EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 141:

  Geon Solutions INC., had only 10 employees when it started. But as business grew, the organization had to increase the amount of staff. The network administrator is finding it difficult to accommodate an increasing number of employees in the existing network topology. So the organization is planning to implement a new topology where it will be easy to accommodate an increasing number of employees. Which network topology will help the administrator solve the problem of needing to add new employees and expand?

  A. Mesh
  B. Ring
  C. Bus
  D. Star
  D. Star

• Question 142:

  Malone is finishing up his incident handling plan for IT before giving it to his boss for review. He is outlining the incident response methodology and the steps that are involved. What is the last step he should list?

  A. Assign eradication.
  B. Recovery
  C. Containment
  D. A follow-up.
  D. A follow-up.

• Question 143:

  Which of the following is virtually unsolicited e-mail messages, often with commercial content, in large quantities of indiscriminate set of recipients? Each correct answer represents a complete solution.

  A. E-mail scam
  B. spam
  C. E-mail harassment
  B. spam

• Question 144:

  George was conducting a recovery drill test as a part of his network operation. Recovery drill tests are conducted on the______________.

  A. Archived data
  B. Deleted data
  C. Data in transit
  D. Backup data
  D. Backup data

• Question 145:

  Which of the following is an attack on a website that changes the visual appearance of the site and seriously damages the trust and reputation of the website?

  A. Website defacement
  B. Zero-day attack
  C. Spoofing
  D. Buffer overflow
  A. Website defacement

  ---

  Explanation/Reference:

  Website defacement is an attack on a website that changes the visual appearance of the site. These are typically the work of system crackers, who break into a Web server and replace the hosted website with one of their own. Sometimes,

  the Defacer makes fun of the system administrator for failing to maintain server security. Most times, the defacement is harmless; however, it can sometimes be used as a distraction to cover up more sinister actions such as uploading

  malware.

  A high-profile website defacement was carried out on the website of the company SCO Group following its assertion that Linux contained stolen code. The title of the page was changed from Red Hat vs. SCO to SCO vs. World with various

  satirical content.

  Answer option D is incorrect. Buffer overflow is a condition in which an application receives more data than it is configured to accept. This usually occurs due to programming errors in the application. Buffer overflow can terminate or crash the

  application.

  Answer option B is incorrect. A zero-day attack, also known as zero-hour attack, is a computer threat that tries to exploit computer application vulnerabilities which are unknown to others, undisclosed to the software vendor, or for which no

  security fix is available. Zero-day exploits (actual code that can use a security hole to carry out an attack) are used or shared by attackers before the software vendor knows about the vulnerability. User awareness training is the most effective

  technique to mitigate such attacks.

  Answer option C is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by

  using someone else's IP address to hide his identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the responses to be misdirected.

• Question 146:

  What is the range for private ports?

  A. 49152 through 65535
  B. 1024 through 49151
  C. Above 65535
  D. 0 through 1023
  A. 49152 through 65535

• Question 147:

  What is used for drawing symbols in public places following techniques of advertising an open Wi-Fi network?

  A. wardriving
  B. None
  C. spam
  D. war call
  E. warchalking
  E. warchalking

• Question 148:

  Alex is administering the firewall in the organization's network. What command will he use to check all the remote addresses and ports in numerical form?

  A. netstat -a
  B. netstat -ao
  C. netstat -o
  D. netstat -an
  D. netstat -an

• Question 149:

  Which of the following RAID storage techniques divides the data into multiple blocks, which are further written across the RAID system?

  A. Striping
  B. None of these
  C. Parity
  D. Mirroring
  A. Striping

• Question 150:

  During a security awareness program, management was explaining the various reasons which create threats to network security. Which could be a possible threat to network security?

  A. Configuring automatic OS updates
  B. Having a web server in the internal network
  C. Implementing VPN
  D. Patch management
  B. Having a web server in the internal network