Online Access Free ECSAv8 Exam Questions

ARP spoofing is a technique whereby an attacker sends fake ("spoofed") Address Resolution Protocol (ARP) messages onto a Local Area Network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host (such as the default gateway), causing any traffic meant for that IP address to be sent to the attacker instead.
ARP spoofing attack is used as an opening for other attacks.

What type of attack would you launch after successfully deploying ARP spoofing?

• A.Parameter Filtering
• B.Social Engineering
• C.Session Hijacking
• D.Input Validation

What sort of vulnerability assessment approach starts by building an inventory of protocols found on the machine?

• A.Service-based Assessment Solutions
• B.Inference-based Assessment
• C.Product-based Assessment Solutions
• D.Tree-based Assessment

External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

Which of the following types of penetration testing is performed with no prior knowledge of the site?

• A.White box testing
• B.Blue box testing
• C.Grey box testing
• D.Black box testing

Which of the following protocols cannot be used to filter VoIP traffic?

• A.Real-time Transport Control Protocol (RTCP)
• B.Real-Time Publish Subscribe (RTPS)
• C.Media Gateway Control Protocol (MGCP)
• D.Session Description Protocol (SDP)

A penetration tester performs OS fingerprinting on the target server to identify the operating system used on the target server with the help of ICMP packets.

While performing ICMP scanning using Nmap tool, message received/type displays "3 - Destination Unreachable[5]" and code 3.
Which of the following is an appropriate description of this response?

• A.Destination protocol unreachable
• B.Destination host unreachable
• C.Destination port unreachable
• D.Destination host unavailable