Online Access Free ECSS Exam Questions

Melanie, a professional hacker, is attempting to break into a target network through an application server. In this process, she identified a logic flaw in the target web application that provided visibility into the source code. She exploited this vulnerability to launch further attacks on the target web application.
Which of the web application vulnerabilities was identified by Melanie in the above scenario?

• A.Broken authentication
• B.Security misconfiguration
• C.Insecure deserialization
• D.Command injection

Below are the elements included in the order of volatility for a typical computing system as per the RFC 3227 guidelines for evidence collection and archiving.
l.Archival media
2.Remote logging and monitoring data related to the target system
3.Routing table, process table, kernel statistics, and memory
4.Registers and processor cache
5-Physical configuration and network topology
6.Disk or other storage media
7.Temporary system files
Identify the correct sequence of order of volatility from the most to least volatile for a typical system.

• A.7->5- >4->3 ->2 >6 >1
• B.2->1->4-->3-->6-->5->7
• C.4.>3 >7>6.>2-.>5- >l
• D.4 >3 >7->l >2 ->5->6

Jennifer, a forensics investigation team member, was inspecting a compromised system. After gathering all the evidence related to the compromised system, she disconnected the system from the network to stop the spread of the incident to other systems.
Identify the role played by Jennifer in the forensics investigation.

• A.Expert witness
• B.Incident responder
• C.Evidence manager
• D.Incident analyzer

Jacob, a network defender in an organization, was instructed to improve the physical security measures to prevent unauthorized intrusion attempts. In this process, Jacob implemented certain physical security controls by using warning messages and signs that notify legal consequences to discourage hackers from making intrusion attempts.
Which of the following type of physical security controls has Jacob implemented in the above scenario?

• A.Deterrent controls
• B.Recovery controls
• C.Preventive controls
• D.Detective control

Kalley, a network administrator of an organization, has installed a traffic monitoring system to capture and report suspicious traffic signatures. In this process, she detects traffic containing password cracking, sniffing, and brute-forcing attempts.
Which of the following categories of suspicious traffic signature were identified by Kalley through the installed monitoring system?

• A.Denial of service (DoS) signatures
• B.Unauthorized access signatures
• C.Informational signatures
• D.Reconnaissance signatures