EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 301:

  Which BC/DR activity works on the assumption that the most critical processes are brought back from a remote location first, followed by the less critical functions?

  A. Recovery
  B. Restoration
  C. Response
  D. Resumption
  A. Recovery

• Question 302:

  Fill in the blank with the appropriate term. is a method for monitoring the e-mail delivery to the intended recipient.

  Email tracking

  Explanation/Reference:

  Email tracking is a method for monitoring the e-mail delivery to the intended recipient. Most tracking technologies utilize some form of digitally time-stamped record to reveal the exact time and date at which e-mail was received or opened, as well the IP address of the recipient. When a user uses such tools to send an e-mail, forward an e-mail, reply to an e-mail, or modify an e-mail, the resulting actions and tracks of the original e-mail are logged. The sender is notified of all actions performed on the tracked e-mail by an automatically generated e-mail. eMailTracker Pro and MailTracking.com are the tools that can be used to perform email tracking.

• Question 303:

  Which of the following systems monitors the operating system detecting inappropriate activity, writing to log files, and triggering alarms?

  A. Signature-Based ID system
  B. Host-based ID system
  C. Network-based ID system
  D. Behavior-based ID system
  B. Host-based ID system

• Question 304:

  Jason works as a System Administrator for www.company.com Inc. The company has a Windows-based network. Sam, an employee of the company, accidentally changes some of the applications and system settings. He complains to Jason that his system is not working properly. To troubleshoot the problem, Jason diagnoses the internals of his computer and observes that some changes have been made in Sam's computer registry. To rectify the issue, Jason has to restore the registry. Which of the following utilities can Jason use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

  A. Resplendent registrar
  B. Regedit.exe
  C. Reg.exe
  D. EventCombMT
  A. Resplendent registrar
  B. Regedit.exe
  C. Reg.exe

  ---

  Explanation/Reference:

  The resplendent registrar is a tool that offers a complete and safe solution to administrators and power users for maintaining the registry. It can be used for maintaining the registry of desktops and remote computers on the network. It offers a solution for backing up and restoring registries, fast background search and replace, adding descriptions to the registry keys, etc. This program is very attractive and easy to use, as it comes in an explorer-style interface. It can be used for Windows 2003/XP/2K/NT/ME/9x. Reg.exe is a command-line utility that is used to edit the Windows registry. It has the ability to import, export, back up, and restore keys, as well as to compare, modify, and delete keys. It can perform almost all tasks that can be done using the Windows-based Regedit.exe tool. Registry Editor (REGEDIT) is a registry editing utility that can be used to look at information in the registry. REGEDIT.EXE enables users to search for strings, values, keys, and subkeys and is useful to find a specific value or string. Users can also use REGEDIT.EXE to add, delete, or modify registry entries. Answer option D is incorrect. EventCombMT is a multithreaded tool that is used to search the event logs of several different computers for specific events, all from one central location. It is a little-known Microsoft tool to run searches for event IDs or text strings against Windows event logs for systems, applications, and security, as well as File Replication Service (FRS), domain name system (DNS), and Active Directory (AD) logs where applicable. The MT stands for multi-threaded. The program is part of the Account Lockout and Management Tools program package for Windows 2000, 2003, and XP.

• Question 305:

  Justine has been tasked by her supervisor to ensure that the company's physical security is on the same level as their logical security measures. She installs video cameras at all entrances and exits and installs badge access points for all doors. The last item she wants to install is a method to prevent unauthorized people piggybacking employees. What should she install to prevent piggybacking?

  A. Justine needs to install a biometrics station at each entrance.
  B. She should install a mantrap.
  C. She should install a Thompson Trapdoor.
  D. Justine will need to install a revolving security door.
  B. She should install a mantrap.

• Question 306:

  Which of the following routing metrics is the sum of the costs associated with each link traversed?

  A. Routing delay
  B. Communication cost
  C. Bandwidth
  D. Path length
  D. Path length

• Question 307:

  Which of the following forms of recognition of the sender can inform the data receiver of all segments that have arrived successfully?

  A. negative acknowledgment
  B. the cumulative reset
  C. with block
  D. None
  E. selective acknowledgment
  E. selective acknowledgment

• Question 308:

  You just set up a wireless network to customers in the cafe. Which of the following are good security measures implemented? Each correct answer represents a complete solution. Choose all that apply.

  A. WEP encryption
  B. WPA encryption
  C. Not broadcasting the SSID
  D. The MAC-filtering router
  A. WEP encryption
  B. WPA encryption

• Question 309:

  Which of the following tool is used for passive attacks to capture network traffic?

  A. Intrusion prevention system
  B. Intrusion detection system
  C. Sniffer
  D. warchalking
  E. None
  C. Sniffer

• Question 310:

  Which encryption algorithm h used by WPA5 encryption?

  A. RC4.TKIP
  B. RC4
  C. AES-GCMP 256
  D. AES-CCMP
  D. AES-CCMP