ECSS 試験問題を無料オンラインアクセス

Paola, a professional hacker, was hired to break into the target organization's network and extract sensitive data. In this process, Paola found that the target organization has purchased new hardware. She accessed the new hardware while it was in transit and tampered with the hardware to make it vulnerable to attacks.
Identify the class of attack Paola has performed on the target organization.

• A.Active attack
• B.Passive attack
• C.insider attack
• D.Distribution attack

Sam is a hacker who decided to damage the reputation of an organization. He started collecting information about the organization using social engineering techniques. Sam aims to gather critical information such as admin passwords and OS versions to plan for an attack.
Identify the target employee in the organization from whom Sam can gather the required information.

• A.System administrators
• B.Helpdesk
• C.Customer support learn
• D.Third-party service provider

Kane, an investigation specialist, was appointed to investigate an incident in an organization's network. In this process, Kane executed a command and identified that a network interface is running in the promiscuous mode and is allowing all incoming packets without any restriction.
In the above scenario, which of the following commands did Kane use to check whether the network interface is set to the promiscuous mode?

• A.ipconfig < interface name >
• B.ifconfig < interface name >
• C.nmap -sT localhost
• D.netstat -i

Stella, a mobile user, often ignores the messages received from the manufacturer for updates. One day, she found that files in her device are being replaced, she immediately rushed to the nearest service center for inquiry. They tested the device and identified vulnerabilities in it as it ran with an obsolete OS version.
Identify the mobile device security risk raised on Stella's device in the above scenario.

• A.Network-based risk
• B.System-based risk
• C.Application-based risk
• D.Physical security risks

Stephen, an attacker, decided to gain access to an organization's server. He identified a user with access to the remote server. He used sniffing programs to gain the user's credentials and captured the authentication tokens transmitted by the user. Then, he transmitted the captured tokens back tothe server to gain unauthorized access.
Identify the technique used by Stephen to gain unauthorized access to the target server.

• A.Replay attack
• B.SQL injection
• C.Brute-force attack
• D.Internal monologue