EC-COUNCIL ECSS 問題集

質問 1：
Below is an extracted Apache error log entry.
"(Wed Aug 28 13:35:38.878945 2020] (core:error] (pid 12356:tid 8689896234] (client 10.0.0.8] File not found: /images/folder/pic.jpg" Identify the element in the Apache error log entry above that represents the IP address from which the request was made.
A. 10.0.0.8
B. 12356
C. 8689896234
D. 13:35:38.878945
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Johnson is a professional hacker who targeted an organization's customers and decided to crack their system passwords. In this process, he found a list of valid customers, created a list of possible passwords, ranked the passwords from high to low probability, and started keying in each password in the target system until the correct password is discovered.
Identify the type of attack performed by Johnson in the above scenario.
A. Password guessing
B. Rainbow table attack
C. Dictionary attack
D. Brute force attack
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which of the following standards and criteria version of SWCDE mandates that any action with the potential to alter, damage, or destroy any aspect of original evidence must be performed by qualified persons in a forensically sound manner?
A. Standards and Criteria 17
B. Standards and Criteria 13
C. Standards and Criteria 11
D. Standards and Criteria 15
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Paola, a professional hacker, configured her wireless router in an organization's premises and advertised it with a spoofed SSID. She lured victims to connect to the router by sending the fake SSID. She started sniffing all the traffic from the victims that is passing through his wireless router.
Which of the following types of attacks is Paola performing in the above scenario?
A. AP MAC spoofing attack
B. Ad-hoc connection attack
C. Rogue AP attack
D. Key reinstallation attack
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Kevin, an attacker, is attempting to compromise a cloud server. In this process, Kevin intercepted the SOAP messages transmitted between a user and the server, manipulated the body of the message, and then redirected it to the server as a legitimate user to gain access and run malicious code on the cloud server.
Identify the attack initiated by Kevin on the target cloud server.
A. Wrapping attack
B. Side-channel attack
C. DNS spoofing
D. Cross guest VM breaches
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Bob, a professional hacker, targeted an organization to launch attacks. Bob gathered information such as network topology and a list of live hosts. Based on the collected information, he launched further attacks over the organization's network.
Identify the type of network attack Bob initiated on the target organization in the above scenario.
A. Buffer overflow
B. Session hijacking
C. Data modification
D. Enumeration
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
James is a professional hacker attempting to gain access to an industrial system through a remote control device. In this process, he used a specially designed radio transceiver device to sniff radio commands and inject arbitrary code into the firmware of the remote controllers to maintain persistence.
Which of the following attacks is performed by James in the above scenario?
A. Malicious reprogramming attack
B. Re pairing with a malicious RF controller
C. Command injection
D. Abusing reprogramming attack
正解：A
解説: (Topexam メンバーにのみ表示されます)