ECSAv8最も有効な質問と解答で勉強

仕事や学業の合間にEC-COUNCIL EC-Council Certified Security Analyst (ECSA)の合格を目指す方にとって、限られた時間をどう使うかが最大の課題です。Tech4ExamのECSAv8練習問題は、要点を押さえた150問の問題集で、短い準備期間でも効率よく実力を磨けます。

EC-COUNCIL ECSAv8 試験概要:

EC-COUNCIL ECSAv8 試験シラバストピック:

ECSAv8試験のQ&A – 受験前に知っておきたいこと

EC-COUNCIL EC-Council Certified Security Analyst (ECSA) 認定 ECSAv8 試験問題：

問題 #1

The objective of social engineering pen testing is to test the strength of human factors in a security chain within the organization. It is often used to raise the level of security awareness among employees.

The tester should demonstrate extreme care and professionalism during a social engineering pen test as it might involve legal issues such as violation of privacy and may result in an embarrassing situation for the organization.
Which of the following methods of attempting social engineering is associated with bribing, handing out gifts, and becoming involved in a personal relationship to befriend someone inside the company?

A. Phishing social engineering technique
B. Dumpster diving
C. Identity theft
D. Accomplice social engineering technique

問題 #2

A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

A. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system
B. Firewalls implemented on a hardware firewall are highly scalable
C. Appliance based firewalls cannot be upgraded
D. Operating system firewalls are highly configured

問題 #3

Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels.
A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack.

Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

A. External Assessment
B. Passive Assessment
C. Host-based Assessment
D. Application Assessment

問題 #4

An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet. The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker.

During external penetration testing, which of the following scanning techniques allow you to determine a port's state without making a full connection to the host?

A. SYN scan
B. XMAS Scan
C. FIN Scan
D. NULL Scan

問題 #5

Which of the following reports provides a summary of the complete pen testing process, its outcomes, and recommendations?

A. Executive Report
B. Host Report
C. Client-side test Report
D. Vulnerability Report

解説：