QUESTION: 60

Which of the following statements is true about Multi-Layer Intrusion Detection Systems (mIDSs)?

Decreases consumed employee time and increases system uptime
Increases detection and reaction time
Increases response time
Both Decreases consumed employee time and increases system uptime and Increases response time

Answer(s): A

An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet. The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker.

During external penetration testing, which of the following scanning techniques allow you to determine a port's state without making a full connection to the host?

XMAS Scan
SYN scan
FIN Scan
NULL Scan

Answer(s): B

Reveal Solution Next Question

QUESTION: 62

From where can clues about the underlying application environment can be collected?

From source code
From file types and directories
From executable file
From the extension of the file

Answer(s): D

Reveal Solution Next Question

QUESTION: 63

Which of the following is NOT related to the Internal Security Assessment penetration testing strategy?

Testing to provide a more complete view of site security
Testing focused on the servers, infrastructure, and the underlying software, including the target
Testing including tiers and DMZs within the environment, the corporate network, or partner company connections
Testing performed from a number of network access points representing each logical and physical segment

Answer(s): B

Reveal Solution Next Question

Free ECSAv10 Exam Braindumps (page: 16)

QUESTION: 60

QUESTION: 61

QUESTION: 62

QUESTION: 63