EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 201:

  In an Ethernet peer-to-peer network, which of the following cables is used to connect two computers, using RJ-45 connectors and Category-5 UTP cable?

  A. Serial
  B. Loopback
  C. Crossover
  D. Parallel
  C. Crossover

  ---

  Explanation/Reference:

  In an Ethernet peer-to-peer network, a crossover cable is used to connect two computers, using RJ-45 connectors and Category-5 UTP cable. Answer options D and A are incorrect. Parallel and serial cables do not use RJ-45 connectors and

  Category-5 UTP cable. Parallel cables are used to connect printers, scanners etc., to computers, whereas serial cables are used to connect modems, digital cameras etc., to computers.

  Answer option B is incorrect. A loopback cable is used for testing equipments.

• Question 202:

  Which of the following are valid steps to secure routers? Each correct answer represents a complete solution. Choose all that apply.

  A. Keep routers updated with the latest security updates.
  B. Use a password that is easy to remember the router's administrative console.
  C. Configure access list entries to prevent unauthorized connections and routing.
  D. Use a complex password of the router management console.
  A. Keep routers updated with the latest security updates.
  C. Configure access list entries to prevent unauthorized connections and routing.
  D. Use a complex password of the router management console.

• Question 203:

  Fill in the blank with the appropriate term. A is a physical or logical subnetwork that adds an additional layer of security to an organization's Local Area Network (LAN).

  demilitarized zone

  Explanation/Reference:

• Question 204:

  Which of the following topologies is a type of physical network design where each computer in the network is connected to a central device through an unshielded twisted-pair (UTP) wire?

  A. Mesh topology
  B. Star topology
  C. Ring topology
  D. Bus topology
  B. Star topology

  ---

  Explanation/Reference:

  Star topology is a type of physical network design where each computer in the network is connected to a central device, called hub, through an unshielded twisted-pair (UTP) wire. Signals from the sending computer go to the hub and are then

  transmitted to all the computers in the network. Since each workstation has a separate connection to the hub, it is easy to troubleshoot. Currently, it is the most popular topology used for networks.

  Star Topology:

  

  Answer option A is incorrect. Mesh network topology is a type of physical network design where all devices in a network are connected to each other with many redundant connections. It provides multiple paths for the data traveling on the

  network to reach its destination. Mesh topology also provides redundancy in the network. It employs the full mesh and partial mesh methods to connect devices. In a full mesh topology network, each computer is connected to all the other

  computers. In a partial mesh topology network, some of the computers are connected to all the computers, whereas some are connected to only those computers with which they frequently exchange data.

  Mesh Topology:

  

  Answer option D is incorrect. Bus topology is a type of physical network design where all computers in the network are connected through a single coaxial cable known as bus. This topology uses minimum cabling and is therefore, the

  simplest and least expensive topology for small networks. In this topology, 50 ohm terminators terminate both ends of the network. A Bus topology network is difficult to troubleshoot, as a break or problem at any point along the cable can

  cause the entire network to go down.

  Bus Topology:

  

  Answer option C is incorrect. Ring topology is a type of physical network design where all computers in the network are connected in a closed loop. Each computer or device in a Ring topology network acts as a repeater. It transmits data by passing a token around the network in order to prevent the collision of data between two computers that want to send messages at the same time. If a token is free, the computer waiting to send data takes it, attaches the data and destination address to the token, and sends it. When the token reaches its destination computer, the data is copied. Then, the token gets back to the originator. The originator finds that the message has been copied and received and removes the message from the token. Now, the token is free and can be used by the other computers in the network to send data. In this topology, if one computer fails, the entire network goes down. Ring Topology:

  

• Question 205:

  You are a professional Computer Hacking forensic investigator. You have been called to collect evidences of buffer overflow and cookie snooping attacks. Which of the following logs will you review to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

  A. Program logs
  B. Web server logs
  C. Event logs
  D. System logs
  A. Program logs
  C. Event logs
  D. System logs

  ---

  Explanation/Reference:

  Evidences of buffer overflow and cookie snooping attacks can be traced from system logs, event logs, and program logs, depending on the type of overflow or cookie snooping attack executed and the error recovery method used by the hacker.

  Answer option B is incorrect. Web server logs are used to investigate cross-site scripting attacks.

• Question 206:

  The GMT enterprise is working on their internet and web usage policies. GMT would like to control internet bandwidth consumption by employees. Which group of policies would this belong to?

  A. Enterprise Information Security Policy
  B. Network Services Specific Security Policy
  C. Issue Specific Security Policy
  D. System Specific Security Policy
  C. Issue Specific Security Policy

• Question 207:

  Fill in the blank with the appropriate term. A is a set of tools that take Administrative control of a computer system without authorization by the computer owners and/or legitimate managers.

  rootkit

  Explanation/Reference:

  A rootkit is a set of tools that take Administrative control of a computer system without authorization by the computer owners and/or legitimate managers. A rootkit requires root access to be installed in the Linux operating system, but once

  installed, the attacker can get root access at any time. Rootkits have the following features:

  They allow an attacker to run packet sniffers secretly to capture passwords.

  They allow an attacker to set a Trojan into the operating system and thus open a backdoor for anytime access.

  They allow an attacker to replace utility programs that can be used to detect the attacker's activity.

  They provide utilities for installing Trojans with the same attributes as legitimate programs.

• Question 208:

  Fill in the blank with the appropriate term. is a protocol used to synchronize the timekeeping among the number of distributed time servers and clients.

  NTP

  Explanation/Reference:

  Network Time Protocol (NTP) is used to synchronize the timekeeping among the number of distributed time servers and clients. It is used for the time management in a large and diverse network that contains many interfaces. In this protocol, servers define the time, and clients have to be synchronized with the defined time. These clients can choose the most reliable source of time defined from the several NTP servers for their information transmission.

• Question 209:

  Albert works as a Windows system administrator at an MNC. He uses PowerShell logging to identify any suspicious scripting activity across the network. He wants to record pipeline execution details as PowerShell executes, including variable initialization and command invocations. Which PowerShell logging component records pipeline execution details as PowerShell executes?

  A. Module logging
  B. Script block logging
  C. Event logging
  D. Transcript logging
  A. Module logging

• Question 210:

  ------------is a group of broadband wireless communications standards for Metropolitan Area Networks (MANs)

  A. 802.15
  B. 802.16
  C. 802.15.4
  D. 802.12
  B. 802.16