QUESTION: 25

Which of the following is an application alert returned by a web application that helps an attacker guess a valid username?

Invalid username or password
Account username was not found
Incorrect password
Username or password incorrect

Answer(s): C

Reveal Solution Next Question

QUESTION: 26

Which of the following pen testing reports provides detailed information about all the tasks performed during penetration testing?

Client-Side Test Report
Activity Report
Host Report
Vulnerability Report

Answer(s): A

Reveal Solution Next Question

The IP protocol was designed for use on a wide variety of transmission links. Although the maximum length of an IP datagram is 64K, most transmission links enforce a smaller maximum packet length limit, called a MTU.

The value of the MTU depends on the type of the transmission link. The design of IP accommodates MTU differences by allowing routers to fragment IP datagrams as necessary. The receiving station is responsible for reassembling the fragments back into the original full size IP datagram.
IP fragmentation involves breaking a datagram into a number of pieces that can be reassembled later. The IP source, destination, identification, total length, and fragment offset fields in the IP header, are used for IP fragmentation and reassembly.

The fragment offset is 13 bits and indicates where a fragment belongs in the original IP datagram. This value is a:

Multiple of four bytes
Multiple of two bytes
Multiple of eight bytes
Multiple of six bytes

Answer(s): C

Reference:

http://www.freesoft.org/CIE/Course/Section3/7.htm (fragment offset: 13 bits)

Reveal Solution Next Question

QUESTION: 28

Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

Service-based Assessment Solutions
Product-based Assessment Solutions
Tree-based Assessment
Inference-based Assessment

Answer(s): C

Reference:

http://www.netsense.info/downloads/security_wp_mva.pdf (page 12, tree-based assessment technology, second para)

Reveal Solution Next Question

Free ECSAV8 Exam Braindumps (page: 8)

QUESTION: 25

QUESTION: 26

QUESTION: 27

Reference:

QUESTION: 28

Reference:

ECSAV8 Discussions & Posts