Eccouncil ECSS EC-Council Certified Security Specialist (ECSSv10) Exam Practice Test

Page: 1 / 14
Total 100 questions
Question 1

Clark, a digital forensic expert, was assigned to investigate a malicious activity performed on an organization's network. The organization provided Clark with all the information related to the incident. In this process, he assessed the impact of the incident on the organization, reasons for and source of the incident, steps required to tackle the incident, investigating team required to handle the case, investigative procedures, and possible outcome of the forensic process.

Identify the type of analysis performed by Clark in the above scenario.



Answer : D

In the given scenario, Clark performed acase analysis. This involves assessing the impact of the incident, understanding its reasons and source, determining the necessary steps to address it, assembling an investigative team, defining investigative procedures, and considering potential outcomes of the forensic process. Case analysis is crucial in digital forensics to effectively handle incidents and gather relevant evidence.


https://www.eccouncil.org/train-certify/certified-soc-analyst-csa/

Question 2

Below is the syntax of a command-line utility that displays active TCP connections and ports on which the computer is listening.

netstat [ a] [e] [-nJ [-o] [ p Protocol] [-r] [-s] [interval]

Identify the netstat parameter that displays active TCP connections and includes the process ID (PID) for each connection.



Answer : B

Thenetstatparameter that displays active TCP connections and includes theprocess ID (PID)for each connection is[-O]. When you use this option, netstat will show the associated process ID (PID) for each active connection.


EC-Council Certified Security Specialist (E|CSS) documents and study guide.

EC-Council Certified Security Specialist (E|CSS) course materials12

Question 3

Below is an extracted Apache error log entry.

"(Wed Aug 28 13:35:38.878945 2020] (core:error] (pid 12356:tid 8689896234] (client 10.0.0.8] File not found: /images/folder/pic.jpg"

Identify the element in the Apache error log entry above that represents the IP address from which the request was made.



Answer : A

Certainly! Let's analyze the Apache error log entry to identify the IP address:

The IP address from which the request was made is10.0.0.8(option A).

This address appears in the log entry as follows:

(client 10.0.0.8] File not found: /images/folder/pic.jpg'


EC-Council Certified Security Specialist (E|CSS) documents and study guide provide insights into network security and log analysis1.

Apache error logs follow a specific format, where the client IP address is indicated1.

Question 4

Cibel.org, an organization, wanted to develop a web application for marketing its products to the public. In this process, they consulted a cloud service provider and requested provision of development tools, configuration management, and deployment platforms for developing customized applications.

Identify the type of cloud service requested by Cibel.org in the above scenario.



Answer : D

Cibel.org requested a cloud service that providesdevelopment tools, configuration management, and deployment platformsfor developing customized applications.This aligns with the characteristics ofPlatform-as-a-service (PaaS), which offers a platform for developers to build, deploy, and manage applications without worrying about infrastructure management.Reference: EC-Council Certified Security Specialist (E|CSS) course materials12.


Question 5

Kalley, a shopping freak, often visits different e commerce websites from her office system. One day, she received a free software on her mail with the claim that it is loaded with new clothing offers. Tempted by this, Kalley downloaded the malicious software onto her system. The software infected Kalley's system and began spreading the infection to other systems connected to the network.

Identify the threat source through which Kalley unintentionally invited the malware into the network?



Answer : D

Kalley's actions inadvertently introduced malware into the network. Here's how:

Decoy Application:

Adecoy applicationis a seemingly legitimate software or tool that disguises itself as something useful or appealing.

In Kalley's case, she received an email claiming that the software was loaded with new clothing offers. Tempted by this, she downloaded it.

Unfortunately, the software turned out to bemalicious, infecting her system.

Decoy applications often exploit users' curiosity or desire for freebies, enticing them to install harmful software.


EC-Council Certified Security Specialist (E|CSS) documents and course materials.

Question 6

Sam is working as a loan agent for a financial institution. He frequently receives a number of emails from clients providing their personal details for loan approval. As these emails contain sensitive dat

a. Sam had set up a feature that directly downloads the emails on his device without storing a copy on the mail server.

Which of the following protocols provides the above-discussed email features?



Answer : D

ThePost Office Protocol version 3 (POP3)is a standard email protocol that allows users to retrieve emails from a mail server. Unlike other email protocols (such as IMAP), POP3 downloads emails to the user's device and removes them from the server. In Sam's case, setting up POP3 ensures that emails containing sensitive data are directly downloaded to his device without leaving a copy on the mail server.


Question 7

Ben, a computer user, applied for a digital certificate. A component of PKI verifies Ben's identity using the credentials provided and passes that request on behalf of Ben to grant the digital certificate.

Which of the following PKI components verified Ben as being legitimate to receive the certificate?



Answer : D

In the context of Public Key Infrastructure (PKI), theRegistration Authority (RA)plays a crucial role in verifying the identity of individuals or entities requesting digital certificates. Here's how it works:

Ben, the computer user, applies for a digital certificate.

TheRAverifies Ben's identity using the credentials provided.

Once verified, theRAforwards the request on behalf of Ben to theCertificate Authority (CA).

TheCAthen issues the digital certificate to Ben.

Therefore, theRAis responsible for ensuring that legitimate individuals receive valid digital certificates by verifying their identity.


EC-Council Certified Security Specialist (E|CSS) documents and study guide1.

EC-Council Certified Security Specialist (E|CSS) course materials2.

Page:    1 / 14   
Total 100 questions