Question 1

Least privilege is a security concept that requires that a user is

Accepted Answer

A)  limited to those functions required to do the job. 
B)  given root or administrative privileges. 
C)  trusted to keep all data and access to that data under their sole control. 
D)  given privileges equal to everyone else in the department.

Question 2

Which type of access control is used on a router or firewall to limit network activity?

Accepted Answer

A)  Mandatory 
B)  Discretionary 
C)  Rule-based 
D)  Role-based

Question 3

Employees in a company are no longer able to access Internet web sites on their computers. The network administrator is able to successfully ping IP address of web servers on the Internet and is able to open web sites by using an IP address in place of the URL. The administrator runs the nslookup command for www.eccouncil.org and receives an error message stating there is no response from the server. What should the administrator do next?

Accepted Answer

A)  Configure the firewall to allow traffic on TCP ports 53 and UDP port 53. 
B)  Configure the firewall to allow traffic on TCP ports 80 and UDP port 443. 
C)  Configure the firewall to allow traffic on TCP port 53. 
D)  Configure the firewall to allow traffic on TCP port 8080.

Question 4

Alisa is a Network Security Manager at Aidos Cyber Security. During a regular network audit, she sent specially crafted ICMP packet fragments with different offset values into the network, causing a system crash. Which attack Alisa is trying to perform?

Accepted Answer

A)  Ping-of-death attack 
B)  Fraggle attack 
C)  Session hijacking 
D)  Smurf attack

Question 5

As a part of the pen testing process, James performs a FIN scan as given below:  What will be the response if the port is open?

Accepted Answer

A)  No response 
B)  FIN/RST 
C)  FIN/ACK 
D)  RST

Question 6

Fingerprinting VPN firewalls is possible with which of the following tools?

Accepted Answer

A)  Angry IP 
B)  Nikto 
C)  Ike-scan 
D)  Arp-scan

Question 7

In the software security development life cyle process, threat modeling occurs in which phase?

Accepted Answer

A)  Design 
B)  Requirements 
C)  Verification 
D)  Implementation

Question 8

When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners. What proxy tool will help you find web vulnerabilities?

Accepted Answer

A)  Burpsuite 
B)  Maskgen 
C)  Dimitry 
D)  Proxychains

Question 9

Adam is an IT administrator for Syncan Ltd. He is designated to perform various IT tasks like setting up new user accounts, managing backup/restores, security authentications and passwords, etc. Whilst performing his tasks, he was asked to employ the latest and most secure authentication protocol to encrypt the passwords of users that are stored in the Microsoft Windows OS-based systems. Which of the following authentication protocols should Adam employ in order to achieve the objective?

Accepted Answer

A)  LANMAN 
B)  Kerberos 
C)  NTLM 
D)  NTLMv2

Question 10

Which statement best describes a server type under an N-tier architecture?

Accepted Answer

A)  A group of servers at a specific layer 
B)  A single server with a specific role 
C)  A group of servers with a unique role 
D)  A single server at a specific layer

Question 11

A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following?

Accepted Answer

A)  Public key 
B)  Private key 
C)  Modulus length 
D)  Email server certificate

Question 12

While scanning a server, you found rpc, nfs and mountd services running on it. During the investigation, you were told that NFS Shares were mentioned in the /etc/exports list of the NFS server. Based on this information, which among the following commands would you issue to view the NFS Shares running on the server?

Accepted Answer

A)  showmount 
B)  nfsenum 
C)  mount 
D)  rpcinfo

Question 13

While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

Accepted Answer

A)  Validate web content input for query strings. 
B)  Validate web content input with scanning tools. 
C)  Validate web content input for type, length, and range. 
D)  Validate web content input for extraneous queries.

Question 14

AB Cloud services provide virtual platform services for the users in addition to storage. The company offers users with APIs, core connectivity and delivery, abstraction and hardware as part of the service. What is the name of the service AB Cloud services offer?

Accepted Answer

A)  Web Application Services 
B)  Platform as a service (PaaS) 
C)  Infrastructure as a service (IaaS) 
D)  Software as a service (SaaS)

Question 15

What results will the following command yield:  'NMAP -sS -O -p 123-153 192.168.100.3'?

Accepted Answer

A)  A stealth scan, opening port 123 and 153 
B)  A stealth scan, checking open ports 123 to 153 
C)  A stealth scan, checking all open ports excluding ports 123 to 153 
D)  A stealth scan, determine operating system, and scanning ports 123 to 153

Question 16

One way to defeat a multi-level security solution is to leak data via

Accepted Answer

A)  a bypass regulator. 
B)  steganography. 
C)  a covert channel. 
D)  asymmetric routing.

Question 17

An NMAP scan of a server shows port 69 is open. What risk could this pose?

Accepted Answer

A)  Unauthenticated access 
B)  Weak SSL version 
C)  Cleartext login 
D)  Web portal data leak

Question 18

Which of the following open source tools would be the best choice to scan a network for potential targets?

Accepted Answer

A)  NMAP 
B)  NIKTO 
C)  CAIN 
D)  John the Ripper

Question 19

Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

Accepted Answer

A)  Poly key exchange 
B)  Cross certification 
C)  Poly key reference 
D)  Cross-site exchange

Question 20

Which of the following is the successor of SSL?

Accepted Answer

A)  TLS 
B)  RSA 
C)  GRE 
D)  IPSec

Exam 5: ECCouncil Computer Hacking Forensic Investigator