is used to perform server discovery?

A) Whois Lookup
B) SQL Injection
C) Session Hijacking
D) Banner Grabbing

5. You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using Idp.exe. What are you trying to accomplish here?

A) Establish a remote connection to the Domain Controller
B) Poison the DNS records with false records
C) Enumerate MX and A records from DNS
D) Enumerate domain user accounts and built-in groups

質問と回答：