每個人的讀書習慣不同，KaoGuTi 為 ECSS 考試提供 PDF、Desktop Test Engine 與 Online Test Engine 三種形式。不論你偏好列印紙本、離線練習，還是打開瀏覽器立刻模考，EC-COUNCIL EC-Council Certified Security Specialist (ECSSv10) 的準備都能配合你的節奏。

EC-COUNCIL ECSS 考試概覽:

認證廠商:	EC-Council
考試名稱:	EC-Council 資安專員認證 (ECSSv10) 考試
考試代碼:	ECSSv10
支援語言:	英文
考試形式:	選擇題
推薦課程:	EC-Council 官方培訓 (ECSS)
考試報名:	EC-Council 官方認證網頁 Pearson VUE EC-Council 考試
範例考題:
考試方式:	電腦化考試（透過 EC-Council 合作夥伴如 Pearson VUE 進行線上監考或在授權測試中心進行）
官方大綱網址:	https://www.eccouncil.org

EC-COUNCIL ECSS 考試大綱主題:

關於 ECSS 考試，考生最常問的問題

最新的 E-Commerce Architect ECSS 免費考試真題：

問題 #1

Cibel.org, an organization, wanted to develop a web application for marketing its products to the public. In this process, they consulted a cloud service provider and requested provision of development tools, configuration management, and deployment platforms for developing customized applications.
Identify the type of cloud service requested by Cibel.org in the above scenario.

A. Infrastructure-as-a-service (laaS)
B. Security-as-a-service (SECaaS)
C. Platform-as-a-service
D. identity-as-a-service (IDaaS)

問題 #2

James is a professional hacker attempting to gain access to an industrial system through a remote control device. In this process, he used a specially designed radio transceiver device to sniff radio commands and inject arbitrary code into the firmware of the remote controllers to maintain persistence.
Which of the following attacks is performed by James in the above scenario?

A. Command injection
B. Abusing reprogramming attack
C. Re pairing with a malicious RF controller
D. Malicious reprogramming attack

問題 #3

In which of the following levels of the OSI model does an attacker gain control over the HTTP user session by obtaining the session IDs and create new unauthorized sessions by using the stolen data?

A. Presentation level
B. Network-level
C. Transport level
D. Application-level

問題 #4

Cheryl, a forensic expert, was recruited to investigate a malicious activity performed by an anonymous hackers' group on an organization's systems. Using an automated tool, Cheryl was able to extract the malware file and analyze the assembly code instructions, which helped him understand the malware's purpose.
Which of the following tools helped Cheryl extract and analyze the assembly code of the malware?

A. Virtual Box
B. OllyDbg
C. QualNet
D. VMware vSphere

問題 #5

Williams, a forensic specialist, was tasked with performing a static malware analysis on a suspect system in an organization. For this purpose, Williams used an automated tool to perform a string search and saved all the identified strings in a text file. After analyzing the strings, he determined all the harmful actions that were performed by malware.
Identify the tool employed by Williams in the above scenario.

A. Snagit
B. ResourcesExlract
C. Ezvid
D. R-Drive Image

問題與答案：