EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 181:

  You want to increase your network security implementing a technology that only allows certain MAC addresses in specific ports in the switches; which one of the above is the best choice?

  A. Port Security
  B. Port Authorization
  C. Port Detection
  D. Port Knocking
  A. Port Security

• Question 182:

  Which of the following protocols is used for inter-domain multicast routing and natively supports "source-specific multicast" (SSM)?

  A. BGMP
  B. DVMRP
  C. OSPF
  D. EIGRP
  A. BGMP

  ---

  Explanation/Reference:

  BGMP stands for border gateway multicast protocol. It is used for inter-domain multicast routing and natively supports "source-specific multicast" (SSM). In order to support "any-source multicast" (ASM), BGMP builds shared trees for active

  multicast groups. This allows domains to build source-specific, inter-domain, distribution branches where needed. BGMP uses TCP as its transport protocol, which helps in eliminating the need to implement message fragmentation,

  retransmission, acknowledgement, and sequencing.

  Answer option B is incorrect. The Distance Vector Multicast Routing Protocol (DVMRP) is used to share information between routers to transport IP Multicast packets among networks. It uses a reverse path-flooding technique and is used as

  the basis for the Internet's multicast backbone (MBONE). In particular, DVMRP is notorious for poor network scaling, resulting from reflooding, particularly with versions that do not implement pruning. DVMRP's flat unicast routing mechanism

  also affects its capability to scale.

  Answer option D is incorrect. EIGRP is a Cisco proprietary protocol. It is an enhanced version of IGRP. It has faster convergence due to use of triggered update and saving neighbor's routing table locally. It supports VLSM and routing

  summarization. As EIGRP is a distance vector protocol, it automatically summarizes routes across Class A, B, and C networks. It also supports multicast and incremental updates and provides routing for three routed protocols, i.e., IP, IPX,

  and AppleTalk.

  Answer option C is incorrect. Open Shortest Path First (OSPF) is a routing protocol that is used in large networks. Internet Engineering Task Force (IETF) designates OSPF as one of the Interior Gateway Protocols. A host uses OSPF to

  obtain a change in the routing table and to immediately multicast updated information to all the other hosts in the network.

• Question 183:

  Which Internet access policy starts with all services blocked and the administrator enables safe and necessary services individually, which provides maximum security and logs everything, such as system and network activities?

  A. Internet access policy
  B. Paranoid policy
  C. Permissive policy
  D. Prudent policy
  D. Prudent policy

• Question 184:

  Which firewall technology provides the best of both packet filtering and application-based filtering and is used in Cisco Adaptive Security Appliances?

  A. VPN
  B. Stateful multilayer inspection
  C. Application level gateway
  D. Network address translation
  B. Stateful multilayer inspection

• Question 185:

  Which of the following types of coaxial cable used for cable television and cable modems?

  A. RG-8
  B. RG-59
  C. RG-58
  D. None
  E. RG-62
  B. RG-59

• Question 186:

  DRAG DROP

  Drag and drop the terms to match with their descriptions.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Following are the terms with their descriptions:

  

  A Trojan horse is a malicious software program that contains hidden code and masquerades itself as a normal program. When a Trojan horse program is run, its hidden code runs to destroy or scramble data on the hard disk. An example of a Trojan horse is a program that masquerades as a computer logon to retrieve user names and password information. The developer of a Trojan horse can use this information later to gain unauthorized access to computers. Trojan horses are normally spread by e-mail attachments. Ping sweep is a technique used to determine which of a range of IP addresses map to live hosts. It consists of ICMP ECHO requests sent to multiple hosts. If a given address is live, it will return an ICMP ECHO reply. A ping is often used to check that a network device is functioning. To disable ping sweeps on a network, administrators can block ICMP ECHO requests from outside sources. However, ICMP TIMESTAMP and ICMP INFO can be used in a similar manner. Spamware is software designed by or for spammers to send out automated spam e-mail. Spamware is used to search for e-mail addresses to build lists of e-mail addresses to be used either for spamming directly or to be sold to spammers. The spamware package also includes an e-mail harvesting tool. A backdoor is any program that allows a hacker to connect to a computer without going through the normal authentication process. The main advantage of this type of attack is that the network traffic moves from inside a network to the hacker's computer. The traffic moving from inside a network to the outside world is typically the least restrictive, as companies are more concerned about what comes into a network, rather than what leaves it. It, therefore, becomes hard to detect backdoors.

• Question 187:

  Fill in the blank with the appropriate term. In the method, a device or computer that transmits data needs to first listen to the channel for an amount of time to check for any activity on the channel.

  CSMA/CA

  Explanation/Reference:

  Carrier Sense Multiple Access/Collision Avoidance (CSMA/CA) is an access method used by wireless networks (IEEE 802.11). In this method, a device or computer that transmits data needs to first listen to the channel for an amount of time to check for any activity on the channel. If the channel is sensed as idle, the device is allowed to transmit data. If the channel is busy, the device postpones its transmission. Once the channel is clear, the device sends a signal telling all other devices not to transmit data, and then sends its packets. In Ethernet (IEEE 802.3) networks that use CSMA/CD, the device or computer continues to wait for a time and checks if the channel is still free. If the channel is free, the device transmits packets and waits for an acknowledgment signal indicating that the packets were received.

• Question 188:

  Which of the following is a high-speed network that connects computers, printers, and other network devices together?

  A. MAN
  B. LAN
  C. WAN
  D. CAN
  B. LAN

• Question 189:

  CSMA/CD is specified in which of the following IEEE standards?

  A. 802.3
  B. 802.2
  C. 802.1
  D. 802.15
  A. 802.3

• Question 190:

  A VPN Concentrator acts as a bidirectional tunnel endpoint among host machines. What are the other function(s) of the device? (Choose all that apply.)

  A. Enables input/output (I/O) operations
  B. Provides access memory, achieving high efficiency
  C. Manages security keys
  D. Assigns user addresses
  C. Manages security keys
  D. Assigns user addresses