312-38 Questions – Truly Beneficial For Your EC-COUNCIL Exam (Updated 171 Questions) [Q98-Q122]

05Aug 2022 by admin No Comments

4.5/5 - (2 votes)

312-38 Questions – Truly Beneficial For Your EC-COUNCIL Exam (Updated 171 Questions)

View All 312-38 Actual Exam Questions, Answers and Explanations for Free

NEW QUESTION 98
Which of the following layers of the OSI model provides interhost communication?

Application layer

Network layer

Transport layer

Session layer

NEW QUESTION 99
Which of the following OSI layers is sometimes called the syntax layer?

Presentation layer

Application layer

Physical layer

Data link layer

NEW QUESTION 100
Which of the following modems offers wireless communication under water?

Controllerless modem

Short haul modem

Acoustic modem

Optical modem

NEW QUESTION 101
Which of the following ranges of addresses can be used in the first octet of a Class B network address?

224-255

128-191

0-127

192-223

NEW QUESTION 102
Which of the following is a worldwide organization whose mission is to create, refine and promote internet safety standards?

None

SPROUT

ANSI

IEEE

WASC

NEW QUESTION 103
Which of the following statements are true about volatile memory? Each correct answer represents a complete solution. Choose all that apply.

The content is stored permanently and even the power supply is switched off.

A volatile storage device is faster in reading and writing data.

Read only memory (ROM) is an example of volatile memory.

It is computer memory that requires power to maintain the stored information.

NEW QUESTION 104
Which of the following network devices operate at the network layer of the OSI model? Each correct answer represents a complete solution. Choose all that apply.

Router

Bridge

Repeater

Gateway

NEW QUESTION 105
Which of the following attacks comes under the category of an active attack?

Replay attack

Wireless footprinting

Passive Eavesdropping

Traffic analysis

NEW QUESTION 106
The risk assessment team in Southern California has estimated that the probability of an incident that has potential to impact almost 80% of the bank’s business is very high. How should this risk be categorized in the risk matrix?

High

Medium

Extreme

Low

NEW QUESTION 107
Which of the following is a standard-based protocol that provides the highest level of VPN security?

IPSec

PPP

L2TP

Internet Protocol Security (IPSec) is a standard-based protocol that provides the highest level of VPN security. IPSec can encrypt virtually everything above the networking layer. It is used for VPN connections that use the L2TP protocol. It secures both data and password. IPSec cannot be used with Point-to-Point Tunneling Protocol (PPTP). Answer option B is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP. IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4 (IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6), is being deployed actively worldwide. Answer option C is incorrect. Point-to-Point Protocol (PPP) is a remote access protocol commonly used to connect to the Internet. It supports compression and encryption and can be used to connect to a variety of networks. It can connect to a network running on the IPX, TCP/IP, or NetBEUI protocol. It supports multi-protocol and dynamic IP assignments. It is the default protocol for the Microsoft Dial-Up adapter. Answer option D is incorrect. Layer 2 Tunneling Protocol (L2TP) is a more secure version of Point-to-Point Tunneling Protocol (PPTP). It provides tunneling, address assignment, and authentication. It allows the transfer of Point-to-Point Protocol (PPP) traffic between different networks. L2TP combines with IPSec to provide tunneling and security for Internet Protocol (IP), Internetwork Packet Exchange (IPX), and other protocol packets across IP networks.

NEW QUESTION 108
Which of the following systems includes an independent NAS Head and multiple storage arrays?

FreeNAS

None of these

Gateway NAS System

Integrated NAS System

NEW QUESTION 109
Which of the following is a worldwide organization that aims to establish, refine, and promote Internet security standards?

ANSI

WASC

IEEE

ITU

Web Application Security Consortium (WASC) is a worldwide organization that aims to establish, refine, and promote Internet security standards. WASC is vendor-neutral, although members may belong to corporations involved in the research, development, design, and distribution of Web security-related products. Answer option A is incorrect. ANSI (American National Standards Institute) is the primary organization for fostering the development of technology standards in the United States. ANSI works with industry groups and is the U.S. member of the International Organization for Standardization (ISO) and the International Electro-technical Commission (IEC). Long-established computer standards from ANSI include the American Standard Code for Information Interchange (ASCII) and the Small Computer System Interface (SCSI). Answer option D is incorrect. The International Telecommunication Union (ITU) is an organization established to standardize and regulate international radio and telecommunications. Its main tasks include standardization, allocation of the radio spectrum, and organizing interconnection arrangements between different countries to allow international phone calls. ITU sets standards for global telecom networks. The ITU’s telecommunications division (ITU-T) produces more than 200 standard recommendations each year in the converging areas of telecommunications, information technology, consumer electronics, broadcasting and multimedia communications. ITU was streamlined into the following three sectors: ITU-D (Telecommunication Development) ITU-R (Radio communication) ITU-T (Telecommunication Standardization) Answer option C is incorrect. The Institute of Electrical and Electronic Engineers (IEEE) is a society of technical professionals. It promotes the development and application of electrotechnology and allied sciences. IEEE develops communications and network standards, among other activities. The organization publishes number of journals, has many local chapters, and societies in specialized areas.

NEW QUESTION 110
The IR team and the network administrator have successfully handled a malware incident on the network. The team is now preparing countermeasure guideline to avoid a future occurrence of the malware incident.
Which of the following countermeasure(s) should be added to deal with future malware incidents? (Select all that apply)

Complying with the company’s security policies

Implementing strong authentication schemes

Implementing a strong password policy

Install antivirus software

NEW QUESTION 111
Which of the following is a method of authentication that uses physical characteristics?

COMSEC

ACL

Honeypot

Biometrics

NEW QUESTION 112
Which of the following features is used to generate spam on the Internet by spammers and worms?

AutoComplete

SMTP relay

Server Message Block (SMB) signing

AutoFill

NEW QUESTION 113
Which of the following is also known as slag code?

Trojan

Logic bomb

Worm

IRC bot

NEW QUESTION 114
Which of the following statements are TRUE about Demilitarized zone (DMZ)? Each correct answer represents a complete solution. Choose all that apply.

In a DMZ configuration, most computers on the LAN run behind a firewall connected to a public network like the Internet.

Demilitarized zone is a physical or logical sub-network that contains and exposes external services of an organization to a larger un-trusted network.

The purpose of a DMZ is to add an additional layer of security to the Local Area Network of an organization.

Hosts in the DMZ have full connectivity to specific hosts in the internal network.

NEW QUESTION 115
James is working as a Network Administrator in a reputed company situated in California. He is monitoring his network traffic with the help of Wireshark. He wants to check and analyze the traffic against a PING sweep attack. Which of the following Wireshark filters will he use?

Icmp.type==8 or icmp.type==16

icmp.type==8 or icmp.type==0

icmp.type==8 and icmp.type==0

Icmp.type==0 and icmp.type==16

NEW QUESTION 116
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

PsPasswd

Kismet

AirSnort

Cain

NEW QUESTION 117
Which of the following OSI layers defines the electrical and physical specifications for devices?

Data link layer

Presentation layer

Physical layer

Transport layer

NEW QUESTION 118
Which of the following layers is closest to the end user?

Application layer

Physical layer

Session layer

Presentation layer

NEW QUESTION 119
In an Ethernet peer-to-peer network, which of the following cables is used to connect two computers, using RJ-
45 connectors and Category-5 UTP cable?

Serial

Loopback

Crossover

Parallel

NEW QUESTION 120
Which of the following is a software tool used in passive attacks for capturing network traffic?

Intrusion prevention system

Intrusion detection system

Warchalking

Sniffer

NEW QUESTION 121
Which of the following systems is formed by a group of honeypots?

Research honeypot

Honeyfarm

Honeynet

Production honeypot

NEW QUESTION 122
A local bank wants to protect their card holder dat
a. The bank should comply with the________standard to ensure the security of card holder data.

HIPAA

ISEC

PCI DSS

SOAX

Breaking down Evaluation Details

The EC-Council 312-38 exam is available in the multiple-choice form, presents a total of 100 questions, with a seat time of 4 hours. This test can be taken at ECC test centers across the globe and the full list of the learning objectives it addresses includes the following:

Application and Data Protection;
Incident Prediction;
Endpoint Protection.
Incident Detection;
Incident Response;
Network Perimeter Protection;

312-38 dumps Free Test Engine Verified By It Certified Experts: https://www.practicematerial.com/312-38-exam-materials.html

Breaking down Evaluation Details

Leave a Reply Cancel reply