EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 341:

  Which of the following standards is approved by IEEE-SA for wireless personal area networks?

  A. 802.11a
  B. 802.15
  C. 802.16
  D. 802.1
  B. 802.15

• Question 342:

  Which BC/DR activity includes action taken toward resuming all services that are dependent on business-critical applications?

  A. Response
  B. Recovery
  C. Resumption
  D. Restoration
  B. Recovery

• Question 343:

  John wants to implement a packet filtering firewall in his organization's network. What TCP/IP layer does a packet filtering firewall work on?

  A. Network Interface layer
  B. Application layer
  C. IP layer
  D. TCP layer
  C. IP layer

• Question 344:

  Which of the following IP class addresses are not allotted to hosts? Each correct answer represents a complete solution. Choose all that apply.

  A. Class A
  B. Class B
  C. Class D
  D. Class E
  E. Class C
  C. Class D
  D. Class E

  ---

  Explanation/Reference:

  Class addresses D and E are not allotted to hosts. Class D addresses are reserved for multicasting, and their address range can extend from 224 to 239. Class E addresses are reserved for experimental purposes. Their addresses range from 240 to 254. Answer option A is incorrect. Class A addresses are specified for large networks. It consists of up to 16,777,214 client devices (hosts), and their address range can extend from 1 to 126. Answer option B is incorrect. Class B addresses are specified for medium size networks. It consists of up to 65,534 client devices, and their address range can extend from 128 to 191. Answer option E is incorrect. Class C addresses are specified for small local area networks (LANs). It consists of up to 245 client devices, and their address range can extend from 192 to 223.

• Question 345:

  Fill in the blank with the appropriate term. A is a block of data that a Web server stores on the client computer.

  cookie

  Explanation/Reference:

  Cookie is a block of data, which a Web server stores on the client computer. If no expiration date is set for the cookie, it expires when the browser closes. If the expiration date is set for a future date, the cookie will be stored on the client's disk after the session ends. If the expiration date is set for a past date, the cookie is deleted.

• Question 346:

  Sam wants to implement a network-based IDS in the network. Sam finds out the one IDS solution which works is based on patterns matching. Which type of network-based IDS is Sam implementing?

  A. Behavior-based IDS
  B. Anomaly-based IDS
  C. Stateful protocol analysis
  D. Signature-based IDS
  D. Signature-based IDS

• Question 347:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

  ,,It is a Linux-based WLAN WEP cracking tool that recovers encryption keys. It operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys."

  Which of the following tools is John using to crack the wireless encryption keys?

  A. PsPasswd
  B. Kismet
  C. AirSnort
  D. Cain
  C. AirSnort

  ---

  Explanation/Reference:

  AirSnort is a Linux-based WLAN WEP cracking tool that recovers encryption keys. AirSnort operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys. Answer option B is incorrect. Kismet is a Linux-based 802.11 wireless network sniffer and intrusion detection system. It can work with any wireless card that supports raw monitoring (rfmon) mode. Kismet can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet can be used for the following tasks: To identify networks by passively collecting packets To detect standard named networks To detect masked networks To collect the presence of non-beaconing networks via data traffic Answer option D is incorrect. Cain is a multipurpose tool that can be used to perform many tasks such as Windows password cracking, Windows enumeration, and VoIP session sniffing. This password cracking program can perform the following types of password cracking attacks: Dictionary attack Brute force attack Rainbow attack Hybrid attack Answer option A is incorrect. PsPasswd is a tool that helps Network Administrators change an account password on the local or remote system. The command syntax of PsPasswd is as follows: pspasswd [\\computer[,computer[,..] | @file [-u user [-p psswd]] Username [NewPassword]

  

• Question 348:

  Stephanie is currently setting up email security so all company data is secured when passed through email. Stephanie first sets up encryption to make sure that a specific user's email is protected. Next, she needs to ensure that the incoming and the outgoing mail has not been modified or altered using digital signatures. What is Stephanie working on?

  A. Usability
  B. Confidentiality
  C. Availability
  D. Data Integrity
  D. Data Integrity

• Question 349:

  Which of the following routing metrics refers to the length of time that is required to move a packet from source to destination through the internetwork?

  A. Routing delay
  B. Bandwidth
  C. Load
  D. Path length
  A. Routing delay

  ---

  Explanation/Reference:

  Routing delay refers to the length of time that is required to move a packet from source to destination through the internetwork. Delay depends on many factors, including the following:

  Bandwidth of intermediate network links

  Port queues at each router along the way

  Network congestion on all intermediate network links

  Physical distance to be traveled

  Since delay is a conglomeration of several important variables, it is a common and useful metric.

  Answer option D is incorrect. Path length is defined as the sum of the costs associated with each link traversed.

  Answer option B is incorrect. Bandwidth refers to the available traffic capacity of a link.

  Answer option C is incorrect. Load refers to the degree to which a network resource, such as a router, is busy.

• Question 350:

  What is the bit size of the Next Header field in the IPv6 header format?

  A. 2 bits
  B. 4 bits
  C. 8 bits
  D. 20 bits
  C. 8 bits