ECSAv10 Exam Questions & Answers

In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc.

They first access the web application using a low privileged account and then escalate privileges to access protected resources.What attack has been carried out?

What is a good security method to prevent unauthorized users from "tailgating"?

You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitiveinformation about the company clients. You have rummaged through their trash and found very little information.

You do not want to set off any alarms on their network, so you plan on performing passivefoot printing against their Web servers.What tool should you use?

Identify the attack represented in the diagram below:

Internet Control Message Protocol (ICMP) messages occur in many situations, such as whenever a datagram cannot reach the destination or the gateway does not have the buffering capacity to forward a datagram.

Each ICMP message contains three fields: type, code, and checksum. Different types of Internet Control Message Protocols (ICMPs) are identified by a TYPE field.

If the destination is not reachable, which one of the following are generated?