EC Council Certified Security Analyst (ECSA)

Which of the following information gathering techniques collects information from an organization's web-based calendar and email services?

Which Wireshark filter displays all the packets where the IP address of the source host is 10.0.0.7?

Which of the following statements is true about the LM hash?

Which of the following statement holds true for TCP Operation?

Which of the following will not handle routing protocols properly?

What is a goal of the penetration testing report?

Which of the following is the range for assigned ports managed by the Internet Assigned Numbers Authority (IANA)?

Identify the injection attack represented in the diagram below:

Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control. This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them. What is the best way to protect web applications from parameter tampering attacks?