You have captured a password hash and suspect the password is a common word followed by a number. Which password cracking technique is most efficient for this scenario?

Dictionary attack with rule-based mutations

Pure brute-force attack over all possible characters

A security team must choose a vulnerability scanning solution for a mixed environment of on-premises servers and cloud workloads. The team has a strict budget and cannot afford commercial licenses. They also need to integrate scan results into their existing SIEM for automated alerting. Which approach best meets these constraints?

Use Nmap scripts to scan for vulnerabilities and send output to the SIEM

Use Nessus Professional and manually upload reports to the SIEM

Deploy OpenVAS on-premises and configure it to export reports to the SIEM

Use a cloud-based scanner that offers a free tier and integrates with SIEM

What is the primary purpose of using Nmap in a network security assessment?

To exploit vulnerabilities in web applications

To discover live hosts, open ports, and running services on a network

To crack passwords of network devices

To intercept and modify network traffic

What is the primary purpose of the Aircrack-ng suite?

To perform port scans on wired networks

To scan web applications for vulnerabilities

To assess the security of wireless networks

To enumerate Windows user accounts

EC-CouncilCertified Cybersecurity Technician

Domain 3Objective 1

Network Security Assessment Techniques and Tools CCT Practice Questions (Page 7)

Part of the Security Assessment and Application Security domain, which makes up ~9% of our current practice bank.

49questions here

10free pages

12concepts

Questions 31–35

31foundation · easy
Which phase of a network security assessment involves gathering information about the target without actively engaging with the systems?
Select an answer first
32application · medium
You have captured a password hash and suspect the password is a common word followed by a number. Which password cracking technique is most efficient for this scenario?
Select an answer first
33expert · hard
A security team must choose a vulnerability scanning solution for a mixed environment of on-premises servers and cloud workloads. The team has a strict budget and cannot afford commercial licenses. They also need to integrate scan results into their existing SIEM for automated alerting. Which approach best meets these constraints?
Select an answer first
34foundation · easy
What is the primary purpose of using Nmap in a network security assessment?
Select an answer first
35foundation · easy
What is the primary purpose of the Aircrack-ng suite?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Security Assessment Techniques and Tools CCT Practice Questions (Page 7)

Questions 31–35

Which phase of a network security assessment involves gathering information about the target without actively engaging with the systems?

You have captured a password hash and suspect the password is a common word followed by a number. Which password cracking technique is most efficient for this scenario?

What is the primary purpose of using Nmap in a network security assessment?

What is the primary purpose of the Aircrack-ng suite?

Keep studying — Security Assessment and Application Security