Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free EC-Council Certified Security Specialist (ECSSv10)Exam Practice Questions

Question # 21

An organization decided to strengthen the security of its network by studying and analyzing the behavior of attackers. For this purpose. Steven, a security analyst, was instructed to deploy a device to bait attackers. Steven selected a solution that appears to contain very useful information to lure attackers and find their locationsand techniques.

Identify the type of device deployed by Steven in the above scenario.

Options:

A.  

Firewall

B.  

Router

C.  

Intrusion detection system

D.  

Honeypot

Discussion 0
Question # 22

Jay, a network administrator, was monitoring traffic flowing through an IDS. Unexpectedly, he received an event triggered as an alarm, although there is no active attack in progress.

Identify the type of IDS alert Jay has received in the above scenario.

Options:

A.  

True negative alert

B.  

False negative alert

C.  

True positive alert

D.  

False positive alert

Discussion 0
Question # 23

Which of the following techniques is referred to as a messaging feature that originates from a server and enables the delivery of data or a message from an application to a mobile device without any explicit request from the user?

Options:

A.  

Geofencing

B.  

PIN feature

C.  

Containerization

D.  

Push notification

Discussion 0
Question # 24

Clark, a digital forensic expert, was assigned to investigate a malicious activity performed on an organization's network. The organization provided Clark with all the information related to the incident. In this process, he assessed the impact of the incident on the organization, reasons for and source of the incident, steps required to tackle the incident, investigating team required to handle the case, investigative procedures, and possible outcome of the forensic process.

Identify the type of analysis performed by Clark in the above scenario.

Options:

A.  

Data analysis

B.  

Log analysis

C.  

Traffic analysis

D.  

Case analysis

Discussion 0
Question # 25

Melanie, a professional hacker, is attempting to break into a target network through an application server. In this process, she identified a logic flaw in the target web application that provided visibility into the source code. She exploited this vulnerability to launch further attacks on the target web application.

Which of the web application vulnerabilities was identified by Melanie in the above scenario?

Options:

A.  

Insecure deserialization

B.  

Security misconfiguration

C.  

Command injection

D.  

Broken authentication

Discussion 0
Question # 26

Williams, a forensic specialist, was tasked with performing a static malware analysis on a suspect system in an organization. For this purpose, Williams used an automated tool to perform a string search and saved all the identified strings in a text file. After analyzing the strings, he determined all the harmful actions that were performed by malware.

Identify the tool employed by Williams in the above scenario.

Options:

A.  

ResourcesExlract

B.  

Snagit

C.  

Ezvid

D.  

R-Drive Image

Discussion 0
Question # 27

Bob, a professional hacker, targeted an organization to launch attacks. Bob gathered information such as network topology and a list of live hosts. Based on the collected information, he launched further attacks over the organization's network.

Identify the type of network attack Bob initiated on the target organization in the above scenario.

Options:

A.  

Session hijacking

B.  

Buffer overflow

C.  

Data modification

D.  

Enumeration

Discussion 0
Question # 28

An loT sensor in an organization generated an emergency alarm indicating a security breach. The servers hosted in an loT layer accepted, stored, and processed the sensor data received from loT gateways and created dashboards for monitoring, analyzing, and implementing proactive decisions to tackle the issue.

Which of the following layers in the loT architecture performed the above activities after receiving an alert from the loT sensor?

Options:

A.  

Communication Layer

B.  

Process layer

C.  

Cloud layer

D.  

Device layer

Discussion 0
Question # 29

Robert, a security specialist, was appointed to strengthen the security of the organization's network. To prevent multiple login attempts from unknown sources, Robert implemented a security strategy of issuing alerts or warning messages when multiple failed login attempts are made.

Which of the following security risks is addressed by Robert to make attempted break-ins unsuccessful?

Options:

A.  

Indefinite session timeout

B.  

Absence of account lockout for invalid session IDs

C.  

Small session-ID generation

D.  

Weak session-ID generation

Discussion 0

ECSS PDF

ECSS PDF (Printable)
$54.25
$154.99

ECSS Testing Engine

ECSS PDF (Printable)
$59.5
$169.99

ECSS PDF + Testing Engine

ECSS PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions