Eccouncil ECSAv10 Exam - Topic 3 Question 6 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 6
Topic #: 3

You work as a penetration tester for Hammond Security Consultants. You are currently working on a contractfor the state government of Californi

a. Your next step is to initiate a DoS attack on their network. Why wouldyou want to initiate a DoS attack on a system you are testing?

AUse attack as a launching point to penetrate deeper into the network

BDemonstrate that no system can be protected against DoS attacks

CList weak points on their network

DShow outdated equipment so it can be replaced

Show Suggested Answer

Suggested Answer: C

by Antione at May 05, 2022, 03:59 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kristian

4 months ago

Using it as a launching point makes sense for deeper access.

upvoted 0 times

...

Norah

4 months ago

Gotta show outdated equipment, it's crucial for upgrades!

upvoted 0 times

...

Arleen

4 months ago

Wait, are we really saying no system can be protected? That sounds extreme.

upvoted 0 times

...

Verda

4 months ago

Totally agree, it's all about finding vulnerabilities!

upvoted 0 times

...

Delsie

5 months ago

DoS attacks can reveal weak points in the network.

upvoted 0 times

...

Dacia

5 months ago

I lean towards option D since showing outdated equipment can lead to better security investments, but I wonder if that’s the primary goal of a DoS attack in this context.

upvoted 0 times

...

Moira

5 months ago

I think option C makes sense because identifying weak points is crucial for improving security, but I also recall that DoS attacks can show how resilient a system is.

upvoted 0 times

...

Venita

5 months ago

I remember discussing how DoS attacks can reveal vulnerabilities, but I'm not sure if it's mainly about listing weak points or demonstrating outdated equipment.

upvoted 0 times

...

Cammy

5 months ago

I practiced a similar question, and I feel like option B is a bit misleading. It’s not that no system can be protected, but rather to highlight the importance of having defenses in place.

upvoted 0 times

...

Laquanda

5 months ago

TLS or DTLS seem like the most secure options here. I'll eliminate the other choices and focus on those two.

upvoted 0 times

...

Quiana

5 months ago

I'm a bit confused on this one. I know communication with stakeholders is important, but I'm not sure which theme specifically addresses that. I'll have to give it some more thought.

upvoted 0 times

...

Ngoc

5 months ago

I'm struggling here. Is this testing the detail of AML controls or the broader governance approach? These look so similar...

upvoted 0 times

...