Free ECSS Exam Braindumps
EC-Council Certified Security Specialist (ECSS) Questions 155–159 (page: 31)

Updated On: 10-Feb-2026

Mark works as a Network Security Administrator for BlueWells Inc. The company has a Windowsbased network. Mark is giving a presentation on Network security threats to the newly recruited employees of the company. His presentation is about the External threats that the company recently faced in the past. Which of the following statements are true about external threats?
Each correct answer represents a complete solution. Choose three.

  1. These are the threats that originate from within the organization.
  2. These are the threats intended to flood a network with large volumes of access requests.
  3. These threats can be countered by implementing security controls on the perimeters of the network, such as firewalls, which limit user access to the Internet.
  4. These are the threats that originate from outside an organization in which the attacker attempts to gain unauthorized access.

Answer(s): B,C,D



In which of the following access control models can a user not grant permissions to other users to see a copy of an object marked as secret that he has received, unless they have the appropriate permissions?

  1. Role Based Access Control (RBAC)
  2. Mandatory Access Control (MAC)
  3. Access Control List (ACL)
  4. Discretionary Access Control (DAC)

Answer(s): B



Victor is a novice Ethical Hacker. He is learning the hacking process, i.e., the steps taken by malicious hackers to perform hacking. Which of the following steps is NOT included in the hacking process?

  1. gaining access
  2. Preparation
  3. Reconnaissance
  4. Scanning

Answer(s): B



You are a professional Computer Hacking forensic investigator. You have been called to collect the evidences of Buffer Overflows or Cookie snooping attack. Which of the following logs will you review to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

  1. Web server logs
  2. Event logs
  3. Program logs
  4. System logs

Answer(s): B,C,D



Rick, the Network Administrator of the Fimbry Hardware Inc., wants to design the initial test model for Internet Access. He wants to fulfill the following goals:

·No external traffic should be allowed into the network.
·Administrators should be able to restrict the websites which can be accessed by the internal users.

Which of the following technologies should he use to accomplish the above goals?
(Click the Exhibit button on the toolbar to see the case study.)

  1. Firewall
  2. Network Address Translator (NAT)
  3. Proxy Server
  4. Internet Connection Sharing (ICS)
  5. Routing and Remote Access Service (RRAS)

Answer(s): C



Viewing page 31 of 69
Viewing questions 151 - 155 out of 355 questions


Post your Comments and Discuss EC-Council ECSS exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!