Best exercises of EC-COUNCIL certification ECSS exam and answers

ITCertKing is a website specifically provide the certification exam information sources for IT professionals. Through many reflects from people who have purchase ITCertKing's products, ITCertKing is proved to be the best website to provide the source of information about certification exam. The product of ITCertKing is a very reliable training tool for you. The answers of the exam exercises provided by ITCertKing is very accurate. Our ITCertKing's senior experts are continuing to enhance the quality of our training materials.

EC-COUNCIL certification ECSS exams has become more and more popular in the fiercely competitive IT industry. Although more and more people sign up to attend this examination of, the official did not reduce its difficulty and it is still difficult to pass the exam. After all, this is an authoritative test to inspect the computer professional knowledge and information technology ability. In order to pass the EC-COUNCIL certification ECSS exam, generally, many people need to spend a lot of time and effort to review.

ITCertKing is a website that can provide all information about different IT certification exam. ITCertKing can provide you with the best and latest exam resources. To choose ITCertKing you can feel at ease to prepare your EC-COUNCIL ECSS exam. Our training materials can guarantee you 100% to pass EC-COUNCIL certification ECSS exam, if not, we will give you a full refund and exam practice questions and answers will be updated quickly, but this is almost impossible to happen. ITCertKing can help you pass EC-COUNCIL certification ECSS exam and can also help you in the future about your work. Although there are many ways to help you achieve your purpose, selecting ITCertKing is your wisest choice. Having ITCertKing can make you spend shorter time less money and with greater confidence to pass the exam, and we also provide you with a free one-year after-sales service.

There are different ways to achieve the same purpose, and it's determined by what way you choose. A lot of people want to pass EC-COUNCIL certification ECSS exam to let their job and life improve, but people participated in the EC-COUNCIL certification ECSS exam all knew that EC-COUNCIL certification ECSS exam is not very simple. In order to pass EC-COUNCIL certification ECSS exam some people spend a lot of valuable time and effort to prepare, but did not succeed.

ITCertKing's practice questions and answers about the EC-COUNCIL certification ECSS exam is developed by our expert team's wealth of knowledge and experience, and can fully meet the demand of EC-COUNCIL certification ECSS exam's candidates. From related websites or books, you might also see some of the training materials, but ITCertKing's information about EC-COUNCIL certification ECSS exam is the most comprehensive, and can give you the best protection. Candidates who participate in the EC-COUNCIL certification ECSS exam should select exam practice questions and answers of ITCertKing, because ITCertKing is the best choice for you.

Exam Code: ECSS
Exam Name: EC-COUNCIL (EC-Council Certified Security Specialist Practice Test)
One year free update, No help, Full refund!
Total Q&A: 337 Questions and Answers
Last Update: 2013-10-14

In this age of advanced network, there are many ways to prepare EC-COUNCIL ECSS certification exam. ITCertKing provides the most reliable training questions and answers to help you pass EC-COUNCIL ECSS certification exam. . ITCertKing have a variety of EC-COUNCIL certification exam questions, we will meet you all about IT certification.

In order to meet the needs of each candidate, the team of IT experts in ITCertKing are using their experience and knowledge to improve the quality of exam training materials constantly. We can guarantee that you can pass the EC-COUNCIL ECSS exam the first time. If you buy the goods of ITCertKing, then you always be able to get newer and more accurate test information. The coverage of the products of ITCertKing is very broad. It can be provide convenient for a lot of candidates who participate in IT certification exam. Its accuracy rate is 100% and let you take the exam with peace of mind, and pass the exam easily.

ECSS Free Demo Download: http://www.itcertking.com/ECSS_exam.html

NO.1 Which of the following is the first computer virus that was used to infect the boot sector of storage
media formatted with the DOS File Allocation Table (FAT) file system?
A. I love you
B. Melissa
C. Tequila
D. Brain
Answer: D

EC-COUNCIL certification   ECSS dumps   ECSS

NO.2 Fill in the blank with the appropriate word ___is software that is a subcategory of malware and refers to
unwanted software that performs malicious actions on a user's computer. Some its examples are Trojan,
adware, and spyware.
A. Crimeware
Answer: A

EC-COUNCIL exam dumps   ECSS practice test   ECSS   ECSS

NO.3 Which of the following proxy servers is also referred to as transparent proxies or forced proxies?
A. Intercepting proxy server
B. Anonymous proxy server
C. Reverse proxy server
D. Tunneling proxy server
Answer: A

EC-COUNCIL braindump   ECSS   ECSS pdf   ECSS original questions

NO.4 Which of the following statements best describes a certification authority?
A. A certification authority is a type of encryption that uses a public key and a private key pair fordata
encryption.
B. A certification authority is an entity that issues digital certificates for use by other parties.
C. A certification authority is a technique to authenticate digital documents by using
computercryptography.
D. A certification authority is a type of encryption that uses a single key to encrypt and decryp t data.
Answer: B

EC-COUNCIL dumps   ECSS answers real questions   ECSS test answers   ECSS

NO.5 Which of the following types of attacks cannot be prevented by technical measures only?
A. Brute force
B. Ping flood attack
C. Smurf DoS
D. Social engineering
Answer: D

EC-COUNCIL questions   ECSS   ECSS   ECSS certification training

NO.6 Kerberos is a computer network authentication protocol that allows individuals communicating over a
non-secure network to prove their identity to one another in a secure manner. Which of the following
statements are true about the Kerberos authentication scheme?
Each correct answer represents a complete solution. Choose all that apply.
A. Kerberos requires continuous availability of a central server.
B. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
C. Dictionary and brute force attacks on the initial TGS response to a client may reveal the
subject'spasswords.
D. Kerberos requires the clocks of the involved hosts to be synchronized.
Answer: A,C,D

EC-COUNCIL   ECSS original questions   ECSS dumps

NO.7 John works as an Office Assistant in DataSoft Inc. He has received an e-mail from
duesoft_lotterygroup@us.com with the following message:
The DueSoft Lottery Incorporation
This is to inform you that you have just won a prize of $7,500.00 for this year's Annual Lottery promotion,
which was organized by Msn/Yahoo Lottery in conjunction with DueSoft. We collect active online e-mails
and select five people every year as our winners through an electronic balloting machine. Please reply
within three days of receiving this e-mail with your full details like Name, Address, Sex, Occupation, Age,
State, Telephone number, and Country to claim your prize.
If John replies to this e-mail, which of the following attacks may he become vulnerable to?
A. Salami attack
B. Man-in-the-Middle attack
C. Phishing attack
D. DoS attack
Answer: C

EC-COUNCIL   ECSS exam prep   ECSS   ECSS practice test   ECSS   ECSS

NO.8 Which of the following security protocols are based on the 802.11i standard.?
Each correct answer represents a complete solution. Choose all that apply.
A. WEP
B. WPA2
C. WPA
D. WEP2
Answer: B,C

EC-COUNCIL exam simulations   ECSS original questions   ECSS

NO.9 John works as a professional Ethical Hacker. He has been assigned the project of testing the security
of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of
the tool is as follows:
Which of the following tools is John using to crack the wireless encryption keys?
A. AirSnort
B. Kismet
C. PsPasswd
D. Cain
Answer: A

EC-COUNCIL   ECSS   ECSS exam

NO.10 Which of the following needs to be documented to preserve evidences for presentation in court?
A. Incident response policy
B. Account lockout policy
C. Separation of duties
D. Chain of custody
Answer: D

EC-COUNCIL   ECSS   ECSS   ECSS

NO.11 Which of the following representatives of incident response team takes forensic backups of the systems
that are the focus of the incident?
A. Lead investigator
B. Information security representative
C. Technical representative
D. Legal representative
Answer: C

EC-COUNCIL   ECSS   ECSS dumps

NO.12 Which of the following OSI layers is responsible for protocol conversion, data encryption/decryption,
and data compression?
A. Transport layer
B. Presentation layer
C. Data-link layer
D. Network layer
Answer: B

EC-COUNCIL   ECSS study guide   ECSS   ECSS original questions

NO.13 Which of the following statements are true about routers?
Each correct answer represents a complete solution. Choose all that apply.
A. Routers are responsible for making decisions about which of several paths network (orInternet)traffic
will follow.
B. Routers do not limit physical broadcast traffic.
C. Routers organize addresses into classes, which are used to determine how to move packets fromone
network to another.
D. Routers act as protocol translators and bind dissimilar networks.
Answer: A,C,D

EC-COUNCIL exam simulations   ECSS   ECSS braindump   ECSS   ECSS

NO.14 You have just set up a wireless network for customers at a coffee shop. Which of the following are
good security measures to implement?
Each correct answer represents a complete solution. Choose two.
A. Using WEP encryption
B. Using WPA encryption
C. Not broadcasting SSID
D. MAC filtering the router
Answer: A,B

EC-COUNCIL   ECSS   ECSS pdf   ECSS   ECSS   ECSS exam simulations

NO.15 Which of the following security policies will you implement to keep safe your data when you connect
your Laptop to the office network over IEEE 802.11 WLANs?
Each correct answer represents a complete solution. Choose two.
A. Using a protocol analyzer on your Laptop to monitor for risks.
B. Using an IPSec enabled VPN for remote connectivity.
C. Using portscanner like nmap in your network.
D. Using personal firewall software on your Laptop.
Answer: B,D

EC-COUNCIL   ECSS   ECSS

NO.16 You are responsible for security at a company that uses a lot of Web applications. You are most
concerned about flaws in those applications allowing some attacker to get into your network. What
method would be best for finding such flaws?
A. Vulnerability scanning
B. Manual penetration testing
C. Automated penetration testing
D. Code review
Answer: A

EC-COUNCIL   ECSS test   ECSS practice test   ECSS

NO.17 Firewalking is a technique that can be used to gather information about a remote network protected by a
firewall. This technique can be used effectively to perform information gathering attacks. In this technique,
an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which
of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
A. ICMP packets leaving the network should be allowed.
B. An attacker should know the IP address of the last known gateway before the firewall.
C. There should be a backdoor installed on the network.
D. An attacker should know the IP address of a host located behind the firewall.
Answer: A,B,D

EC-COUNCIL dumps   ECSS   ECSS

NO.18 Linux traffic monitoring tools are used to monitor and quickly detect faults in the network or a system.
Which of the following tools are used to monitor traffic of the Linux operating system?
Each correct answer represents a complete solution. Choose all that apply.
A. PsExec
B. IPTraf
C. MRTG
D. PsLogList
E. Ntop
Answer: B,C,E

EC-COUNCIL test   ECSS certification   ECSS

NO.19 You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless
network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring
ISA Server 2006, which of the following is NOT necessary?
A. Defining how ISA Server would cache Web contents
B. Defining ISA Server network configuration
C. Setting up of monitoring on ISA Server
D. Configuration of VPN access
Answer: D

EC-COUNCIL   ECSS dumps   ECSS   ECSS   ECSS exam dumps

NO.20 Which of the following attacks CANNOT be detected by an Intrusion Detection System (IDS)?
Each correct answer represents a complete solution. Choose all that apply.
A. Denial-of-Service (DoS) attack
B. E-mail spoofing
C. Port scan attack
D. Shoulder surfing
Answer: B,D

EC-COUNCIL certification training   ECSS   ECSS   ECSS practice test

ITCertKing offer the latest MB7-701 exam material and high-quality 000-350 pdf questions & answers. Our MB6-871 VCE testing engine and 000-N32 study guide can help you pass the real exam. High-quality 74-324 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/ECSS_exam.html