Free ECSAv10 Exam Braindumps
EC-Council Certified Security Analyst (ECSA) v10 : Penetration Testing Questions 85–89 (page: 19)

Updated On: 10-Feb-2026

Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?

  1. Special-Access Policy
  2. User Identification and Password Policy
  3. Personal Computer Acceptable Use Policy
  4. User-Account Policy

Answer(s): B



After attending a CEH security seminar, you make a list of changes you would like to perform on your network to increase its security. One of the first things you change is to switch the Restrict Anonymous setting from 0 to 1 on your servers. This, as you were told, would prevent anonymous users from establishing a null session on the server. Using User info tool mentioned at the seminar, you succeed in establishing a null session with one of the servers. Why is that?

  1. Restrict Anonymous must be set to "2" for complete security
  2. Restrict Anonymous must be set to "3" for complete security
  3. There is no way to always prevent an anonymous null session from establishing
  4. Restrict Anonymous must be set to "10" for complete security

Answer(s): A



You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the Internet. What search string will you use to locate them?

  1. intitle:"exchange server"
  2. outlook:"search"
  3. locate:"logon page"
  4. allinurl:"exchange/logon.asp"

Answer(s): D



Information gathering is performed to:
i) Collect basic information about the target company and its network ii) Determine the operating system used, platforms running, web server versions, etc.
iii) Find vulnerabilities and exploits



Which of the following pen testing tests yields information about a company's technology infrastructure?

  1. Searching for web page posting patterns
  2. Analyzing the link popularity of the company's website
  3. Searching for trade association directories
  4. Searching for a company's job postings

Answer(s): D



Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.



What does a vulnerability assessment identify?

  1. Disgruntled employees
  2. Weaknesses that could be exploited
  3. Physical security breaches
  4. Organizational structure

Answer(s): B



Viewing page 19 of 42
Viewing questions 91 - 95 out of 203 questions


Post your Comments and Discuss EC-Council ECSAv10 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!