Free EC-COUNCIL ECSAv10 Exam Dumps Questions & Answers

Which of the following defines the details of services to be provided for the client's organization and the list of services required for performing the test in the organization?

• A.  Requirement list
• B.  Quotation
• C.  Report
• D.  Draft

Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florida. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa.
She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information. After hearing the name of the CEO, the receptionist gave Julia all the information she asked for.
What principal of social engineering did Julia use?

• A.  Social Validation
• B.  Scarcity
• C.  Reciprocation
• D.  Friendship/Liking

Which of the following is not a characteristic of a firewall?

• A.  Examines all traffic routed between the two networks to see if it meets certain criteria
• B.  Filters only inbound traffic but not outbound traffic
• C.  Manages public access to private networked resources
• D.  Routes packets between the networks

Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

• A.  Sarbanes-Oxley 2002
• B.  California SB 1386
• C.  USA Patriot Act 2001
• D.  Gramm-Leach-Bliley Act (GLBA)

Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.

What does a vulnerability assessment identify?

• A.  Disgruntled employees
• B.  Weaknesses that could be exploited
• C.  Organizational structure
• D.  Physical security breaches