Pass EC-COUNCIL ECSS Actual Free Exam Q&As Updated Dump Dec 01, 2024
Latest ECSS Actual Free Exam Updated 100 Questions
To become a certified ECSS professional, candidates must pass the EC-Council Certified Security Specialist (ECSS) exam. The ECSS exam is a comprehensive test that evaluates the candidate's knowledge and skills in various areas of information security. ECSS exam consists of multiple-choice questions and is designed to test the candidate's ability to identify security threats, implement security solutions, and manage security incidents.
NEW QUESTION # 28
In which of the following complaint types does a fraudulent transaction take place?
- A. FBI scams
- B. Auction fraud
- C. Overpayment Fraud
- D. Computer damage
Answer: B
NEW QUESTION # 29
You are the Administrator for a corporate network. You are concerned about denial of service attacks. Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?
- A. Implement network based antivirus.
- B. Shorten the timeout for connection attempts.
- C. Place a honey pot in the DMZ.
- D. Implement a strong password policy.
Answer: B
NEW QUESTION # 30
Which of the following forensic tool suite is developed for Linux operating system?
- A. Wetstone
- B. MForensicsLab
- C. ProDiscover
- D. S.M.A.R.T.
Answer: D
NEW QUESTION # 31
Fill in the blank with the appropriate layer name of the OSI model.
Secure Socket Layer (SSL) operates at the layer of the OSI model.
- A. transport
Answer: A
NEW QUESTION # 32
Which of the following password cracking attacks does not use any software for cracking e-mail passwords?
Each correct answer represents a complete solution. Choose all that apply.
- A. Social engineering
- B. Dictionary attack
- C. Brute force attack
- D. Shoulder surfing
Answer: A,D
NEW QUESTION # 33
Stella, a mobile user, often ignores the messages received from the manufacturer for updates. One day, she found that files in her device are being replaced, she immediately rushed to the nearest service center for inquiry. They tested the device and identified vulnerabilities in it as it ran with an obsolete OS version.
Identify the mobile device security risk raised on Stella's device in the above scenario.
- A. Physical security risks
- B. System-based risk
- C. Network-based risk
- D. Application-based risk
Answer: B
Explanation:
Stella's mobile device running an obsolete operating system (OS) version poses a system-based risk.
Outdated OS versions may lack critical security patches, leaving the device vulnerable to exploits and attacks.
Regular OS updates are essential to address security vulnerabilities and maintain the device's security posture.
References:
* EC-Council Certified Security Specialist (E|CSS) course materials and study guide12.
* EC-Council Certified Security Specialist (ECSS) program information1.
* EC-Council ECSS Certification Syllabus and Prep Guide3.
* EC-Council ECSS Certification Sample Questions and Practice Exam4.
* EC-Council ECSS brochure5.
NEW QUESTION # 34
Andrew, a system administrator, is performing a UEFI boot process. The current phase of the UEFI boot process consists of the initialization code that the system executes after powering on the EFI system. This phase also manages platform reset events and sets up the system so that it can find, validate, install, and run the PEI.
Which of the following UEFI boot phases is the process currently in?
- A. Security phase
- B. Pre-EFI initialization phase
- C. Driver execution environment phase
- D. Boot device selection phase
Answer: B
Explanation:
The scenario accurately describes the functions of the PEI phase within the UEFI boot process:
* PEI Phase Key Characteristics:
* Early Hardware Initialization: The PEI phase is responsible for finding and initializing essential hardware components, like the CPU and the minimum amount of RAM needed for the system to function.
* Foundation for Later Stages: It establishes the groundwork for subsequent UEFI phases by creating data structures (Hand-Off Blocks or HOBs) that communicate vital information.
* Focus on DXE Initiation: The primary goal of the PEI phase is to prepare the system for the Driver Execution Environment (DXE) phase.
The UEFI boot process is divided into several distinct phases. The phase described in the question involves the initialization code executed after powering on the EFI system, managing platform reset events, and setting up the system to find, validate, install, and run the PEI (Pre-EFI Initialization). This description corresponds to the Pre-EFI initialization phase1.
During this phase, the system's firmware is responsible for initializing the processor, memory, and other hardware components to a point where the firmware can hand off control to the operating system loader. It's a critical part of the UEFI boot process, as it prepares the system for the subsequent phases, which include the Security (SEC) phase, the Driver Execution Environment (DXE) phase, and the Boot Device Selection (BDS) phase1. The correct answer is A, as it aligns with the tasks and responsibilities of the Pre-EFI initialization phase as described in the scenario.
NEW QUESTION # 35
Which of the following can be used to perform session hijacking?
Each correct answer represents a complete solution. Choose all that apply.
- A. Cross-site scripting
- B. ARP spoofing
- C. Session fixation
- D. Session sidejacking
Answer: A,C,D
NEW QUESTION # 36
Michael, a forensic expert, was assigned to investigate an incident that involved unauthorized intrusion attempts. In this process, Michael identified all the open ports on a system and disabled them because these open ports can allow attackers to install malicious services and compromise the security of the system or network.
Which of the following commands assisted Michael in identifying open ports in the above scenario?
- A. netstat -i
- B. ilconfig promise
- C. netstat rn
- D. nmap -sT localhost
Answer: A
Explanation:
Michael used the netstat command with the -i option to identify open ports on the system. The -i flag displays network interfaces and their statistics, including information about open ports. By analyzing this output, Michael could determine which ports were active and potentially vulnerable to unauthorized access.
References:
* EC-Council Certified Security Specialist (E|CSS) course materials and study guide12.
* EC-Council Certified Security Specialist (ECSS) program information1.
* EC-Council ECSS Certification Syllabus and Prep Guide.
* EC-Council ECSS Certification Sample Questions and Practice Exam.
* EC-Council ECSS brochure3.
NEW QUESTION # 37
Which of the following viruses/worms uses the buffer overflow attack?
- A. Chernobyl (CIH) virus
- B. Code red worm
- C. Klez worm
- D. Nimda virus
Answer: B
NEW QUESTION # 38
An attacker wants to launch an attack on a wired Ethernet. He wants to accomplish the following tasks:
* Sniff data frames on a local area network.
* Modify the network traffic.
* Stop the network traffic frequently.
Which of the following techniques will the attacker use to accomplish the task?
- A. Session hijacking
- B. IP spoofing
- C. ARP spoofing
- D. Eavesdropping
Answer: C
NEW QUESTION # 39
John works as a Security Administrator for NetPerfect Inc. The company uses Windows-based
systems. A project has been assigned to John to track malicious hackers and to strengthen the company's security system. John configures a computer system to trick malicious hackers into thinking that it is the company's main server, which in fact is a decoy system to track hackers.
Which system is John using to track the malicious hackers?
- A. Bastion host
- B. Honeypot
- C. Intrusion Detection System (IDS)
- D. Honeytokens
Answer: B
NEW QUESTION # 40
Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client computers must be able to automatically connect to the wireless LAN. However, the unauthorized computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants to configure all the wireless access points and client computers to act in accordance with the company's security policy. What will he do to accomplish this?
Each correct answer represents a part of the solution. Choose three.
- A. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
- B. Broadcast SSID to connect to the access point (AP).
- C. Install a firewall software on each wireless access point.
- D. On each client computer, add the SSID for the wireless LAN as the preferred network.
- E. Configure the authentication type for the wireless LAN to Shared Key.
- F. Configure the authentication type for the wireless LAN to Open system.
Answer: A,D,E
NEW QUESTION # 41
What are the two common parts of a Remote Access Trojan (RAT)?
- A. The ARP cache and the CAM table
- B. A client component and a server component
- C. The payload and the wrapper
- D. The outbound port and the inbound port
Answer: B
NEW QUESTION # 42
Which of the following statements is true about a honeyfarm?
- A. It is a computer system that has no security.
- B. It is a centralized collection of honeypots.
- C. It is a computer system used to attract hackers to identify them.
- D. It is a firewall.
Answer: B
NEW QUESTION # 43
Net Spy Pro is the latest network monitoring software. This program helps a user to know what the others are doing on their computers. What are the features of this program?
Each correct answer represents a complete solution. Choose all that apply.
- A. Remote control
- B. PC administration
- C. Activity filtering
- D. Activity monitoring
Answer: A,B,C,D
NEW QUESTION # 44
......
Online Questions - Valid Practice ECSS Exam Dumps Test Questions: https://pass4sure.troytecdumps.com/ECSS-troytec-exam-dumps.html