Discuss EC-Council ECSAv10 Exam Topic 3 Question 6

You work as a penetration tester for Hammond Security Consultants. You are currently working on a contractfor the state government of Californi

a. Your next step is to initiate a DoS attack on their network. Why wouldyou want to initiate a DoS attack on a system you are testing?

AUse attack as a launching point to penetrate deeper into the network

BDemonstrate that no system can be protected against DoS attacks

CList weak points on their network

DShow outdated equipment so it can be replaced

Suggested Answer: C

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Kristian 12 months ago

Using it as a launching point makes sense for deeper access.

Norah 12 months ago

Gotta show outdated equipment, it's crucial for upgrades!

Arleen 12 months ago

Wait, are we really saying no system can be protected? That sounds extreme.

Verda 1 year ago

Totally agree, it's all about finding vulnerabilities!

Delsie 1 year ago

DoS attacks can reveal weak points in the network.

Dacia 1 year ago

I lean towards option D since showing outdated equipment can lead to better security investments, but I wonder if that’s the primary goal of a DoS attack in this context.

Moira 1 year ago

I think option C makes sense because identifying weak points is crucial for improving security, but I also recall that DoS attacks can show how resilient a system is.

Venita 1 year ago

I remember discussing how DoS attacks can reveal vulnerabilities, but I'm not sure if it's mainly about listing weak points or demonstrating outdated equipment.

Cammy 1 year ago

I practiced a similar question, and I feel like option B is a bit misleading. It’s not that no system can be protected, but rather to highlight the importance of having defenses in place.

Laquanda 1 year ago

TLS or DTLS seem like the most secure options here. I'll eliminate the other choices and focus on those two.

Quiana 1 year ago

I'm a bit confused on this one. I know communication with stakeholders is important, but I'm not sure which theme specifically addresses that. I'll have to give it some more thought.

Ngoc 1 year ago

I'm struggling here. Is this testing the detail of AML controls or the broader governance approach? These look so similar...

EC-Council ECSAv10 Exam - Topic 3 Question 6 Discussion