EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 291:

  Eric is receiving complaints from employees that their systems are very slow and experiencing odd issues including restarting automatically and frequent system hangs. Upon investigating, he is convinced the systems are infected with a virus that forces systems to shut down automatically after period of time. What type of security incident are the employees a victim of?

  A. Scans and probes
  B. Malicious Code
  C. Denial of service
  D. Distributed denial of service
  B. Malicious Code

• Question 292:

  What is the response of an Xmas scan if a port is either open or filtered?

  A. RST
  B. No response
  C. FIN
  D. PUSH
  B. No response

• Question 293:

  Ryan works as a network security engineer at an organization the recently suffered an attack. As a countermeasure, Ryan would like to obtain more information about the attacker and chooses to deploy a honeypot into the organizations production environment called Kojoney. Using this honeypot, he would like to emulate the network vulnerability that was attacked previously. Which type of honeypot is he trying to implement?

  A. High interaction honeypots
  B. Research honeypot
  C. Low interaction honeypots
  D. Pure honeypots
  C. Low interaction honeypots

• Question 294:

  How is a "risk" represented?

  A. Asset + threat
  B. Motive (goal) + method
  C. Asset + threat + vulnerability
  D. Motive (goal) + method + vulnerability
  C. Asset + threat + vulnerability

• Question 295:

  In which of the following types of port scans does the scanner attempt to connect to all 65535 ports?

  A. UDP
  B. Strobe
  C. FTP bounce
  D. Vanilla
  D. Vanilla

  ---

  Explanation/Reference:

  In a vanilla port scan, the scanner attempts to connect to all 65,535 ports.

  Answer option B is incorrect. The scanner attempts to connect to only selected ports.

  Answer option A is incorrect. The scanner scans for open User Datagram Protocol ports.

  Answer option C is incorrect. The scanner goes through a File Transfer Protocol server to disguise the cracker's location.

• Question 296:

  A US-based organization decided to implement a RAID storage technology for their data backup plan. John wants to setup a RAID level that requires a minimum of six drives but will meet high fault tolerance and with a high speed for the data read and write operations. What RAID level will John need to choose to meet this requirement?

  A. RAID level 50
  B. RAID level 1
  C. RAID level 10
  D. RAID level 5
  A. RAID level 50

• Question 297:

  Which of the following statements holds true in terms of virtual machines?

  A. Hardware-level virtualization takes place in VMs
  B. OS-level virtualization takes place in VMs
  C. All VMs share the host OS
  D. VMs are light weight than containers
  A. Hardware-level virtualization takes place in VMs

• Question 298:

  Which of the following is a network analysis tool that sends packets with nontraditional IP stack parameters?

  A. Nessus
  B. COPS
  C. SAINT
  D. HPing
  D. HPing

• Question 299:

  Which of the following is used in conjunction with smoke detectors and fire alarm systems to improve and increase public safety?

  A. Gaseous fire suppression
  B. Gaseous emission system
  C. Fire sprinkler
  D. Fire suppression system
  D. Fire suppression system

• Question 300:

  The _________ mechanism works on the basis of a client-server model.

  A. Push-based
  B. Host-based
  C. Pull-based
  D. Network-based
  C. Pull-based