Free EC0-479 Exam Braindumps
EC0-479 EC-Council Certified Security Analyst (ECSA) Questions 21–25 (page: 6)

Updated On: 10-Feb-2026

What is the target host IP in the following command?

C:\> firewalk-F 80 10.10.150.1 172.16.28.95 -p UDP

  1. 172.16.28.95
  2. 10.10.150.1
  3. Firewalk does not scan target hosts
  4. This command is using FIN packets, which cannot scan target hosts

Answer(s): A



George is a senior security analyst working for a state agency in Florida. His state's congress just passed a bill mandating every state agency to undergo a security audit annually. After learning what will be required, George needs to implement an IDS as soon as possible before the first audit occurs. The state bill requires that an IDS with a "timE. based induction machine" be used.
What IDS feature must George implement to meet this requirement?

  1. SignaturE. based anomaly detection
  2. Pattern matching
  3. Real-time anomaly detection
  4. Statistical-based anomaly detection

Answer(s): C



John is using Firewalkto test the security of his Cisco PIX firewall. He is also utilizing a sniffer located on a subnet that resides deep inside his network. After analyzing the sniffer log files, he does not see any of the traffic produced by Firewalk.
Why is that?

  1. Firewalk cannot pass through Cisco firewalls
  2. Firewalk sets all packets with a TTL of zero
  3. Firewalk cannot be detected by network sniffers
  4. Firewalk sets all packets with a TTL of one

Answer(s): D



After undergoing an external IT audit, George realizes his network is vulnerable to DDoS attacks.
What countermeasures could he take to prevent DDoS attacks?

  1. Enable direct broadcasts
  2. Disable direct broadcasts
  3. Disable BGP
  4. Enable BGP

Answer(s): B



George is performing security analysis for Hammond and Sons LLC. He is testing security vulnerabilities of their wireless network. He plans on remaining as "stealthy" as possible during the scan.
Why would a scanner like Nessus is not recommended in this situation?

  1. Nessus is too loud
  2. Nessus cannot perform wireless testing
  3. Nessus is not a network scanner
  4. There are no ways of performing a "stealthy" wireless scan

Answer(s): A



Viewing page 6 of 21
Viewing questions 26 - 30 out of 100 questions


Post your Comments and Discuss EC-Council EC0-479 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!