Online Access Free ECSAv10 Exam Questions

Which among the following information is not furnished by the Rules of Engagement (ROE) document?

• A.Details on how organizational data is treated throughout and after the test
• B.Techniques for data exclusion from systems upon termination of the test
• C.Details on how data should be transmitted during and after the test
• D.Techniques for data collection from systems upon termination of the test

Identify the type of testing that is carried out without giving any information to the employees or administrative head of the organization.

• A.Unannounced Testing
• B.Blind Testing
• C.Double Blind Testing
• D.Announced Testing

Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and Zombies? What type of Penetration Testing is Larry planning to carry out?

• A.Firewall Penetration Testing
• B.Router Penetration Testing
• C.Internal Penetration Testing
• D.DoS Penetration Testing

If a web application sends HTTP cookies as its method for transmitting session tokens, it may be vulnerable which of the following attacks?

• A.Sql injection attack
• B.Cross-site request attack
• C.Session Hijacking
• D.Parameter tampering Attack

Which of the following policy forbids everything with strict restrictions on all usage of the company systems and network?

• A.Promiscuous Policy
• B.Information-Protection Po
• C.Prudent Policy
• D.Paranoid Policy