EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 211:

  Which of the following IP class addresses are not allotted to hosts? Each correct answer represents a complete solution. Choose all that apply.

  A. Class C
  B. Class D
  C. Class A
  D. Class B
  E. Class E
  B. Class D
  E. Class E

  ---

  Explanation/Reference:

  Class addresses D and E are not allotted to hosts. Class D addresses are reserved for multicasting, and their address range can extend from 224 to 239. Class E addresses are reserved for experimental purposes. Their addresses range from 240 to 254. Answer option C is incorrect. Class A addresses are specified for large networks. It consists of up to 16,777,214 client devices (hosts), and their address range can extend from 1 to 126. Answer option D is incorrect. Class B addresses are specified for medium size networks. It consists of up to 65,534 client devices, and their address range can extend from 128 to 191. Answer option A is incorrect. Class C addresses are specified for small local area networks (LANs). It consists of up to 245 client devices, and their address range can extend from 192 to 223.

• Question 212:

  Fill in the blank with the appropriate term. In computing, is a class of data storage devices that read their data in sequence.

  SAM

  Explanation/Reference:

  In computing, sequential access memory (SAM) is a class of data storage devices that read their data in sequence. This is in contrast to random access memory (RAM) where data can be accessed in any order. Sequential access devices are usually a form of magnetic memory. While sequential access memory is read in sequence, access can still be made to arbitrary locations by "seeking" to the requested location. Magnetic sequential access memory is typically used for secondary storage in general-purpose computers due to their higher density at lower cost compared to RAM, as well as resistance to wear and non-volatility. Examples of SAM devices include hard disks, CD-ROMs, and magnetic tapes.

• Question 213:

  Which of the following modems offers wireless communication under water?

  A. Controllerless modem
  B. Short haul modem
  C. Acoustic modem
  D. Optical modem
  C. Acoustic modem

• Question 214:

  Which of the following is a mandatory password-based and key-exchange authentication protocol?

  A. PPP
  B. CHAP
  C. VRRP
  D. DH-CHAP
  D. DH-CHAP

• Question 215:

  Which of the following layers of the OSI model provides interhost communication?

  A. Application layer
  B. Network layer
  C. Transport layer
  D. Session layer
  D. Session layer

• Question 216:

  Which of the following is a service discovery protocol that allows computers and other devices to find services in a local area network without prior configuration?

  A. NTP
  B. SLP
  C. NNTP
  D. DCAP
  B. SLP

  ---

  Explanation/Reference:

  The Service Location Protocol (SLP, srvloc) is a service discovery protocol that allows computers and other devices to find services in a local area network without prior configuration. SLP has been designed to scale from small, unmanaged networks to large enterprise networks. Answer option C is incorrect. The Network News Transfer Protocol (NNTP) is an Internet application protocol used for transporting Usenet news articles (netnews) between news servers and for reading and posting articles by end user client applications. NNTP is designed so that news articles are stored in a central database, allowing the subscriber to select only those items that he wants to read. Answer option A is incorrect. Network Time Protocol (NTP) is used to synchronize the timekeeping among the number of distributed time servers and clients. It is used for the time management in a large and diverse network that contains many interfaces. In this protocol, servers define the time, and clients have to be synchronized with the defined time. These clients can choose the most reliable source of time defined from the several NTP servers for their information transmission. Answer option D is incorrect. The Data Link Switching Client Access Protocol (DCAP) is an application layer protocol that is used between workstations and routers for transporting SNA/NetBIOS traffic over TCP sessions. It was introduced in order to address a few deficiencies by the Data Link Switching Protocol (DLSw). The DLSw raises the important issues of scalability and efficiency, and since DLSw is a switch-to-switch protocol, it is not efficient when implemented on workstations. DCAP was introduced in order to address these issues.

• Question 217:

  John is the Vice-President of a BPO. He wants to implement a policy allowing employees to use and manage devices purchased by the organization but restrict the use of the device for business use only. Which among the following policies does John want to implement?

  A. COBO policy
  B. CYOD policy
  C. BYOD policy
  D. COPE policy
  B. CYOD policy

• Question 218:

  Peter works as a network administrator at an IT company. He wants to avoid exploitation of the cloud, particularly Azure services. Which of the following is a group of PowerShell scripts designed to help the network administrator understand how attacks happen and help them protect the cloud?

  A. POSH-Sysmon
  B. MicroBurst
  C. SecurityPolicyDsc
  D. Sysmon
  B. MicroBurst

• Question 219:

  Which of the following are the common security problems involved in communications and email? Each correct answer represents a complete solution. Choose all that apply.

  A. Message replay
  B. Identity theft
  C. Message modification
  D. Message digest
  E. Message repudiation
  F. Eavesdropping
  G. False message
  A. Message replay
  B. Identity theft
  C. Message modification
  E. Message repudiation
  F. Eavesdropping
  G. False message

  ---

  Explanation/Reference:

  Following are the common security problems involved in communications and email:

  Eavesdropping: It is the act of secretly listening to private information through telephone lines, e-mail, instant messaging, and any other method of communication considered private. Identity theft: It is the act of obtaining someone's username

  and password to access his/her email servers for reading email and sending false email messages. These credentials can be obtained by eavesdropping on SMTP, POP, IMAP, or Webmail connections.

  Message modification: The person who has system administrator permission on any of the SMTP servers can visit anyone's message and can delete or change the message before it continues on to its destination. The recipient has no way

  of telling that the email message has been altered.

  False message: It the act of constructing messages that appear to be sent by someone else.

  Message replay: In a message replay, messages are modified, saved, and re-sent later.

  Message repudiation: In message repudiation, normal email messages can be forged. There is no way for the receiver to prove that someone had sent him/her a particular message. This means that even if someone has sent a message, he/

  she can successfully deny it.

  Answer option D is incorrect. A message digest is a number that is created algorithmically from a file and represents that file uniquely.

• Question 220:

  The security network team is trying to implement a firewall capable of operating only in the session layer, monitoring the TCP inter-packet link protocol to determine when a requested session is legitimate or not. Using this type of firewall, they could be able to intercept the communication, making the external network see that the firewall is the source, and facing the user, who responds from the outside is the firewall itself. They are just limiting a requirements previous listed, because they already have a packet filtering firewall and they must add a cheap solution that meets the objective. What kind of firewall would you recommend?

  A. Packet Filtering with NAT
  B. Circuit Level Gateway
  C. Application Proxies
  D. Application Level Gateways
  B. Circuit Level Gateway