EC-COUNCIL ECSS 問題集

質問 1：
Stella, a mobile user, often ignores the messages received from the manufacturer for updates. One day, she found that files in her device are being replaced, she immediately rushed to the nearest service center for inquiry. They tested the device and identified vulnerabilities in it as it ran with an obsolete OS version.
Identify the mobile device security risk raised on Stella's device in the above scenario.
A. Physical security risks
B. System-based risk
C. Network-based risk
D. Application-based risk
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Peter, an attacker aiming to disrupt organizational services, targeted a configuration protocol that issues IP addresses to host systems. To disrupt the issuance of IP addresses. Peter flooded the target server with spoofed MAC addresses so that valid users cannot receive IP addresses to access the network.
Identify the type of attack Peter has performed in the above scenario.
A. DHCP starvation attack
B. Session hijacking
C. Ping-of-death attack
D. ARP spoofing
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Clark, a digital forensic expert, was assigned to investigate a malicious activity performed on an organization's network. The organization provided Clark with all the information related to the incident. In this process, he assessed the impact of the incident on the organization, reasons for and source of the incident, steps required to tackle the incident, investigating team required to handle the case, investigative procedures, and possible outcome of the forensic process.
Identify the type of analysis performed by Clark in the above scenario.
A. Log analysis
B. Data analysis
C. Traffic analysis
D. Case analysis
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Clark, a security professional, was instructed to monitor and continue the backup functions without interrupting the system or application services. In this process, Clark implemented a backup mechanism that dynamically backups the data even If the system or application resources are being used.
Which of the following types of backup mechanisms has Clark implemented in the above scenario?
A. Offline backup
B. Cold backup
C. Hot backup
D. Full backup
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Alana, an employee in an organization, took a short break after spending exhausting hours on a project. For relaxation, she went to a cafeteria with her laptop, where she connected to the public Internet. While browsing the web, she received a project modifications file on her mail and reverted with another file that contained the required changes.
Which of the following BYOD risks has emerged from the above scenario?
A. Mixing personal and private data
B. Improper disposing of devices
C. Sharing confidential data on unsecured networks
D. Endpoint security issue
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An organization decided to strengthen the security of its network by studying and analyzing the behavior of attackers. For this purpose. Steven, a security analyst, was instructed to deploy a device to bait attackers.
Steven selected a solution that appears to contain very useful information to lure attackers and find their locationsand techniques.
Identify the type of device deployed by Steven in the above scenario.
A. Honeypot
B. Firewall
C. Intrusion detection system
D. Router
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Below are the elements included in the order of volatility for a typical computing system as per the RFC 3227 guidelines for evidence collection and archiving.
l.Archival media
2.Remote logging and monitoring data related to the target system
3.Routing table, process table, kernel statistics, and memory
4.Registers and processor cache
5-Physical configuration and network topology
6.Disk or other storage media
7.Temporary system files
Identify the correct sequence of order of volatility from the most to least volatile for a typical system.
A. 4.>3 >7>6.>2-.>5- >l
B. 4 >3 >7->l >2 ->5->6
C. 2->1->4-->3-->6-->5->7
D. 7->5- >4->3 ->2 >6 >1
正解：A
解説: (Topexam メンバーにのみ表示されます)