Are you ready for the EHCS exam?
Test your skills!

4. What type of protocol is considered connection-oriented?*
- ICMP
- TCP
- UDP
- ARP

5. When monitoring a network, you receive an ICMP type 8 packet. What does this represent?*
- Echo start
- Echo recall
- Echo request
- Echo reply

6. Size in bytes of the sequence and acknowledgment number in the TCP header?*
- 3
- 6
- 4
- 2

8. IP protocol type 17 represents which type of network traffic?*
- TCP
- IGRP
- UDP
- ICMP

9. What does FIN in TCP flag define?*
- Used to abort a TCP connection abruptly
- Used to indicate the beginning of a TCP connection
- Used to close a TCP connection
- Used to acknowledge receipt of a previous packet or transmission

10. Which is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?*
- port 25 and host 192.168.0.125
- tcp.port == 25 and ip.host == 192.168.0.125
- tcp.src == 25 and ip.host == 192.168.0.125
- host 192.168.0.125:25

11. Valid TCP flags include which of the following?*
- FIN, PSH, RST, URG, SYN
- BGP, RST, SYN, NULL, URG
- ACK, BIN, PSH, RST, SYN
- ACK, FIN, RST, ECHO, SYN

12. According to TCP/IP standards, what should you conclude if you send a TCP packet with only the FIN flag set and you receive a RST in response?*
- The status of the port cannot be determined
- The port is closed
- The port is filtered
- The port is open

13. Observing TCP packets with the URG, FIN, and PSH flags set is an indication of what type of behavior?*
- A FIN scan
- A NULL scan
- A Maimon scan
- An Nmap Xmas scan

14. What is the response to a nmap –sU scan when the port is open?*
- RST
- no response
- SYN/ACK
- ICMP type 3

15. What nmap command line syntax parameter must be used in order to perform a TCP half-open scan?*
- -sT
- –sO
- -sH
- -sS

Refer to the image below to answer the next question.
18. Refer to figure 3, what is the protocol in the packet?*
- UDP
- TCP
- IGRP
- ICMP

Refer to the image below to answer the next question.
19. What are the flags set in the packet?*
- PSH, ACK
- FIN, PSH, URG
- SYN, ACK
- RST, ACK

Refer to the image below to answer the next question.
20. What are the flags set in the packet?*
- RST, ACK
- PSH, ACK
- SYN, ACK
- FIN, PSH, URG

21. A port that is < 1023 is also known as a _______________ port?*
- Privileged
- Special
- Reserved
- Ephemeral

22. A port that is > 1023 is also known as a _______________ port?*
- Special
- Reserved
- Privileged
- Ephemeral

23. Of the following stances on security which one is the easiest to manage risk of?*
- Paranoid
- Prudent
- Permissive
- Promiscuous

24. Which of the following protocols is considered reliable?*
- IGRP
- ICMP
- TCP
- UDP

25. Which of the following options is used to display the interfaces in tcpdump?*
- –L
- –D
- –A
- –G

26. Which of the following options is used to display passwords in tcpdump?*
- –A
- –D
- –L
- –G

27. Which of the following Wireshark filters would be used to display accepted GET request of a web server?*
- Frame contains 200 + OK
- Frame contains “200 OK”
- None of the above
- Both A and B

28. To view the source port 22 in Wireshark you would enter which of the following filters?*
- tcp.port = 22
- tcp.port == 22
- tcp.srcport == 22
- tcp.srcport = 22

29. Which command in UNIX is used to change permissions of files and directories?*
- chflags
- attrib
- chmod
- chperm

30. Which option of the kill command is considered the sure kill?*
- 1
- 9
- 5
- 3

31. Which UNIX utility will allow the viewing of compressed files without decompressing them?*
- zcat
- rar
- gzip
- none of the above

32. Which of the following password files in UNIX is only readable by root?*
- /etc/proc
- /etc/shadow
- /etc/passwd
- /etc/password

33. Which of the following netstat options will display the interfaces on a UNIX machine?*
- –an
- –in
- –at
- –rn

34. Which of the following netstat options will display the routing table on a UNIX machine?*
- –in
- –at
- –an
- –rn

35. Which of the following lsof options will display the network connections?*
- –e
- –a
- –i
- –c

36. Which of the following lsof options will display the files and network connections a process if using?*
- –e
- –i
- –a
- –c

37. Within the VMware software what is the network switch that is used for the bridged network?*
- VMnet1
- VMnet8
- VMnet5
- VMnet0

38. Within the VMware software what is the network switch that is used for the NAT network?*
- VMnet8
- VMnet5
- VMnet1
- VMnet0

Please submit form to see your quiz results.
Name*
First Last
Address*
Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country
Phone*
Email*
How would you like to be contacted?*
- Phone
- Email
Consent*
I agree to the privacy policy.
Please see our full privacy policy here.
We care about your data privacy. We will only collect your data via this form if you agree to our terms of use. If you do not agree to the collection of your data, we will not be able to send you the information you have requested.
CAPTCHA

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Are you ready for the EHCS exam?Test your skills!