最新のECSAv8問題集で試験を準備する

EC-COUNCIL ECSAv8 試験概要:

EC-COUNCIL ECSAv8 試験シラバストピック:

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 ECSAv8 試験問題：

1. Which of the following policy forbids everything with strict restrictions on all usage of the company systems and network?

A) Paranoid Policy
B) Promiscuous Policy
C) Prudent Policy
D) Information-Protection Policy

2. In a TCP packet filtering firewall, traffic is filtered based on specified session rules, such as when a session is initiated by a recognized computer.

Identify the level up to which the unknown traffic is allowed into the network stack.

A) Level 4 - TCP
B) Level 3 - Internet Protocol (IP)
C) Level 5 - Application
D) Level 2 - Data Link

3. Transmission control protocol accepts data from a data stream, divides it into chunks, and adds a TCP header creating a TCP segment.
The TCP header is the first 24 bytes of a TCP segment that contains the parameters and state of an end-to-end TCP socket. It is used to track the state of communication between two TCP endpoints.
For a connection to be established or initialized, the two hosts must synchronize. The synchronization requires each side to send its own initial sequence number and to receive a confirmation of exchange in an acknowledgment (ACK) from the other side
The below diagram shows the TCP Header format:

How many bits is a acknowledgement number?

A) 16 bits
B) 32 bits
C) 24 bits
D) 8 bits

4. Due to illegal inputs, various types of TCP stacks respond in a different manner. Some IDSs do not take into account the TCP protocol's urgency feature, which could allow testers to evade the IDS.

Penetration tester needs to try different combinations of TCP flags (e.g. none, SYN/FIN, SYN/RST, SYN/FIN/ACK, SYN/RST/ACK, and All Flags) to test the IDS.
Which of the following TCP flag combinations combines the problem of initiation, midstream, and termination flags with the PSH and URG?

A) SYN/FIN/ACK
B) All Flags
C) SYN/RST/ACK
D) SYN/FIN

5. A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues.

What are the two types of 'white-box' penetration testing?

A) Blind testing and unannounced testing
B) Announced testing and blind testing
C) Announced testing and unannounced testing
D) Blind testing and double blind testing

質問と回答：