Online Access Free ECSS Exam Questions

Sam is a hacker who decided to damage the reputation of an organization. He started collecting information about the organization using social engineering techniques. Sam aims to gather critical information such as admin passwords and OS versions to plan for an attack.
Identify the target employee in the organization from whom Sam can gather the required information.

• A.System administrators
• B.Customer support learn
• C.Helpdesk
• D.Third-party service provider

Below are the elements included in the order of volatility for a typical computing system as per the RFC 3227 guidelines for evidence collection and archiving.
l.Archival media
2.Remote logging and monitoring data related to the target system
3.Routing table, process table, kernel statistics, and memory
4.Registers and processor cache
5-Physical configuration and network topology
6.Disk or other storage media
7.Temporary system files
Identify the correct sequence of order of volatility from the most to least volatile for a typical system.

• A.7->5- >4->3 ->2 >6 >1
• B.4 >3 >7->l >2 ->5->6
• C.2->1->4-->3-->6-->5->7
• D.4.>3 >7>6.>2-.>5- >l

Bob has secretly installed smart CCTV devices (loT devices) outside his home and wants to access the recorded data from a remote location. These smart CCTV devices send sensed data to an intermediate device that carries out pre-processing of data online before transmitting it to the cloudfor storage and analysis. The analyzed data is then sent to Bob for initiating actions.
Identify the component of loT architecture that collects data from loT devices and performs data preprocessing.

• A.Data lakes
• B.A Machine learning
• C.Gateway
• D.Streaming data processor

John, a professional penetration tester, was hired by an organization for conducting a penetration test on their IT infrastructure. He was assigned the task of identifying risks, rather than finding vulnerabilities. In this process, he defined the goal before initiating the penetration test and performed multiple parallel processes to achieve the goal.
Identify the type of penetration assessment performed by John in the above scenario.

• A.Red team oriented penetration testing approach
• B.Adversarial goal based assessment
• C.Compliance oriented penetration testing approach
• D.Objective-oriented penetration testing approach

Paola, a professional hacker, configured her wireless router in an organization's premises and advertised it with a spoofed SSID. She lured victims to connect to the router by sending the fake SSID. She started sniffing all the traffic from the victims that is passing through his wireless router.
Which of the following types of attacks is Paola performing in the above scenario?

• A.Key reinstallation attack
• B.AP MAC spoofing attack
• C.Ad-hoc connection attack
• D.Rogue AP attack