EC-COUNCIL ECSS 問題集

質問 1：
A type of malware allows an attacker to trick the target entity into performing a predefined action, and upon its activation, it grants the attacker unrestricted access to all the data stored on the compromised system.
Which of the following is this type of malware?
A. Key log ger
B. Trojan
C. Botnet
D. Worm
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Sarah, a forensic investigator, is working on a criminal case. She was provided with all the suspect devices.
Sarah employs an imaging software tool for duplicating the original data from the suspect devices. However, the tool she employed failed to image the data as the suspect version of the drive was very old and incompatible with imaging software. Hence, Sarah used an alternative data acquisition technique and succeeded in imaging the data.
Which of the following types of data acquisition techniques did Sarah employ in the above scenario?
A. Bit-stream disk-to-disk
B. Bit-stream disk-to-image file
C. Logical acquisition
D. Sparse acquisition
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Melissa, an ex-employee of an organization, was fired because of misuse of resources and security violations.
She sought revenge against the company and targeted its network, as she is already aware of its network topology.
Which of the following categories of insiders does Melissa belong to?
A. Negligent insider
B. Compromised insider
C. Professional insider
D. Malicious insider
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
James is a professional hacker attempting to gain access to an industrial system through a remote control device. In this process, he used a specially designed radio transceiver device to sniff radio commands and inject arbitrary code into the firmware of the remote controllers to maintain persistence.
Which of the following attacks is performed by James in the above scenario?
A. Malicious reprogramming attack
B. Re pairing with a malicious RF controller
C. Command injection
D. Abusing reprogramming attack
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Bob.
a security specialist at an organization, extracted the following IIS log from a Windows-based server:
"2019-12-12 06:11:41 192.168.0.10 GET /images/content/bg_body_l.jpg - 80 - 192.168.0.27 Mozilla/5.0 (Windows*NT 6.3:*WOW64)*AppleWebKit/537.36*(KHTML.*like Cecko)*Chrome/48.0.2564.103 Safari/5
http://www.movie5cope.com/css/style.c5s 200 0 0 365"
Identify the element in the above IIS log entry that indicates the request was fulfilled without error.
A. 80
B. 537
C. 200
D. 192
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An organization decided to strengthen the security of its network by studying and analyzing the behavior of attackers. For this purpose. Steven, a security analyst, was instructed to deploy a device to bait attackers.
Steven selected a solution that appears to contain very useful information to lure attackers and find their locationsand techniques.
Identify the type of device deployed by Steven in the above scenario.
A. Honeypot
B. Firewall
C. Intrusion detection system
D. Router
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Peter, an attacker aiming to disrupt organizational services, targeted a configuration protocol that issues IP addresses to host systems. To disrupt the issuance of IP addresses. Peter flooded the target server with spoofed MAC addresses so that valid users cannot receive IP addresses to access the network.
Identify the type of attack Peter has performed in the above scenario.
A. DHCP starvation attack
B. Session hijacking
C. Ping-of-death attack
D. ARP spoofing
正解：A
解説: (Topexam メンバーにのみ表示されます)