EC-COUNCIL EC-Council Certified Security Analyst (ECSA) Sample Questions:

1. Windows stores user passwords in the Security Accounts Manager database (SAM), or in the Active Directory database in domains. Passwords are never stored in clear text; passwords are hashed and the results are stored in the SAM.
NTLM and LM authentication protocols are used to securely store a user's password in the SAM database using different hashing methods.

The SAM file in Windows Server 2008 is located in which of the following locations?

A) c:\windows\system32\config\SAM
B) c:\windows\system32\drivers\SAM
C) c:\windows\system32\Boot\SAM
D) c:\windows\system32\Setup\SAM

2. John, a penetration tester, was asked for a document that defines the project, specifies goals, objectives, deadlines, the resources required, and the approach of the project. Which of the following includes all of these requirements?

A) Penetration testing project scope report
B) Penetration testing schedule plan
C) Penetration testing project plan
D) Penetration testing software project management plan

3. Attackers create secret accounts and gain illegal access to resources using backdoor while bypassing the authentication procedures. Creating a backdoor is a where an attacker obtains remote access to a computer on a network.

Which of the following techniques do attackers use to create backdoors to covertly gather critical information about a target machine?

A) Port scanning to determine what ports are open or in use on the target machine
B) Social engineering and spear phishing attacks to install malicious programs on the target machine
C) Internal network mapping to map the internal network of the target machine
D) Sniffing to monitor all the incoming and outgoing network traffic

4. Many security and compliance projects begin with a simple idea: assess the organization's risk, vulnerabilities, and breaches. Implementing an IT security risk assessment is critical to the overall security posture of any organization.
An effective security risk assessment can prevent breaches and reduce the impact of realized breaches.

What is the formula to calculate risk?

A) Risk = Loss x Exposure factor
B) Risk = Budget x Time
C) Risk = Threats x Attacks
D) Risk = Goodwill x Reputation

5. TCP/IP model is a framework for the Internet Protocol suite of computer network protocols that defines the communication in an IP-based network. It provides end-to-end connectivity specifying how data should be formatted, addressed, transmitted, routed and received at the destination. This functionality has been organized into four abstraction layers which are used to sort all related protocols according to the scope of networking involved.

Which of the following TCP/IP layers selects the best path through the network for packets to travel?

A) Application layer
B) Transport layer
C) Internet layer
D) Network Access layer

Solutions: