EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 311:

  Which of the following policies is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly?

  A. Information protection policy
  B. Remote access policy
  C. Group policy
  D. Password policy
  D. Password policy

  ---

  Explanation/Reference:

  A password policy is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly. Password policies are account policies that are related to the users' accounts. Such policies are password-related settings that provide different constraints for the password's usage. Password policies can be configured to enforce users to provide passwords only in a specific way when they try to log on to their computers. These policies increase the effectiveness of the user's computers. Answer option C is incorrect. A group policy specifies how programs, network resources, and the operating system work for users and computers in an organization. Answer option A is incorrect. An information protection policy ensures that information is appropriately protected from modification or disclosure. Answer option B is incorrect. Remote access policy is a document that outlines and defines acceptable methods of remotely connecting to the internal network.

• Question 312:

  Which of the following tools is used for wireless LANs detection?

  A. Airopeek
  B. NetStumbler
  C. Fort Knox
  D. Sniffer
  B. NetStumbler

• Question 313:

  An organization needs to adhere to the______________rules for safeguarding and protecting the electronically stored health information of employees.

  A. HI PA A
  B. PCI DSS
  C. ISEC
  D. SOX
  A. HI PA A

• Question 314:

  Which of the following is a compatible network device that converts various communication protocols and are used to connect different network technologies?

  A. port
  B. change
  C. none
  D. bridge
  E. router
  A. port

• Question 315:

  Which of the following firewalls are used to monitor the status of active connections, and configure the network packets to pass through the firewall? Each correct answer represents a complete solution. Choose all that apply.

  A. Farm owner
  B. Proxy server
  C. Dynamic packet filtering
  D. The circuit gateway
  A. Farm owner
  C. Dynamic packet filtering

• Question 316:

  In _______ mechanism, the system or application sends log records either on the local disk or over the network.

  A. Network-based
  B. Pull-based
  C. Push-based
  D. Host-based
  C. Push-based

• Question 317:

  A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to perform war dialing? Each correct answer represents a complete solution. Choose all that apply.

  A. ToneLoc
  B. Wingate
  C. THC-Scan
  D. NetStumbler
  A. ToneLoc
  C. THC-Scan

  ---

  Explanation/Reference:

  THC-Scan and ToneLoc are tools used for war dialing. A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides the attacker unauthorized access to a computer. Answer option D is incorrect. NetStumbler is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. It detects wireless networks and marks their relative position with a GPS. It uses an

  802.11 Probe Request

  that has been sent to the broadcast destination address.

  Answer option B is incorrect. Wingate is a proxy server.

• Question 318:

  Which of the following is the process of managing incidents in an enterprise?

  A. Log analysis
  B. Incident response
  C. Incident handling
  D. Patch management
  C. Incident handling

• Question 319:

  Sam wants to implement a network-based IDS and finalizes an IDS solution that works based on pattern matching. Which type of network-based IDS is Sam implementing?

  A. Behavior-based IDS
  B. Anomaly-based IDS
  C. Signature-based IDS
  D. Stateful protocol analysis
  C. Signature-based IDS

• Question 320:

  Which of the following applications is used for the statistical analysis and reporting of the log files?

  A. Sawmill
  B. Sniffer
  C. Snort
  D. jplag
  A. Sawmill