[Q98-Q120] EC-COUNCIL 312-38 Practice Verified Answers – Pass Your Exams For Sure! [2022]

4.7/5 - (3 votes)

EC-COUNCIL 312-38 Practice Verified Answers – Pass Your Exams For Sure! [2022]

Valid Way To Pass Certified Ethical Hacker’s 312-38 Exam

NEW QUESTION 98
Which of the following standards is a proposed enhancement to the 802.11a and 802.11b wireless LAN (WLAN) specifications that offers quality of service (QoS) features, including the prioritization of data, voice, and video transmissions?

802.15

802.11n

802.11e

802.11h

NEW QUESTION 99
You work as a Network Security Analyzer. You got a suspicious email while working on a forensic project. Now,
you want to know the IP address of the sender so that you can analyze various information such as the actual
location, domain information, operating system being used, contact information, etc. of the email sender with
the help of various tools and resources. You also want to check whether this email is fake or real. You know
that analysis of email headers is a good starting point in such cases. The email header of the suspicious email
is given below:

What is the IP address of the sender of this email?

209.191.91.180

141.1.1.1

172.16.10.90

216.168.54.25

NEW QUESTION 100
Each of the following is a network layer protocol used for a particular (MAC) address to obtain an IP address?

ARP

None

RARP

P.M

PIM

NEW QUESTION 101
What is the range for private ports?

49152 through 65535

1024 through 49151

Above 65535

0 through 1023

NEW QUESTION 102
Which of the following steps are required in an idle scan of a closed port?
Each correct answer represents a part of the solution. Choose all that apply.

The attacker sends a SYN/ACK to the zombie.

The zombie’s IP ID increases by only 1.

In response to the SYN, the target sends a RST.

The zombie ignores the unsolicited RST, and the IP ID remains unchanged.

The zombie’s IP ID increases by 2.

NEW QUESTION 103
Which BC/DR activity includes action taken toward resuming all services that are dependent on business-critical applications?

Response

Recovery

Resumption

Restoration

NEW QUESTION 104
Harry has successfully completed the vulnerability scanning process and found serious vulnerabilities exist in the organization’s network. Identify the vulnerability management phases through which he will proceed to ensure all the detected vulnerabilities are addressed and eradicated. (Select all that apply)

Mitigation

Assessment

Verification

Remediation

NEW QUESTION 105
Which of the following TCP commands are used to allocate a receiving buffer associated with the specified
connection?

Send

None

Receive

Interrupt

NEW QUESTION 106
Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice’s password read from the last session, which Bob accepts.
Which of the following attacks is being used by Eve?

Replay

Fire walking

Cross site scripting

Session fixation

NEW QUESTION 107
Which filter to locate unusual ICMP request an Analyst can use in order to detect a ICMP probes from the attacker to a target OS looking for the response to perform ICMP based fingerprinting?

(icmp.type==9 && ((!(icmp.code==9))

(icmp.type==8 && ((!(icmp.code==8))

(icmp.type==12) | | (icmp.type==15| |(icmp.type==17)

(icmp.type==14) | | (icmp.type==15| |(icmp.type==17)

NEW QUESTION 108
Which of the following attacks are computer threats that try to exploit computer application vulnerabilities that are unknown to others or undisclosed to the software developer? Each correct answer represents a complete solution. Choose all that apply.

Buffer overflow

Zero-day

Spoofing

Zero-hour

NEW QUESTION 109
Which of the following is a service discovery protocol that allows computers and other devices to find services in a local area network without prior configuration?

NTP

SLP

NNTP

DCAP

NEW QUESTION 110
Which of the following protocols sends a jam signal when a collision is detected?

ALOHA

CSMA/CA

CSMA/CD

CSMA

NEW QUESTION 111
Which of the following is a network point that acts as an entrance to another network?

Receiver

Hub

Bridge

Gateway

NEW QUESTION 112
A company wants to implement a data backup method which allows them to encrypt the data ensuring its security as well as access at any time and from any location. What is the appropriate backup method that should be implemented?

Onsite backup

Hot site backup

Offsite backup

Cloud backup

NEW QUESTION 113
How is a “risk” represented?

Asset + threat

Motive (goal) + method

Asset + threat + vulnerability

Motive (goal) + method + vulnerability

NEW QUESTION 114
Which of the following is a distributed application architecture that partitions tasks or workloads between
service providers and service requesters? Each correct answer represents a complete solution. Choose all that
apply.

Client-server computing

Peer-to-peer (P2P) computing

Client-server networking

Peer-to-peer networking

NEW QUESTION 115
Which of the following is susceptible to a birthday attack?

Authentication

Integrity

Authorization

Digital signature

NEW QUESTION 116
Which of the following is a digital telephone/telecommunication network that carries voice, data, and video over
an existing telephone network infrastructure?

PPP

Frame relay

ISDN

X.25

Integrated Services Digital Network (ISDN) is a digital telephone/telecommunication network that carries voice,
data, and video over an existing telephone network infrastructure. It requires an ISDN modem at both the ends
of a transmission. ISDN is designed to provide a single interface for hooking up a telephone, fax machine,
computer, etc.
ISDN has two levels of service, i.e., Basic Rate Interface (BRI) and Primary Rate Interface (PRI).
Answer option A is incorrect. The Point-to-Point Protocol, or PPP, is a data link protocol commonly used to
establish a direct connection between two networking nodes. It can provide connection authentication,
transmission encryption privacy, and compression. PPP is commonly used as a data link layer protocol for
connection over synchronous and asynchronous circuits, where it has largely superseded the older, non-
standard Serial Line Internet Protocol (SLIP) and telephone company mandated standards (such as Link
Access Protocol, Balanced (LAPB) in the X.25 protocol suite). PPP was designed to work with numerous
network layer protocols, including Internet Protocol (IP), Novell’s Internetwork Packet Exchange (IPX), NBF,
and AppleTalk.
Answer option D is incorrect. The X.25 protocol, adopted as a standard by the Consultative Committee for
International Telegraph and Telephone (CCITT), is a commonly-used network protocol. The X.25 protocol
allows computers on different public networks (such as CompuServe, Tymnet, or a TCP/IP network) to
communicate through an intermediary computer at the network layer level. X.25’s protocols correspond closely
to the data-link and physical-layer protocols defined in the Open Systems Interconnection (OSI) communication
model.
Answer option B is incorrect. Frame relay is a telecommunication service designed for cost-efficient data
transmission for intermittent traffic between local area networks (LANs) and between end-points in a wide area
network (WAN). Frame relay puts data in a variable-size unit called a frame. It checks for lesser errors as
compared to other traditional forms of packet switching and hence speeds up data transmission.
When an error is detected in a frame, it is simply dropped. The end points are responsible for detecting and
retransmitting dropped frames.

NEW QUESTION 117
Which of the following phases is the first step towards creating a business continuity plan?

Business Impact Assessment

Scope and Plan Initiation

Business Continuity Plan Development

Plan Approval and Implementation

NEW QUESTION 118
The CEO of Max Rager wants to send a confidential message regarding the new formula for its coveted soft drink, SuperMax, to its manufacturer in Texas. However, he fears the message could be altered in transit. How can he prevent this incident from happening and what element of the message ensures the success of this method?

Hashing; hash code

Symmetric encryption; secret key

Hashing; public key

Asymmetric encryption; public key

NEW QUESTION 119
Which of the following procedures is designed to enable security personnel to identify, mitigate, and recover from malicious computer incidents, such as unauthorized access to a system or data, denial-of-service, or unauthorized changes to system hardware, software, or data?

Cyber Incident Response Plan

Crisis Communication Plan

Disaster Recovery Plan

Occupant Emergency Plan

NEW QUESTION 120
Which of the following header fields in TCP/IP protocols involves Ping of Death attack?

SMTP header field

TCP header field

IP header field

UDP header field

Preparation Process

Understanding the exam topics is very critical to success in the test. Therefore, the potential candidates must download the exam blueprint to review the comprehensive details of these domains. After exploring the scope of the test, they can proceed to choose ample resources to prepare for EC-Council 312-38 with great deliberation.

Career Opportunities

The EC-Council 312-38 exam equips the professionals with the fundamental knowledge and skills in networking concepts. Without a doubt, earning the Certified Network Defender certification has a lucrative career outlook. Some of the positions that the certified individuals can consider include IT Administrators, Network Technicians, Data Analysts, Network Administrators, and Network Engineers, among others. The average remuneration for these titles is $94,000 per annum.

EC-COUNCIL 312-38 Pre-Exam Practice Tests | SurePassExams: https://www.surepassexams.com/312-38-exam-bootcamp.html

Preparation Process

Career Opportunities

Leave a Reply Cancel reply