Free ECSAv10: EC-Council Certified Security Analyst Exam Questions and Answers

Last updated: September 7, 2026

Exam code

ECSAv10

Provider

ECCouncil

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   What is the difference between penetration testing and vulnerability testing?

   • A. Vulnerability testing is more expensive than penetration testing
   • B. Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities
   • C. Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans
   • D. Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the
   Reveal Answer

2. Question #2

   Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels. A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack. Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

   • A. Passive Assessment
   • B. External Assessment
   • C. Application Assessment
   • D. Host-based Assessment
   Reveal Answer

3. Question #3

   You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

   • A. Use attack as a launching point to penetrate deeper into the network
   • B. Demonstrate that no system can be protected against DoS attacks
   • C. List weak points on their network
   • D. Show outdated equipment so it can be replaced
   Reveal Answer

4. Question #4

   An automated electronic mail message from a mail system which indicates that the user does not exist on that server is called as?

   • A. SMTP Mail Bouncing
   • B. SMTP Queue Bouncing
   • C. SMTP Message Bouncing
   • D. SMTP Server Bouncing
   Reveal Answer

5. Question #5

   The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

   • A. California SB 1386a
   • B. Sarbanes-Oxley 2002
   • C. HIPAA
   • D. Gramm-Leach-Bliley Act
   Reveal Answer

6. Question #6

   Which of the following documents helps in creating a confidential relationship between the pen tester and client to protect critical and confidential information or trade secrets?

   • A. Liability Insurance
   • B. Rules of Behavior Agreement
   • C. Non-Disclosure Agreement
   • D. Penetration Testing Agreement
   Reveal Answer

7. Question #7

   In Linux, what is the smallest possible shellcode?

   • A. 80 bytes
   • B. 8 bytes
   • C. 800 bytes
   • D. 24 bytes
   Reveal Answer

8. Question #8

   Which type of vulnerability assessment tool provides security to the IT system by testing for vulnerabilities in the applications and operation system?

   • A. Location/Data Examined Tools
   • B. Scope Assessment Tools
   • C. Active/Passive Tools
   • D. Application-layer Vulnerability Assessment Tools
   Reveal Answer

9. Question #9

   You are assisting a Department of Defense contract company to become compliant with the stringent security policies set by the DoD. One such strict rule is that firewalls must only allow incoming connections that were first initiated by internal computers. What type of firewall must you implement to abide by this policy?

   • A. Statefull firewall
   • B. Application-level proxy firewall
   • C. Circuit-level proxy firewall
   • D. Packet filtering firewall
   Reveal Answer

10. Question #10

    You are the security analyst working for a private company out of France. Your current assignment is to obtain credit card information from a Swiss bank owned by that company. After initial reconnaissance, you discover that the bank security defenses are very strong and would take too long to penetrate. You decide to get the information by monitoring the traffic between the bank and one of its subsidiaries in London. After monitoring some of the traffic, you see a lot of FTP packets traveling back and forth. You want to sniff the traffic and extract usernames and passwords. What tool could you use to get this information?

    • A. Ettercap
    • B. Snort
    • C. Airsnort
    • D. RaidSniff
    Reveal Answer