Eccouncil examstrust eccouncil Ec0-479 Online Access by Ryker q23 vce pdf

Page: 2 / 8

Exam Name:	EC-Council Certified Security Analyst (ECSA)
Exam Code:	EC0-479 Dumps
Vendor:	ECCouncil	Certification:	ECSA
Questions:	232 Q&A's	Shared By:	ryker

Question 8

You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities:

When you type this and click on search, you receive a pop-up window that says:

"This is a test."

What is the result of this test?

Options:

Your website is vulnerable to CSS

Your website is not vulnerable

Your website is vulnerable to SQL injection

Your website is vulnerable to web bugs

Discussion

Ivan

I tried these dumps for my recent certification exam and I found it pretty helpful.

Elis (not set)

Agree!!! The questions in the dumps were quite similar to what came up in the actual exam. It gave me a good idea of the types of questions to expect and helped me revise efficiently.

Fatima

Hey I passed my exam. The world needs to know about it. I have never seen real exam questions on any other exam preparation resource like I saw on Cramkey Dumps.

Niamh (not set)

That's true. Cramkey Dumps are simply the best when it comes to preparing for the certification exam. They have all the key information you need and the questions are very similar to what you'll see on the actual exam.

Vienna

I highly recommend them. They are offering exact questions that we need to prepare our exam.

Jensen (not set)

That's great. I think I'll give Cramkey a try next time I take a certification exam. Thanks for the recommendation!

Miriam

Highly recommended Dumps. 100% authentic and reliable. Passed my exam with wonderful score.

Milan (not set)

I see. Thanks for the information. I'll definitely keep Cramkey in mind for my next exam.

Question 9

After passively scanning the network of Department of Defense (DoD), you switch over to active scanning to identify live hosts on their network. DoD is a lage organization and should respond to any number of scans. You start an ICMP ping sweep by sending an IP packet to the broadcast address. Only five hosts responds to your ICMP pings; definitely not the number of hosts you were expecting. Why did this ping sweep only produce a few responses?

Options:

A switched network will not respond to packets sent to the broadcast address

Only IBM AS/400 will reply to this scan

Only Unix and Unix-like systems will reply to this scan

Only Windows systems will reply to this scan

Discussion

Question 10

Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florida. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa. She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information. After hearing the name of the CEO, the receptionist gave Julia all the information she asked for.

What principal of social engineering did Julia use?

Options:

Reciprocation

Friendship/Liking

Social Validation

Scarcity

Discussion

Question 11

In Linux, what is the smallest possible shellcode?

Options:

800 bytes

8 bytes