What is the main objective of DNS spoofing?

To encrypt DNS queries to protect user privacy

To redirect users to a malicious website by providing a false IP address for a domain

To overload a DNS server with queries to cause a denial of service

To change the MAC address associated with an IP address

What is the primary goal of an ARP spoofing attack?

To flood the switch's CAM table with fake MAC addresses

To exhaust the target's TCP connection table

To associate the attacker's MAC address with the IP address of a legitimate host

To corrupt the DNS cache of a recursive resolver

A web application developer wants to prevent session hijacking via XSS. The application currently uses cookies for session management. Which implementation is most effective?

Use a longer session token and regenerate the session ID after login

Implement IP-based session binding

Set the HttpOnly flag on session cookies and implement Content Security Policy (CSP)

Store session data in local storage instead of cookies

What is the primary characteristic of passive sniffing?

It injects packets into the network to redirect traffic

It requires the use of ARP spoofing to capture traffic on a switch

It only captures traffic without sending any packets into the network

It can only be performed on wireless networks

A security analyst is testing the resilience of a network switch. The analyst wants to demonstrate how an attacker could force the switch to behave like a hub, allowing the attacker to sniff traffic between other hosts. Which action would achieve this?

Enable port mirroring on the switch to copy all traffic to the analyst's port.

Flood the switch with frames that have random source MAC addresses.

Send a large number of ARP replies with spoofed IP-to-MAC mappings.

Use a DHCP starvation attack to exhaust the IP address pool.

EC-CouncilCertified Security Specialist

Domain 4Objective 1

Network-Level Attacks (sniffing, DoS/DDoS, Session Hijacking) ECSS Practice Questions (Page 4)

Part of the Ethical Hacking Advanced Attacks and Penetration Testing domain, which makes up ~17% of our current practice bank.

51questions here

11free pages

12concepts

12 Concepts in This Objective

Network Sniffing Fundamentals
Passive vs. Active Sniffing
ARP Spoofing and Poisoning
MAC Flooding
DNS Spoofing and Cache Poisoning
DoS Attack Types
DDoS Attack Architecture
DoS/DDoS Mitigation Techniques
Session Hijacking Concepts
TCP/IP Session Hijacking
Application-Level Session Hijacking
Session Hijacking Countermeasures

Questions 16–20

16foundation · easy
What is the main objective of DNS spoofing?
Select an answer first
17foundation · easy
What is the primary goal of an ARP spoofing attack?
Select an answer first
18expert · hard
A web application developer wants to prevent session hijacking via XSS. The application currently uses cookies for session management. Which implementation is most effective?
Select an answer first
19foundation · easy
What is the primary characteristic of passive sniffing?
Select an answer first
20application · medium
A security analyst is testing the resilience of a network switch. The analyst wants to demonstrate how an attacker could force the switch to behave like a hub, allowing the attacker to sniff traffic between other hosts. Which action would achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.