Choosing to participate in EC-COUNCIL certification ECSS exam is a wise choice, because if you have a EC-COUNCIL ECSS authentication certificate, your salary and job position will be improved quickly and then your living standard will provide at the same time. But passing EC-COUNCIL certification ECSS exam is not very easy, it need to spend a lot of time and energy to master relevant IT professional knowledge. IT-Tests.com is a professional IT training website to make the training scheme for EC-COUNCIL certification ECSS exam. At first you can free download part of exercises questions and answers about EC-COUNCIL certification ECSS exam on www.IT-Tests.com as a try, so that you can check the reliability of our product. Generally, if you have tried IT-Tests's products, you'll very confident of our products.
We should use the most relaxed attitude to face all difficulties. Although EC-COUNCIL ECSS exam is very difficult, but we candidates should use the most relaxed state of mind to face it. Because IT-Tests.com's EC-COUNCIL ECSS exam training materials will help us to pass the exam successfully. With it, we would not be afraid, and will not be confused. IT-Tests.com's EC-COUNCIL ECSS exam training materials is the best medicine for candidates.
Exam Code: ECSS
Exam Name: EC-COUNCIL (EC-Council Certified Security Specialist Practice Test)
EC-COUNCIL certification ECSS exam is a test of IT professional knowledge. IT-Tests.com is a website which can help you quickly pass EC-COUNCIL certification ECSS exams. In order to pass EC-COUNCIL certification ECSS exam, many people who attend EC-COUNCIL certification ECSS exam have spent a lot of time and effort, or spend a lot of money to participate in the cram school. IT-Tests.com is able to let you need to spend less time, money and effort to prepare for EC-COUNCIL certification ECSS exam, which will offer you a targeted training. You only need about 20 hours training to pass the exam successfully.
IT certification candidates are mostly working people. Therefore, most of the candidates did not have so much time to prepare for the exam. But they need a lot of time to participate in the certification exam training courses. This will not only lead to a waste of training costs, more importantly, the candidates wasted valuable time. Here, I recommend a good learning materials website. Some of the test data on the site is free, but more importantly is that it provides a realistic simulation exercises that can help you to pass the EC-COUNCIL ECSS exam. IT-Tests.com EC-COUNCIL ECSS exammaterials can not only help you save a lot of time. but also allows you to pass the exam successfully. So you have no reason not to choose it.
ECSS (EC-Council Certified Security Specialist Practice Test) Free Demo Download: http://www.it-tests.com/ECSS.html
NO.1 Which of the following OSI layers is responsible for protocol conversion, data encryption/decryption,
and data compression?
A. Transport layer
B. Presentation layer
C. Data-link layer
D. Network layer
Answer: B
EC-COUNCIL exam prep ECSS questions ECSS ECSS ECSS original questions
NO.2 You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless
network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring
ISA Server 2006, which of the following is NOT necessary?
A. Defining how ISA Server would cache Web contents
B. Defining ISA Server network configuration
C. Setting up of monitoring on ISA Server
D. Configuration of VPN access
Answer: D
EC-COUNCIL ECSS exam ECSS answers real questions ECSS braindump
NO.3 Fill in the blank with the appropriate word ___is software that is a subcategory of malware and refers to
unwanted software that performs malicious actions on a user's computer. Some its examples are Trojan,
adware, and spyware.
A. Crimeware
Answer: A
EC-COUNCIL exam prep ECSS ECSS certification training
NO.4 John works as an Office Assistant in DataSoft Inc. He has received an e-mail from
duesoft_lotterygroup@us.com with the following message:
The DueSoft Lottery Incorporation
This is to inform you that you have just won a prize of $7,500.00 for this year's Annual Lottery promotion,
which was organized by Msn/Yahoo Lottery in conjunction with DueSoft. We collect active online e-mails
and select five people every year as our winners through an electronic balloting machine. Please reply
within three days of receiving this e-mail with your full details like Name, Address, Sex, Occupation, Age,
State, Telephone number, and Country to claim your prize.
If John replies to this e-mail, which of the following attacks may he become vulnerable to?
A. Salami attack
B. Man-in-the-Middle attack
C. Phishing attack
D. DoS attack
Answer: C
EC-COUNCIL ECSS ECSS original questions
NO.5 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Vulnerability scanning
B. Manual penetration testing
C. Automated penetration testing
D. Code review
Answer: A
EC-COUNCIL exam ECSS ECSS questions ECSS original questions
NO.6 Firewalking is a technique that can be used to gather information about a remote network protected by a
firewall. This technique can be used effectively to perform information gathering attacks. In this technique,
an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which
of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
A. ICMP packets leaving the network should be allowed.
B. An attacker should know the IP address of the last known gateway before the firewall.
C. There should be a backdoor installed on the network.
D. An attacker should know the IP address of a host located behind the firewall.
Answer: A,B,D
EC-COUNCIL ECSS certification training ECSS
NO.7 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Intercepting proxy server
B. Anonymous proxy server
C. Reverse proxy server
D. Tunneling proxy server
Answer: A
EC-COUNCIL ECSS study guide ECSS pdf ECSS demo
NO.8 Linux traffic monitoring tools are used to monitor and quickly detect faults in the network or a system.
Which of the following tools are used to monitor traffic of the Linux operating system?
Each correct answer represents a complete solution. Choose all that apply.
A. PsExec
B. IPTraf
C. MRTG
D. PsLogList
E. Ntop
Answer: B,C,E
EC-COUNCIL ECSS ECSS certification ECSS
NO.9 Which of the following representatives of incident response team takes forensic backups of the systems
that are the focus of the incident?
A. Lead investigator
B. Information security representative
C. Technical representative
D. Legal representative
Answer: C
EC-COUNCIL ECSS exam dumps ECSS ECSS exam simulations
NO.10 Which of the following types of attacks cannot be prevented by technical measures only?
A. Brute force
B. Ping flood attack
C. Smurf DoS
D. Social engineering
Answer: D
EC-COUNCIL exam simulations ECSS pdf ECSS ECSS study guide
NO.11 You have just set up a wireless network for customers at a coffee shop. Which of the following are
good security measures to implement?
Each correct answer represents a complete solution. Choose two.
A. Using WEP encryption
B. Using WPA encryption
C. Not broadcasting SSID
D. MAC filtering the router
Answer: A,B
EC-COUNCIL ECSS ECSS practice test ECSS ECSS certification training
NO.12 Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.
A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic
will follow.
B. Routers do not limit physical broadcast traffic.
C. Routers organize addresses into classes, which are used to determine how to move packets fromone
network to another.
D. Routers act as protocol translators and bind dissimilar networks.
Answer: A,C,D
EC-COUNCIL ECSS ECSS certification training ECSS test answers
NO.13 Which of the following security protocols are based on the 802.11i standard.?
Each correct answer represents a complete solution. Choose all that apply.
A. WEP
B. WPA2
C. WPA
D. WEP2
Answer: B,C
EC-COUNCIL ECSS exam dumps ECSS demo ECSS ECSS
NO.14 Which of the following security policies will you implement to keep safe your data when you connect
your Laptop to the office network over IEEE 802.11 WLANs?
Each correct answer represents a complete solution. Choose two.
A. Using a protocol analyzer on your Laptop to monitor for risks.
B. Using an IPSec enabled VPN for remote connectivity.
C. Using portscanner like nmap in your network.
D. Using personal firewall software on your Laptop.
Answer: B,D
EC-COUNCIL dumps ECSS demo ECSS test answers ECSS ECSS original questions
NO.15 Which of the following needs to be documented to preserve evidences for presentation in court?
A. Incident response policy
B. Account lockout policy
C. Separation of duties
D. Chain of custody
Answer: D
EC-COUNCIL dumps ECSS ECSS ECSS exam prep
NO.16 Kerberos is a computer network authentication protocol that allows individuals communicating over a
non-secure network to prove their identity to one another in a secure manner. Which of the following
statements are true about the Kerberos authentication scheme?
Each correct answer represents a complete solution. Choose all that apply.
A. Kerberos requires continuous availability of a central server.
B. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
C. Dictionary and brute force attacks on the initial TGS response to a client may reveal the
subject'spasswords.
D. Kerberos requires the clocks of the involved hosts to be synchronized.
Answer: A,C,D
EC-COUNCIL ECSS ECSS ECSS
NO.17 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of
the tool is as follows:
Which of the following tools is John using to crack the wireless encryption keys?
A. AirSnort
B. Kismet
C. PsPasswd
D. Cain
Answer: A
EC-COUNCIL questions ECSS ECSS ECSS test answers ECSS
NO.18 Which of the following attacks CANNOT be detected by an Intrusion Detection System (IDS)?
Each correct answer represents a complete solution. Choose all that apply.
A. Denial-of-Service (DoS) attack
B. E-mail spoofing
C. Port scan attack
D. Shoulder surfing
Answer: B,D
EC-COUNCIL study guide ECSS certification ECSS exam simulations ECSS braindump ECSS demo ECSS
NO.19 Which of the following statements best describes a certification authority?
A. A certification authority is a type of encryption that uses a public key and a private key pair fordata
encryption.
B. A certification authority is an entity that issues digital certificates for use by other parties.
C. A certification authority is a technique to authenticate digital documents by using
computercryptography.
D. A certification authority is a type of encryption that uses a single key to encrypt and decryp t data.
Answer: B
EC-COUNCIL original questions ECSS ECSS
NO.20 Which of the following is the first computer virus that was used to infect the boot sector of storage
media formatted with the DOS File Allocation Table (FAT) file system?
A. I love you
B. Melissa
C. Tequila
D. Brain
Answer: D
EC-COUNCIL ECSS certification training ECSS ECSS original questions ECSS ECSS braindump
Add IT-Tests's products to cart now! You will have 100% confidence to participate in the exam and disposably pass EC-COUNCIL certification ECSS exam. At last, you will not regret your choice.
没有评论:
发表评论