John, a professional penetration tester, was hired by an organization for conducting a penetration test on their IT infrastructure. He was assigned the task of identifying risks, rather than finding vulnerabilities. In this process, he defined the goal before initiating the penetration test and performed multiple parallel processes to achieve the goal.Identify the type of penetration assessment performed by John in the above scenario.

Objective-oriented penetration testing approach

Red team oriented penetration testing approach

Objective-oriented penetration testing approach

Adversarial goal based assessment

Compliance oriented penetration testing approach

Steve, a professional pen tester, was hired by an organization to assess its cybersecurity. The organization provided Steve with details such as network topology documents, asset inventory, and valuation information. This information helped Steve complete the penetration test successfully, and he provided a snapshot of the organization's current security posture.Identify the penetration testing strategy followed by Steve in the above scenario.

Goal oriented penetration testing

Robert, a security specialist, was appointed to strengthen the security of the organization's network. To prevent multiple login attempts from unknown sources, Robert implemented a security strategy of issuing alerts or warning messages when multiple failed login attempts are made.Which of the following security risks is addressed by Robert to make attempted break-ins unsuccessful?

Absence of account lockout for invalid session IDs

Bob, a network administrator in a company, manages network connectivity to 200 employees in six different rooms. Every employee has their own laptop to connect to the Internet through a wireless network, but the company has only one broadband connection.Which of the following types of wireless networks allows Bob to provide Internet access to every laptop and bring all the devices to a single network?

Multiple wireless access points

Daniel, a networking specialist, identifies a glitch in a networking tool and fixes it on a priority using a system.Daniel was authorized to make a copy of computers programs while maintaining or repairing the system.Which of the following acts was demonstrated in the above scenario?

The Digital Millennium Copyright Act (DMCA)

Kevin logged into a banking application with his registered credentials and tried to transfer some amount from his account to Flora's account. Before transferring the amount to Flora's account, the application sent an OTP to Kevin's mobile for confirmation.Which of the following authentication mechanisms is employed by the banking application in the above scenario?

Single sign on (SSO) authentication

ECCouncil ECSS Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

Jennifer, a forensics investigation team member, was inspecting a compromised system. After gathering all the evidence related to the compromised system, she disconnected the system from the network to stop the spread of the incident to other systems.

Identify the role played by Jennifer in the forensics investigation.

Evidence manager

Expert witness

Incident responder

Incident analyzer

Comment (0)

ECCouncil ECSS Practice Test 2

Question

ECCouncil ECSS Practice Tests

Practice Tests