QUESTION: 41

Which of the following policies helps secure data and protects the privacy of organizational information?

Special-Access Policy
Document retention Policy
Cryptography Policy
Personal Security Policy

Answer(s): C

You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using Idp.exe. What are you trying to accomplish here?

Poison the DNS records with false records
Enumerate MX and A records from DNS
Establish a remote connection to the Domain Controller
Enumerate domain user accounts and built-in groups

Answer(s): D

Reveal Solution Next Question

QUESTION: 43

An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?

Frame Injection Attack
LDAP Injection Attack
XPath Injection Attack
SOAP Injection Attack

Answer(s): D

Reference:

http://luizfirmino.blogspot.com/2011_09_01_archive.html

Reveal Solution Next Question

QUESTION: 44

To locate the firewall, SYN packet is crafted using Hping or any other packet crafter and sent to the firewall. If ICMP unreachable type 13 message (which is an admin prohibited packet) with a source IP address of the access control device is received, then it means which of the following type of firewall is in place?

Circuit level gateway
Stateful multilayer inspection firewall
Packet filter
Application level gateway

Answer(s): C

Reveal Solution Next Question

Free ECSAV8 Exam Braindumps (page: 12)

QUESTION: 41

QUESTION: 42

QUESTION: 43

Reference:

QUESTION: 44

ECSAV8 Discussions & Posts