Free ECSAV8 Exam Braindumps
EC-Council Certified Security Analyst (ECSA) Questions 66–70 (page: 15)

Updated On: 10-Feb-2026

Security auditors determine the use of WAPs on their networks with Nessus vulnerability scanner which identifies the commonly used WAPs. One of the plug-ins that the Nessus Vulnerability Scanner uses is ID #11026 and is named “Access Point Detection”. This plug-in uses four techniques to identify the presence of a WAP. Which one of the following techniques is mostly used for uploading new firmware images while upgrading the WAP device?

  1. NMAP TCP/IP fingerprinting
  2. HTTP fingerprinting
  3. FTP fingerprinting
  4. SNMP fingerprinting

Answer(s): C



In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?

  1. IPS evasion technique
  2. IDS evasion technique
  3. UDP evasion technique
  4. TTL evasion technique

Answer(s): D


Reference:

http://is.muni.cz/th/172999/fi_m/MT_Bukac.pdf (page 24)



In the TCP/IP model, the transport layer is responsible for reliability and flow control from source to the destination. TCP provides the mechanism for flow control by allowing the sending and receiving hosts to communicate. A flow control mechanism avoids the problem with a transmitting host overflowing the buffers in the receiving host.

Which of the following flow control mechanism guarantees reliable delivery of data?

  1. Sliding Windows
  2. Windowing
  3. Positive Acknowledgment with Retransmission (PAR)
  4. Synchronization

Answer(s): C


Reference:

http://condor.depaul.edu/jkristof/technotes/tcp.html (1.1.3 Reliability)



What information can be collected by dumpster diving?

  1. Sensitive documents
  2. Email messages
  3. Customer contact information
  4. All the above

Answer(s): A


Reference:

http://www.spamlaws.com/dumpster-diving.html



Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

  1. Event Log Tracker
  2. Sawmill
  3. Syslog Manager
  4. Event Log Explorer

Answer(s): B



Viewing page 15 of 41
Viewing questions 71 - 75 out of 200 questions


Post your Comments and Discuss EC-Council ECSAV8 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!