EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 1:

  Which of the following is a data destruction technique that protects the sensitivity of information against a laboratory attack where an unauthorized individual uses signal processing recovery tools in a laboratory environment to recover the information?

  A. Purging
  B. Destroying
  C. Clearing
  D. Disposal
  A. Purging

• Question 2:

  Which of the following protocols is a method of implementing virtual private networks?

  A. OSPF
  B. PPTP
  C. IRDP
  D. DHCP
  B. PPTP

• Question 3:

  John has implemented _________ in the network to restrict the number of public IP addresses in his organization and to enhance the firewall filtering technique.

  A. VPN
  B. Proxies
  C. DMZ
  D. NAT
  D. NAT

• Question 4:

  Which of the following is a software tool used in passive attacks for capturing network traffic?

  A. Intrusion prevention system
  B. Intrusion detection system
  C. Warchalking
  D. Sniffer
  D. Sniffer

  ---

  Explanation/Reference:

  A sniffer is a software tool that is used to capture any network traffic. Since a sniffer changes the NIC of the LAN card into promiscuous mode, the NIC begins to record incoming and outgoing data traffic across the network. A sniffer attack is

  a passive attack because the attacker does not directly connect with the target host. This attack is most often used to grab logins and passwords from network traffic. Tools such as Ethereal, Snort, Windump, EtherPeek, Dsniff are some good

  examples of sniffers. These tools provide many facilities to users such as graphical user interface, traffic statistics graph, multiple sessions tracking, etc. Answer option A is incorrect. An intrusion prevention system (IPS) is a network security

  device that monitors network and/or system activities for malicious or unwanted behavior and can react, in real-time, to block or prevent those activities.

  When an attack is detected, it can drop the offending packets while still allowing all other traffic to pass.

  Answer option B is incorrect. An IDS (Intrusion Detection System) is a device or software application that monitors network and/or system activities for malicious activities or policy violations and produces reports to a Management Station.

  Intrusion prevention is the process of performing intrusion detection and attempting to stop detected possible incidents. Intrusion detection and prevention systems (IDPS) are primarily focused on identifying possible incidents, logging

  information about them, attempting to stop them, and reporting them to security administrators.

  Answer option C is incorrect. Warchalking is the drawing of symbols in public places to advertise an open Wi-Fi wireless network. Having found a Wi-Fi node, the warchalker draws a special symbol on a nearby object, such as a wall, the

  pavement, or a lamp post. The name warchalking is derived from the cracker terms war dialing and war driving.

• Question 5:

  Which of the following organizations is responsible for managing the assignment of domain names and IP addresses?

  A. ISO
  B. ICANN
  C. W3C
  D. ANSI
  B. ICANN

  ---

  Explanation/Reference:

  ICANN stands for Internet Corporation for Assigned Names and Numbers. ICANN is responsible for managing the assignment of domain names and IP addresses. ICANN's tasks include responsibility for IP address space allocation, protocol identifier assignment, top-level domain name system management, and root server system management functions. Answer option A is incorrect. The International Organization for Standardization, widely known as ISO, is an international-standard-setting body composed of representatives from various national standards organizations. Founded on 23 February 1947, the organization promulgates worldwide proprietary industrial and commercial standards. It has its headquarters in Geneva, Switzerland. While ISO defines itself as a non-governmental organization, its ability to set standards that often become law, either through treaties or national standards, makes it more powerful than most non-governmental organizations. In practice, ISO acts as a consortium with strong links to governments. Answer option C is incorrect. The World Wide Web Consortium (W3C) is an international industry consortium that develops common standards for the World Wide Web to promote its evolution and interoperability. It was founded in October 1994 by Tim Berners-Lee, the inventor of the Web, at the Massachusetts Institute of Technology, Laboratory for Computer Science [MIT/LCS] in collaboration with CERN, where the Web had originated, with support from DARPA and the European Commission. Answer option D is incorrect. ANSI (American National Standards Institute) is the primary organization for fostering the development of technology standards in the United States. ANSI works with industry groups and is the U.S. member of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Long-established computer standards from ANSI include the American Standard Code for Information Interchange (ASCII) and the Small Computer System Interface (SCSI).

• Question 6:

  Which of the following is the primary international body for fostering cooperative standards for telecommunications equipment and systems?

  A. ICANN
  B. IEEE
  C. NIST
  D. CCITT
  D. CCITT

  ---

  Explanation/Reference:

  CCITT is the primary international body for fostering cooperative standards for telecommunications equipment and systems. It is now known as the ITU-T (for Telecommunication Standardization Sector of the International Telecommunications Union). The ITU-T mission is to ensure the efficient and timely production of standards covering all fields of telecommunications on a worldwide basis, as well as defining tariff and accounting principles for international telecommunication services. Answer option A is incorrect. Internet Corporation for Assigned Names and Numbers (ICANN) is a non-profit organization that oversees the allocation of IP addresses, management of the DNS infrastructure, protocol parameter assignment, and root server system management. Answer option B is incorrect. The Institute of Electrical and Electronic Engineers (IEEE) is a society of technical professionals. It promotes the development and application of electro-technology and allied sciences. IEEE develops communications and network standards, among other activities. The organization publishes number of journals, has many local chapters, and societies in specialized areas. Answer option C is incorrect. The National Institute of Standards and Technology (NIST), known between 1901 and 1988 as the National Bureau of Standards (NBS), is a measurement standards laboratory which is a non-regulatory agency of the United States Department of Commerce. The institute's official mission is as follows: To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve quality of life. NIST had an operating budget for fiscal year 2007 (October 1, 2006-September 30, 2007) of about $843.3 million. NIST's 2009 budget was $992 million, but it also received $610 million as part of the American Recovery and Reinvestment Act. NIST employs about 2,900 scientists, engineers, technicians, and support and administrative personnel. About 1,800 NIST associates (guest researchers and engineers from American companies and foreign nations) complement the staff. In addition, NIST partners with 1,400 manufacturing specialists and staff at nearly 350 affiliated centers around the country.

• Question 7:

  Which of the following fields in the IPv6 header replaces the TTL field in the IPv4 header?

  A. Next header
  B. Traffic class
  C. Hop limit
  D. Version
  C. Hop limit

• Question 8:

  Which of the following IEEE standards adds QoS features and multimedia support?

  A. 802.11b
  B. 802.11e
  C. 802.5
  D. 802.11a
  B. 802.11e

• Question 9:

  Which of the following layers is closest to the end user?

  A. Application layer
  B. Physical layer
  C. Session layer
  D. Presentation layer
  A. Application layer

• Question 10:

  Which of the following attacks comes under the category of an active attack?

  A. Replay attack
  B. Wireless footprinting
  C. Passive Eavesdropping
  D. Traffic analysis
  A. Replay attack