We're so confident of our products that we provide no hassle product exchange.
EC-COUNCIL ECSAv8 Exam Overview:
| Certification Vendor: | EC-Council |
| Exam Name: | EC-Council Certified Security Analyst (ECSA) v8 |
| Exam Number: | ECSAv8 |
| Real Exam Qty: | 150–200 |
| Exam Duration: | 240 minutes |
| Related Certifications: | Certified Ethical Hacker (CEH) Licensed Penetration Tester (LPT) |
| Certificate Validity Period: | 3 years (certification validity period typical for EC-Council) |
| Passing Score: | 70% (typical; may vary by form) |
| Exam Price: | Check official EC-Council pricing (varies by region) |
| Exam Format: | Multiple Choice |
| Available Languages: | English |
| Sample Questions: | EC-COUNCIL ECSAv8 Sample Questions |
| Exam Way: | Onsite/Online proctored through EC-Council testing partners |
| Pre Condition: | Recommended: CEH certification or equivalent experience; official EC-Council training or eligibility application if no training |
| Official Syllabus URL: | https://www.eccouncil.org/ |
EC-COUNCIL ECSAv8 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Penetration Testing and Methodologies | - Open-Source Intelligence (OSINT) Methodology - Wireless Penetration Testing - Social Engineering Testing Methodology - Perimeter Devices Penetration Testing - Network Penetration Testing – External - Report Writing and Post-Testing Actions - Penetration Testing Scoping and Engagement - Network Penetration Testing – Internal - Introduction to Penetration Testing Methodologies - Database Penetration Testing - Cloud Penetration Testing - Web Application Penetration Testing |
EC-COUNCIL EC-Council Certified Security Analyst (ECSA) Sample Questions:
1. In Linux, /etc/shadow file stores the real password in encrypted format for user's account with added properties associated with the user's password.
In the example of a /etc/shadow file below, what does the bold letter string indicate? Vivek: $1$fnffc$GteyHdicpGOfffXX40w#5:13064:0:99999:7
A) Last password changed
B) Number of days the user is warned before the expiration date
C) Minimum number of days required between password changes
D) Maximum number of days the password is valid
2. During external penetration testing, which of the following techniques uses tools like Nmap to predict the sequence numbers generated by the targeted server and use this information to perform session hijacking techniques?
A) TCP State Number Prediction
B) IPID Sequence Number Prediction
C) IPID State Number Prediction
D) TCP Sequence Number Prediction
3. Which of the following scan option is able to identify the SSL services?
A) -sU
B) -sV
C) -sS
D) -sT
4. Which of the following policy forbids everything with strict restrictions on all usage of the company systems and network?
A) Prudent Policy
B) Promiscuous Policy
C) Information-Protection Policy
D) Paranoid Policy
5. Which of the following is an application alert returned by a web application that helps an attacker guess a valid username?
A) Account username was not found
B) Incorrect password
C) Invalid username or password
D) Username or password incorrect
Solutions:
| Question # 1 Answer: C | Question # 2 Answer: D | Question # 3 Answer: B | Question # 4 Answer: D | Question # 5 Answer: B |
By Ellen
