EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 11:

  Which of the following layers refers to the higher-level protocols used by most applications for network communication?

  A. Transport layer
  B. Link layer
  C. Application layer
  D. Internet layer
  C. Application layer

• Question 12:

  Which of the following is a standard protocol for interfacing external application software with an information server, commonly a Web server?

  A. DHCP
  B. IP
  C. CGI
  D. TCP
  C. CGI

  ---

  Explanation/Reference:

  The Common Gateway Interface (CGI) is a standard protocol for interfacing external application software with an information server, commonly a Web server. The task of such an information server is to respond to requests (in the case of web servers, requests from client web browsers) by returning output. When a user requests the name of an entry, the server will retrieve the source of that entry's page (if one exists), transform it into HTML, and send the result. Answer option A is incorrect. DHCP is a Dynamic Host Configuration Protocol that allocates unique (IP) addresses dynamically so that they can be used when no longer needed. A DHCP server is set up in a DHCP environment with the appropriate configuration parameters for the given network. The key parameters include the range or "pool" of available IP addresses, correct subnet masks, gateway, and name server addresses. Answer option B is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP.IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4 (IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6), is being deployed actively worldwide. Answer option D is incorrect. Transmission Control Protocol (TCP) is a reliable, connection-oriented protocol operating at the transport layer of the OSI model. It provides a reliable packet delivery service encapsulated within the Internet Protocol (IP). TCP guarantees the delivery of packets, ensures proper sequencing of data, and provides a checksum feature that validates both the packet header and its data for accuracy. If the network corrupts or loses a TCP packet during transmission, TCP is responsible for retransmitting the faulty packet. It can transmit large amounts of data. Application layer protocols, such as HTTP and FTP, utilize the services of TCP to transfer files between clients and servers.

• Question 13:

  Which of the following offer "always-on" Internet service for connecting to your ISP? Each correct answer represents a complete solution. Choose all that apply.

  A. analog modem
  B. digital modem
  C. DSL
  D. cable modem
  C. DSL
  D. cable modem

• Question 14:

  Which of the following layers of TCP/IP model is used to move packets between the Internet Layer interfaces of two different hosts on the same link?

  A. Application layer
  B. Internet layer
  C. Link layer
  D. Transport Layer
  E. None
  C. Link layer

  ---

  Explanation/Reference:

  The Link Layer of TCP/IP model is the networking scope of the local network connection to which a host is attached. This is the lowest component layer of the Internet protocols, as TCP/IP is designed to be hardware independent. As a result,

  TCP/IP has been implemented on top of virtually any hardware networking technology in existence. The Link Layer is used to move packets between the Internet Layer interfaces of two different hosts on the same link. The processes of

  transmitting and receiving packets on a given link can be controlled both in the software device driver for the network card, as well as on firmware or specialized chipsets. Answer option B is incorrect. The Internet Layer of the TCP/IP model

  solves the problem of sending packets across one or more networks. Internetworking requires sending data from the source network to the destination network. This process is called routing. IP can carry data for a number of different upper

  layer protocols.

  Answer option D is incorrect. The Transport Layer of TCP/IP model is responsible for end-to-end message transfer capabilities independent of the underlying network, along with error control, segmentation, flow control, congestion control,

  and application addressing (port numbers). End to end message transmission or connecting applications at the transport layer can be categorized as either connection-oriented, implemented in Transmission Control Protocol (TCP), or

  connectionless, implemented in User Datagram Protocol (UDP).

  Answer option is incorrect. The Application Layer of TCP/IP model refers to the higher-level protocols used by most applications for network communication. Examples of application layer protocols include the File Transfer Protocol (FTP) and

  the Simple Mail Transfer Protocol (SMTP). Data coded according to application layer protocols are then encapsulated into one or more transport layer protocols, which in turn use lower layer protocols to affect actual data transfer.

• Question 15:

  John works as a C programmer. He develops the following C program: His program is vulnerable to a __________ attack.

  

  A. SQL injection
  B. Denial-of-Service
  C. Buffer overflow
  D. Cross site scripting
  C. Buffer overflow

  ---

  Explanation/Reference:

  This program takes a user-supplied string and copies it into 'buffer1', which can hold up to 10 bytes of data. If a user sends more than 10 bytes, it would result in a buffer overflow.

• Question 16:

  Fill in the blank with the appropriate word. The primary goal of risk analysis is to determine the proportion of effect and theoretical response.

  qualitative

  Explanation/Reference:

  Qualitative risk analysis uses the likelihood and impact of the identified risks in a fast and cost-effective manner. Qualitative risk analysis establishes a basis for a focused quantitative analysis or risk response plan by evaluating the precedence of risks with a view to impact on the project's scope, cost, schedule, and quality objectives. Qualitative risk analysis is conducted at any point in a project life cycle. The primary goal of qualitative risk analysis is to determine the proportion of effect and theoretical response. The inputs to the qualitative risk analysis process are as follows: Organizational process assets Project scope statement Risk management plan Risk register

• Question 17:

  What represents the ability of an organization to respond under emergency in order to minimize the damage to its brand name, business operation, and profit?

  A. Disaster recovery
  B. Incident management
  C. Emergency management
  D. Crisis management
  D. Crisis management

• Question 18:

  Identify the type of event that is recorded when an application driver loads successfully in Windows.

  A. Success Audit
  B. Error
  C. Warning
  D. Information
  D. Information

• Question 19:

  Which of the following are the common security problems involved in communications and email? Each correct answer represents a complete solution. Choose all that apply.

  A. False message
  B. Message digest
  C. Message replay
  D. Message repudiation
  E. Message modification
  F. Eavesdropping
  G. Identity theft
  A. False message
  C. Message replay
  D. Message repudiation
  E. Message modification
  F. Eavesdropping
  G. Identity theft

  ---

  Explanation/Reference:

  Following are the common security problems involved in communications and email:

  Eavesdropping: It is the act of secretly listening to private information through telephone lines, e-mail, instant messaging, and any other method of communication considered private. Identity theft: It is the act of obtaining someone's username

  and password to access his/her email servers for reading email and sending false email messages. These credentials can be obtained by eavesdropping on SMTP, POP, IMAP, or Webmail connections.

  Message modification: The person who has system administrator permission on any of the SMTP servers can visit anyone's message and can delete or change the message before it continues on to its destination. The recipient has no way

  of telling that the email message has been altered.

  False message: It the act of constructing messages that appear to be sent by someone else.

  Message replay: In a message replay, messages are modified, saved, and re-sent later.

  Message repudiation: In message repudiation, normal email messages can be forged. There is no way for the receiver to prove that someone had sent him/her a particular message. This means that even if someone has sent a message, he/

  she can successfully deny it.

  Answer option B is incorrect. A message digest is a number that is created algorithmically from a file and represents that file uniquely.

• Question 20:

  Which of the following is a Cisco product that performs VPN and firewall functions?

  A. Circuit-Level Gateway
  B. PIX Firewall
  C. IP Packet Filtering Firewall
  D. Application Level Firewall
  B. PIX Firewall