EC-Council Certified Security Analyst ECSA v10 ECSAv10 Exam Questions

What are the scanning techniques that are used to bypass firewall rules and logging mechanisms and disguise themselves as usual network traffic?

Kimberly is studying to be an IT security analyst at a vocational school in her town. The school offers manydifferent programming as well as networking languages. What networking protocol language should she learnthat routers utilize?

When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?

Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

You are assisting a Department of Defense contract company to become compliant with the stringent securitypolicies set by the DoD. One such strict rule is that firewalls must only allow incoming connections that werefirst initiated by internal computers.

What type of firewall must you implement to abide by this policy?

You are the security analyst working for a private company out of France. Your current assignment is to obtaincredit card information from a Swiss bank owned by that company. After initial reconnaissance, you discoverthat the bank security defenses are very strong and would take too long to penetrate. You decide to get theinformation by monitoring the traffic between the bank and one of its subsidiaries in London.

After monitoringsome of the traffic, you see a lot of FTP packets traveling back and forth. You want to sniff the traffic andextract usernames and passwords. What tool could you use to get this information?

Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?