QUESTION: 1

What is the difference between penetration testing and vulnerability testing?

Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of `in-depth ethical hacking'
Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities
Vulnerability testing is more expensive than penetration testing
Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans

Answer(s): A

Hackers today have an ever-increasing list of weaknesses in the web application structure at their disposal, which they can exploit to accomplish a wide variety of malicious tasks.

New flaws in web application security measures are constantly being researched, both by hackers and by security professionals. Most of these flaws affect all dynamic web applications whilst others are dependent on specific application technologies.
In both cases, one may observe how the evolution and refinement of web technologies also brings about new exploits which compromise sensitive databases, provide access to theoretically secure networks, and pose a threat to the daily operation of online businesses.
What is the biggest threat to Web 2.0 technologies?

SQL Injection Attacks
Service Level Configuration Attacks
Inside Attacks
URL Tampering Attacks

Answer(s): A

Reveal Solution Next Question

QUESTION: 2

Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

Filtered
Stealth
Closed
Open

Answer(s): D

Reveal Solution Next Question

QUESTION: 3

Why is a legal agreement important to have before launching a penetration test?

Guarantees your consultant fees
Allows you to perform a penetration test without the knowledge and consent of the organization's upper management
It establishes the legality of the penetration test by documenting the scope of the project and the consent of the company.
It is important to ensure that the target organization has implemented mandatory security policies

Answer(s): C

Reveal Solution Next Question

Free ECSAv10 Exam Braindumps (page: 1)

Pass your EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing exam with these free Actual Questions and Answers

QUESTION: 1

QUESTION: 2

QUESTION: 2

QUESTION: 3