Free EC-COUNCIL ECSAv8 Exam Dumps Questions & Answers


Exam Code/Number:	ECSAv8Join the discussion
Exam Name:	EC-Council Certified Security Analyst (ECSA)
Certification:	EC-COUNCIL
Free Question Number:	150
Publish Date:	Jun 02, 2026
# of views:	2927
Rating 100%

Page: 1 / 30
Total 150 questions

Question 1

Which of the following external pen testing tests reveals information on price, usernames and passwords, sessions, URL characters, special instructors, encryption used, and web page behaviors?

A.Check for Directory Consistency and Page Naming Syntax of the Web Pages
B.Examine Hidden Fields
C.Examine E-commerce and Payment Gateways Handled by the Web Server
D.Examine Server Side Includes (SSI)

Question 2

Which of the following policies states that the relevant application owner must authorize requests for additional access to specific business applications in writing to the IT Department/resource?

A.Personal Computer Acceptable Use Policy
B.User Identification and Password Policy
C.User-Account Policy
D.Special-Access Policy

Question 3

James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

A.Trinoo
B.Smurf
C.SYN flood
D.Fraggle

Question 4

Attackers create secret accounts and gain illegal access to resources using backdoor while bypassing the authentication procedures. Creating a backdoor is a where an attacker obtains remote access to a computer on a network.

Which of the following techniques do attackers use to create backdoors to covertly gather critical information about a target machine?

A.Sniffing to monitor all the incoming and outgoing network traffic
B.Port scanning to determine what ports are open or in use on the target machine
C.Social engineering and spear phishing attacks to install malicious programs on the target machine
D.Internal network mapping to map the internal network of the target machine

Question 5

During the process of fingerprinting a web application environment, what do you need to do in order to analyze HTTP and HTTPS request headers and the HTML source code?

A.Check the HTTP and HTML Processing by the Browser
B.Perform Web Spidering
C.Perform Banner Grabbing
D.Examine Source of the Available Pages