100% Guaranteed Results 312-38 Unlimited 171 Questions [2023]
312-38 Dumps PDF - Want To Pass 312-38 Fast
NEW QUESTION # 23
How is an "attack" represented?
- A. Motive (goal) + method + vulnerability
- B. Motive (goal) + method
- C. Asset + Threat
- D. Asset + Threat + Vulnerability
Answer: B
NEW QUESTION # 24
Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?
- A. Disaster recovery plan
- B. Continuity of Operations Plan
- C. Business continuity plan
- D. Contingency plan
Answer: D
Explanation:
A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans are often devised by governments or businesses who want to be prepared for anything that could happen.
Contingency plans include specific strategies and actions to deal with specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also include a monitoring process and
"triggers" for initiating planned actions. They are required to help governments, businesses, or individuals to recover from serious incidents in the minimum time with minimum cost and disruption.
Answer option D is incorrect. It includes the plans and procedures documented that ensure the continuity of critical operations during any period where normal operations are impossible.
Answer option B is incorrect. Disaster recovery planning is a subset of a larger process known as business continuity planning and should include planning for resumption of applications, data, hardware, communications (such as networking), and other IT infrastructure. A business continuity plan (BCP) includes planning for non-IT related aspects such as key personnel, facilities, crisis communication, and reputation protection, and should refer to the disaster recovery plan (DRP) for IT-related infrastructure recovery/continuity.
Answer option C is incorrect. Business continuity planning (BCP) is the creation and validation of a practiced logistical plan for how an organization will recover and restore partially or completely interrupted critical (urgent) functions within a predetermined time after a disaster or extended disruption. The logistical plan is called a business continuity plan. The BCP lifecycle is as follows:
NEW QUESTION # 25
Which of the following helps in blocking all unauthorized inbound and/or outbound traffic?
- A. Firewall
- B. IDS
- C. IPS
- D. Sniffer
Answer: A
NEW QUESTION # 26
Which of the following is a type of scam that entices a user to disclose personal information?
- A. Sniffing
- B. Smurfing
- C. Phishing
- D. Spamming
Answer: C
NEW QUESTION # 27
Which of the following are the various methods that a device can use for logging information on a Cisco router? Each correct answer represents a complete solution. Choose all that apply.
- A. Syslog logging
- B. Console logging
- C. Terminal logging
- D. Buffered logging
- E. NTP logging
- F. SNMP logging
Answer: A,B,C,D,F
NEW QUESTION # 28
DRAG DROP
Drag and drop the Response management plans to match up with their respective purposes.
Answer:
Explanation:
The response management plans are shown in the table below:
NEW QUESTION # 29
Which of the following key features limits the rate a sender transfers data to guarantee reliable delivery?
- A. Error-free data transfer
- B. Congestion control
- C. Flow control
- D. Ordered data transfer
Answer: C
NEW QUESTION # 30
James is working as a Network Administrator in a reputed company situated in California. He is monitoring his network traffic with the help of Wireshark. He wants to check and analyze the traffic against a PING sweep attack. Which of the following Wireshark filters will he use?
- A. icmp.type==8 and icmp.type==0
- B. icmp.type==8 or icmp.type==0
- C. Icmp.type==8 or icmp.type==16
- D. Icmp.type==0 and icmp.type==16
Answer: B
NEW QUESTION # 31
Which of the following is one of the most commonly used implementations of RAID?
- A. RAID 3
- B. RAID 1
- C. RAID 2
- D. RAID 5
Answer: D
NEW QUESTION # 32
Alex is administrating the firewall in the organization's network. What command will he use to check the ports applications open?
- A. Netstat -a
- B. Netstat -ao
- C. Netstat -o
- D. Netstat -an
Answer: D
NEW QUESTION # 33
How many layers are present in the TCP/IP model?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 34
Which of the following can be performed with software or hardware devices in order to record everything a
person types using his or her keyboard?
- A. Warchalking
- B. Keystroke logging
- C. IRC bot
- D. War dialing
Answer: B
Explanation:
Keystroke logging is a method of logging and recording user keystrokes. It can be performed with software or
hardware devices. Keystroke logging devices can record everything a person types using his or her keyboard,
such as to measure employee's productivity on certain clerical tasks. These types of devices can also be used
to get usernames, passwords, etc.
Answer option C is incorrect. War dialing is a technique of using a modem to automatically scan a list of
telephone numbers, usually dialing every number in a local area code to search for computers, BBS systems,
and fax machines. Hackers use the resulting lists for various purposes, hobbyists for exploration, and crackers
(hackers that specialize in computer security) for password guessing.
Answer option A is incorrect. Warchalking is the drawing of symbols in public places to advertise an open Wi-Fi
wireless network. Having found a Wi-Fi node, the warchalker draws a special symbol on a nearby object, such
as a wall, the pavement, or a lamp post. The name warchalking is derived from the cracker terms war dialing
and war driving.
Answer option D is incorrect. An Internet Relay Chat (IRC) bot is a set of scripts or an independent program
that connects to Internet Relay Chat as a client, and so appears to other IRC users as another user. An IRC
bot differs from a regular client in that instead of providing interactive access to IRC for a human user, it
performs automated functions.
NEW QUESTION # 35
What is a person, who offers formal experienced testimony in the court, called?
- A. Evidence Manager
- B. Attorney
- C. Expert Witness
- D. Evidence Documenter
Answer: C
NEW QUESTION # 36
Which of the following IEEE standards is an example of a DQDB access method?
- A. 802.5
- B. 802.3
- C. 802.4
- D. 802.6
Answer: D
NEW QUESTION # 37
Fill in the blank with the appropriate term. The ____________ is used for routing voice conversations over the Internet. It is also known by other names such as IP Telephony, Broadband Telephony, etc.
Answer:
Explanation:
VoIP
NEW QUESTION # 38
Which of the following layers of the TCP/IP model maintains data integrity by ensuring that messages are delivered in the order in which they are sent and that there is no loss or duplication?
- A. Internet layer
- B. Application layer
- C. Link layer
- D. Transport layer
Answer: D
Explanation:
The transport layer ensures that messages are delivered in the order in which they are sent and that there is no loss or duplication. Transport layer maintains data integrity.
Answer option C is incorrect. The Internet Layer of the TCP/IP model solves the problem of sending packets across one or more networks. Internetworking requires sending data from the source network to the destination network. This process is called routing. IP can carry data for a number of different upper layer protocols.
Answer option B is incorrect. The Link Layer of TCP/IP model is the networking scope of the local network connection to which a host is attached. This is the lowest component layer of the Internet protocols, as TCP/IP is designed to be hardware independent. As a result, TCP/IP has been implemented on top of virtually any hardware networking technology in existence. The Link Layer is used to move packets between the Internet Layer interfaces of two different hosts on the same link. The processes of transmitting and receiving packets on a given link can be controlled both in the software device driver for the network card, as well as on firmware or specialized chipsets.
Answer option D is incorrect. The Application Layer of TCP/IP model refers to the higher-level protocols used by most applications for network communication. Examples of application layer protocols include the File Transfer Protocol (FTP) and the Simple Mail Transfer Protocol (SMTP). Data coded according to application layer protocols are then encapsulated into one or more transport layer protocols, which in turn use lower layer protocols to affect actual data transfer.
NEW QUESTION # 39
Assume that you are a network administrator and the company has asked you to draft an Acceptable Use Policy (AUP) for employees. Under which category of an information security policy does AUP fall into?
- A. Incident Response Policy (IRP)
- B. Enterprise Information Security Policy (EISP)
- C. System Specific Security Policy (SSSP)
- D. Issue Specific Security Policy (ISSP)
Answer: C
NEW QUESTION # 40
Which of the following representatives of the incident response team takes the forensic backups of systems that are essential event?
- A. Information Security representative
- B. the legal representative
- C. technical representative
- D. None
- E. lead investigator
Answer: C
NEW QUESTION # 41
A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to perform war dialing? Each correct answer represents a complete solution. Choose all that apply.
- A. Wingate
- B. ToneLoc
- C. NetStumbler
- D. THC-Scan
Answer: B,D
Explanation:
THC-Scan and ToneLoc are tools used for war dialing. A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides the attacker unauthorized access to a computer.
Answer option D is incorrect. NetStumbler is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. It detects wireless networks and marks their relative position with a GPS. It uses an 802.11 Probe Request that has been sent to the broadcast destination address.
Answer option B is incorrect. Wingate is a proxy server.
NEW QUESTION # 42
Which of the following firewalls are used to track the state of active connections and determine the network
packets allowed to enter through the firewall? Each correct answer represents a complete solution. Choose all
that apply.
- A. Circuit-level gateway
- B. Dynamic packet-filtering
- C. Stateful
- D. Proxy server
Answer: B,C
Explanation:
A dynamic packet-filtering firewall is a fourth generation firewall technology. It is also known as a stateful
firewall. It tracks the state of active connections and determines which network packets are allowed to enter
through the firewall. It records session information, such as IP addresses and port numbers to implement a
more secure network. The dynamic packet-filtering firewall operates at Layer3, Layer4, and Layer5.
Answer option A is incorrect. A circuit-level gateway is a type of firewall that works at the session layer of the
OSI model between the application layer and the transport layer of the TCP/IP stack. They monitor TCP
handshaking between packets to determine whether a requested session is legitimate. Information passed to a
remote computer through a circuit level gateway appears to have originated from the gateway. This is useful
for hiding information about protected networks. Circuit-level gateways are relatively inexpensive and have the
advantage of hiding information about the private network they protect.
Answer option C is incorrect. A proxy server firewall intercepts all messages entering and leaving the network.
The proxy server effectively hides the true network addresses.
NEW QUESTION # 43
Which of the following honeypots provides an attacker access to the real operating system without any restriction and collects a vast amount of information about the attacker?
- A. Medium-interaction honeypot
- B. High-interaction honeypot
- C. Honeyd
- D. Low-interaction honeypot
Answer: B
NEW QUESTION # 44
......
The EC-COUNCIL 312-38 certification exam is an essential credential for those who are interested in pursuing a career in network security. This certification is recognized by employers worldwide and is designed to test the candidate's knowledge and skills in network security. The EC-COUNCIL 312-38 certification exam covers a broad range of topics related to network security, and it is an excellent credential for those who are interested in pursuing further certifications in network security.
Updated Verified 312-38 Q&As - Pass Guarantee: https://www.torrentvce.com/312-38-valid-vce-collection.html
312-38 Practice Exam Dumps - 99% Marks In EC-COUNCIL Exam: https://drive.google.com/open?id=1JChFoV8yro9fP8GJ2kJi0InywJ5O5Qdh