ECSAv10

ECSAv10 practice questions, page 5 of 6, with answer review and explanations.

Question 21

Which of the following roles of Microsoft Windows Active Directory refers to the ability of an active directory to transfer roles to any domain controller (DC) in the enterprise?

  1. Master Browser (MB)
  2. Global Catalog (GC)
  3. Flexible Single Master Operation (FSMO)
  4. Rights Management Services (RMS)

Question 22

A user unknowingly installed a fake malicious banking app in his Android mobile. This app includes a configuration file that consists of phone numbers of the bank. When the user makes a call to the bank, he is automatically redirected to the number being used by the attacker. The attacker impersonates as a banking official. Also, the app allows the attacker to call the user, then the app displays fake caller ID on the user's mobile resembling call from a legitimate bank. Identify the attack being performed on the Android mobile user?

  1. Tailgating
  2. SMiShing
  3. Vishing
  4. Eavesdropping

Question 23

How does OS Fingerprinting help you as a pen tester?

  1. It defines exactly what software the target has installed
  2. It doesn't depend on the patches that have been applied to fix existing security holes
  3. It opens a security-delayed window based on the port being scanned
  4. It helps to research vulnerabilities that you can use to exploit on a target system

Question 24

While scanning a server, you found rpc, nfs and mountd services running on it. During the investigation, you were told that NFS Shares were mentioned in the / etc/exports list of the NFS server. Based on this information, which among the following commands would you issue to view the NFS Shares running on the server?

  1. showmount
  2. nfsenum
  3. mount
  4. rpcinfo

Question 25

SecGlobal Corporation hired Michael, a penetration tester. Management asked Michael to perform cloud penetration testing on the company's cloud infrastructure. As a part of his task, he started checking all the agreements with cloud service provider and came to a conclusion that it is not possible to perform penetration testing on the cloud services that are being used by the organization due to the level of responsibilities between company and the Cloud Service Provider (CSP). Identify the type of cloud service deployed by the organization?

  1. Platform as a service (PaaS)
  2. Software as a service (SaaS)
  3. Anything as a service (XaaS)
  4. Infrastructure as a service (IaaS)