Discuss EC-Council ECSAv10 Exam Topic 6 Question 19

Attackers create secret accounts and gain illegal access to resources using backdoor while bypassing the authentication procedures. Creating a backdoor is a where an attacker obtains remote access to a computer on a network.

Which of the following techniques do attackers use to create backdoors to covertly gather critical information about a target machine?

AInternal network mapping to map the internal network of the target machine

BPort scanning to determine what ports are open or in use on the target machine

CSniffing to monitor all the incoming and outgoing network traffic

DSocial engineering and spear phishing attacks to install malicious programs on the target machine

Suggested Answer: D

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Lindy 12 months ago

Wait, people still fall for spear phishing? That's wild!

Josephine 12 months ago

Sniffing is super sneaky, but does it really work all the time?

Alberta 12 months ago

I don't think social engineering is as effective as people say.

Claribel 1 year ago

Totally agree, port scanning is a classic method!

Kaycee 1 year ago

Backdoors are often created through port scanning.

Yuki 1 year ago

I’m leaning towards option D because it makes sense that attackers would use social engineering to install backdoors, but I could be wrong.

Robt 1 year ago

Sniffing seems like it could be a way to gather information, but I feel like it’s more about monitoring traffic than creating a backdoor.

Charlene 1 year ago

I remember practicing a question similar to this where port scanning was highlighted as a method to find vulnerabilities. That might be relevant here too.

Roselle 1 year ago

I think backdoors often involve social engineering, but I'm not entirely sure if that's the main technique used here.

Tyra 1 year ago

I'm pretty confident the answer is B, Canada. I remember learning that Canada has a different data privacy framework than the EU, so they haven't received that adequacy determination yet. Gotta love these tricky data protection questions!

Carylon 1 year ago

This seems like a straightforward Regulation S-P question. I'll focus on the key details - Joan is a customer, Jean is not, and the question is about GetErDone's privacy policy obligations.

Leota 1 year ago

I can't decide between A and D. I think they both seem essential, but I might be leaning towards A because user orientation feels more fundamental.

Marla 1 year ago

I'm a bit uncertain about the Asynchronous Queuing pattern. Did we learn enough about it to know if it really helps reduce lag in this scenario?

Leah 1 year ago

This seems like a straightforward question about IT governance. I'll focus on understanding the key drivers for change and assessing the current state of IT governance within the organization.

EC-Council ECSAv10 Exam - Topic 6 Question 19 Discussion