Free ECSAV8 Exam Braindumps
EC-Council Certified Security Analyst (ECSA) Questions 61–65 (page: 14)

Transmission control protocol accepts data from a data stream, divides it into chunks, and adds a TCP header creating a TCP segment.
The TCP header is the first 24 bytes of a TCP segment that contains the parameters and state of an end-to-end TCP socket. It is used to track the state of communication between two TCP endpoints.
For a connection to be established or initialized, the two hosts must synchronize. The synchronization requires each side to send its own initial sequence number and to receive a confirmation of exchange in an acknowledgment (ACK) from the other side.

The below diagram shows the TCP Header format:


How many bits is a acknowledgement number?

Which one of the following commands is used to search one of more files for a specific pattern and it helps in organizing the firewall log files?

A penetration test consists of three phases: pre-attack phase, attack phase, and post-attack phase.

Active reconnaissance which includes activities such as network mapping, web profiling, and perimeter mapping is a part which phase(s)?

Which Wireshark filter displays all the packets where the IP address of the source host is 10.0.0.7?

A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.


Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?