ECSS

Review 50 ECSS practice questions with answer explanations and community insights.

Question 1

A security strategy in which several protection layers are placed throughout an information system helps to prevent direct attacks against an information system and data because a break in one layer only leads the attacker to the next layer. What is this security strategy called?

  1. Network Security Zoning
  2. Defense in Depth
  3. Multi-aspect Model
  4. Threat Modeling

Question 2

Which of the following attack allows attackers to bypass client-ID security mechanisms and gain access privileges, and then inject malicious scripts into specific web pages?

  1. Cross-Site Scripting (XSS)
  2. Buffer Overflow
  3. Denial-of-Service
  4. Parameter/Form Tampering

Question 3

The security of the network can be increased in a number of ways, for instance, by installing a special kind of web server and through packet filtering. What type of server is implemented as an intermediary server between a client and a server to act as a shield and protect and hide the computer from the outside network?

  1. Application Server
  2. Telnet Server
  3. Web Server
  4. Proxy Server

Question 4

An algorithm which is a part of the U.S. government's long-term project to develop a set of standards for publicly available cryptography as authorized by the Computer Security Act of 1987 accepts a message of 264 bits in length and a 160-bit message output digest is produced to complicate text searching. Which of the following algorithms is a family of two similar hash functions, with different block sizes, and uses 32-bit words and 64-bit words?

  1. SHA-2
  2. SHA-0
  3. SHA-1
  4. SHA-3

Question 5

Kelly is taking backups of the organization’s data. Currently, he is taking backups of only those files which are created or modified after the last backup. What type of backup is Kelly using?

  1. Differential Backup
  2. Full Backup
  3. Normal Backup
  4. Incremental Backup
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.