Online Access Free ECSAv10 Practice Test

What is kept in the following directory? HKLM\SECURITY\Policy\Secrets

• A.Service account passwords in plain text
• B.Local store PKI Kerberos certificates
• C.Cached password hashes for the past 20 users
• D.IAS account names and passwords

You are a security analyst performing a penetration tests for a company in the Midwest.
After some initial reconnaissance, you discover the IP addresses of some Cisco routers used by the company.
You type in the following URL that includes the IP address of one of the routers:
http://172.168.4.131/level/99/exec/show/config
After typing in this URL, you are presented with the entire configuration file for that router.
What have you discovered?

• A.Cisco IOS Arbitrary Administrative Access Online Vulnerability
• B.HTML Configuration Arbitrary Administrative Access Vulnerability
• C.HTTP Configuration Arbitrary Administrative Access Vulnerability
• D.URL Obfuscation Arbitrary Administrative Access Vulnerability

Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.

What does a vulnerability assessment identify?

• A.Weaknesses that could be exploited
• B.Disgruntled employees
• C.Organizational structure
• D.Physical security breaches

The first and foremost step for a penetration test is information gathering. The main objective of this test is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.

Which of the following information gathering terminologies refers to gathering information through social engineering on-site visits, face-to-face interviews, and direct questionnaires?

• A.Pseudonymous Information Gathering
• B.Active Information Gathering
• C.Anonymous Information Gathering
• D.Open Source or Passive Information Gathering

Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels.
A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack.

Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

• A.External Assessment
• B.Host-based Assessment
• C.Passive Assessment
• D.Application Assessment