Free ECSAV8 Exam Braindumps
EC-Council Certified Security Analyst (ECSA) Questions 51–55 (page: 12)

Updated On: 10-Feb-2026

DNS information records provide important data about:

  1. Phone and Fax Numbers
  2. Location and Type of Servers
  3. Agents Providing Service to Company Staff
  4. New Customer

Answer(s): B



A framework is a fundamental structure used to support and resolve complex issues. The framework that delivers an efficient set of technologies in order to develop applications which are more secure in using Internet and Intranet is:

  1. Microsoft Internet Security Framework
  2. Information System Security Assessment Framework (ISSAF)
  3. Bell Labs Network Security Framework
  4. The IBM Security Framework

Answer(s): A



Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

  1. USA Patriot Act 2001
  2. Sarbanes-Oxley 2002
  3. Gramm-Leach-Bliley Act (GLBA)
  4. California SB 1386

Answer(s): A


Reference:

http://www.sec.gov/rules/final/33-8238.htm (see background)



Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

  1. Sunbelt Network Security Inspector (SNSI)
  2. CORE Impact
  3. Canvas
  4. Microsoft Baseline Security Analyzer (MBSA)

Answer(s): C



Application security assessment is one of the activity that a pen tester performs in the attack phase. It is designed to identify and assess threats to the organization through bespoke, proprietary applications or systems. It checks the application so that a malicious user cannot access, modify, or destroy data or services within the system.

Identify the type of application security assessment which analyzes the application-based code to confirm that it does not contain any sensitive information that an attacker might use to exploit an application.

  1. Web Penetration Testing
  2. Functionality Testing
  3. Authorization Testing
  4. Source Code Review

Answer(s): D



Viewing page 12 of 41
Viewing questions 56 - 60 out of 200 questions


Post your Comments and Discuss EC-Council ECSAV8 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!