EC Council Certified Security Analyst (ECSA) Set 3

Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?

Information gathering is performed to: i) Collect basic information about the target company and its network ii) Determine the operating system used, platforms running, web server versions, etc. iii) Find vulnerabilities and exploits Which of the following pen testing tests yields information about a company's technology infrastructure?

A penetration tester performs OS fingerprinting on the target server to identify the operating system used on the target server with the help of ICMP packets. While performing ICMP scanning using Nmap tool, message received/type displays "3

Which type of vulnerability assessment tool provides security to the IT system by testing for vulnerabilities in the applications and operation system?

Traffic on which port is unusual for both the TCP and UDP ports?

Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

What sort of vulnerability assessment approach starts by building an inventory of protocols found on the machine?

During the process of fingerprinting a web application environment, what do you need to do in order to analyze HTTP and HTTPS request headers and the HTML source code?

Identify the correct formula for Return on Investment (ROI).

Identify the type of firewall represented in the diagram below: