Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

ECSS EC-Council Certified Security Specialist (ECSSv10) Exam

  • Eccouncil
  • 5 free sample questions

About this exam

ECSS is the Eccouncil exam EC-Council Certified Security Specialist (ECSSv10) Exam. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
ECSS
Vendor
Eccouncil
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for ECSS.

Question 1

Kevin, a security team member, was instructed to share a policy document with the employees. As it was supposed to be shared within the network, he used a simple algorithm to encrypt the document that just rearranges the same characters to produce the ciphertext.

Identify the type of cipher employed by Kevin in the above scenario.

  1. Option A:

    Transposition cipher

  2. Option B:

    Stream cipher

  3. Option C:

    Block cipher

  4. Option D:

    Substitution cipher

Show answer and explanation

Correct answer: A

A  transposition cipher  rearranges characters or bits of plaintext to produce ciphertext. In Kevin’s scenario, he used an algorithm that rearranges the same characters to create the ciphertext. This aligns with the characteristics of a transposition cipher, where the order of characters is altered without changing their identity.

References :  1 2

https://www.newsoftwares.net/blog/the-transposition-cipher-rearranging-data-for-enhanced-encryption/

Question 2

Sandra, a hacker, targeted Johana, a software professional, to steal her banking details. She started sending frequent, random pop-up messages

with malicious links to her social media page. Johana accidentally clicked on a link, causing a malicious program to get installed in her system.

Subsequently, when Johana attempted to access her banking website, the URL directed her to a malicious website controlled by Sandra.

Johana entered her banking credentials on the fake website, which Sandra then captured.

Identify the type of attack performed by Sandra on Johana.

  1. Option A:

    Shoulder surfing

  2. Option B:

    Pharming

  3. Option C:

    Tailgating

  4. Option D:

    Dumpster diving

Show answer and explanation

Correct answer: B

The attack performed by Sandra on Johana is known as  pharming . Pharming is a type of social engineering cyberattack where criminals redirect internet users trying to reach a specific website to a different, fake site. These “spoofed” sites aim to capture a victim’s personally identifiable information (PII) and login credentials, such as passwords, social security numbers, and account numbers.  In Johana’s case, Sandra manipulated the URL to direct her to a malicious website where she entered her banking credentials, which Sandra then captured 1 .

References :

    EC-Council Certified Security Specialist (E|CSS) documents and study guide.

    EC-Council Certified Security Specialist (E|CSS) course materials.

See all 5 free sample questions