EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 31:

  Which of the following is designed to detect the unwanted presence of fire by monitoring environmental changes associated with combustion?

  A. Fire sprinkler
  B. Fire suppression system
  C. Fire alarm system
  D. Gaseous fire suppression
  C. Fire alarm system

  ---

  Explanation/Reference:

  An automatic fire alarm system is designed for detecting the unwanted presence of fire by monitoring environmental changes associated with combustion. In general, a fire alarm system is classified as either automatically actuated, manually actuated, or both. Automatic fire alarm systems are intended to notify the building occupants to evacuate in the event of a fire or other emergency, to report the event to an off-premises location in order to summon emergency services, and to prepare the structure and associated systems to control the spread of fire and smoke. Answer option B is incorrect. A fire suppression system is used in conjunction with smoke detectors and fire alarm systems to improve and increase public safety. Answer option D is incorrect. Gaseous fire suppression is a term to describe the use of inert gases and chemical agents to extinguish a fire. Answer option A is incorrect. A fire sprinkler is the part of a fire sprinkler system that discharges water when the effects of a fire have been detected, such as when a predetermined temperature has been reached.

• Question 32:

  Identity the method involved in purging technique of data destruction.

  A. Incineration
  B. Overwriting
  C. Degaussing
  D. Wiping
  B. Overwriting

• Question 33:

  Which of the following is a non-profit organization that oversees the allocation of IP addresses, management of the DNS infrastructure, protocol parameter assignment, and root server system management?

  A. ANSI
  B. IEEE
  C. ITU
  D. ICANN
  D. ICANN

  ---

  Explanation/Reference:

  ICANN stands for Internet Corporation for Assigned Names and Numbers. ICANN is responsible for managing the assignment of domain names and IP addresses. ICANN's tasks include responsibility for IP address space allocation, protocol identifier assignment, top-level domain name system management, and root server system management functions. Internet Corporation for Assigned Names and Numbers (ICANN) is a non-profit organization that oversees the allocation of IP addresses, management of the DNS infrastructure, protocol parameter assignment, and root server system management. Answer option B is incorrect. Institute of Electrical and Electronics Engineers (IEEE) is an organization of engineers and electronics professionals who develop standards for hardware and software. Answer option C is incorrect. The International Telecommunication Union is an agency of the United Nations which regulates information and communication technology issues. ITU coordinates the shared global use of the radio spectrum, promotes international cooperation in assigning satellite orbits, works to improve telecommunication infrastructure in the developing world and establishes worldwide standards. ITU is active in areas including broadband Internet, latest- generation wireless technologies, aeronautical and maritime navigation, radio astronomy, satellite-based meteorology, convergence in fixed-mobile phone, Internet access, data, voice, TV broadcasting, and next-generation networks. Answer option A is incorrect. ANSI (American National Standards Institute) is the primary organization for fostering the development of technology standards in the United States. ANSI works with industry groups and is the U.S. member of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Long-established computer standards from ANSI include the American Standard Code for Information Interchange (ASCII) and the Small Computer System Interface (SCSI).

• Question 34:

  James is a network administrator working at a student loan company in Minnesota. This company processes over 20,000 student loans a year from colleges all over the state. Most communication between the company, schools, and lenders is carried out through emails. Much of the email communication used at his company contains sensitive information such as social security numbers. For this reason, James wants to utilize email encryption. Since a server-based PKI is not an option for him, he is looking for a low/no cost solution to encrypt emails. What should James use?

  A. James should utilize the free OTP software package.
  B. James can enforce mandatory HTTPS in the email clients to encrypt emails.
  C. James could use PGP as a free option for encrypting the company's emails.
  D. James can use MD5 algorithm to encrypt all the emails.
  C. James could use PGP as a free option for encrypting the company's emails.

• Question 35:

  Which of the following incident handling stage removes the root cause of the incident?

  A. Eradication
  B. Recovery
  C. Detection
  D. Containment
  A. Eradication

• Question 36:

  You have just set up a wireless network for customers at a coffee shop. Which of the following are good security measures to implement? Each correct answer represents a complete solution. (Choose two.)

  A. Using WPA encryption
  B. Not broadcasting SSID
  C. Using WEP encryption
  D. MAC filtering the router
  A. Using WPA encryption
  C. Using WEP encryption

  ---

  Explanation/Reference:

  With either encryption method (WEP or WPA), you can give the password to the customers who need it, and even change it frequently (daily if you like). So this won't be an inconvenience for the customers.

• Question 37:

  Which of the following statements are true about IPv6 network? Each correct answer represents a complete solution. Choose all that apply.

  A. It uses a longer subnet masks as those used for IPv4.
  B. The interoperability, the IPv4 addresses using the last 32 bits of the IPv6 address.
  C. It provides enhanced authentication and security.
  D. It uses 128-bit addresses.
  E. It's more of available IP addresses.
  B. The interoperability, the IPv4 addresses using the last 32 bits of the IPv6 address.
  C. It provides enhanced authentication and security.
  D. It uses 128-bit addresses.
  E. It's more of available IP addresses.

• Question 38:

  What is the correct order of activities that a IDS is supposed to attempt in order of detect an intrusion?

  A. Prevention, Intrusion Monitoring, intrusion Detection, Response
  B. Intrusion Detection, Response, Prevention, Intrusion Monitoring
  C. Intrusion Monitoring, Intrusion Detection, Response, Prevention
  D. Prevention, intrusion Detection, Response, Intrusion Monitoring
  A. Prevention, Intrusion Monitoring, intrusion Detection, Response

• Question 39:

  With which of the following flag sets does the Xmas tree scan send a TCP frame to a remote device? Each correct answer represents a part of the solution. Choose all that apply.

  A. PUSH
  B. RST
  C. FIN
  D. URG
  A. PUSH
  C. FIN
  D. URG

  ---

  Explanation/Reference:

  With the URG, PUSH, and FIN flag sets, the Xmas tree scan sends a TCP frame to a remote device. The Xmas tree scan is called an Xmas tree scan because the alternating bits are turned on and off in the flags byte (00101001), much like the lights of a Christmas tree. Answer option B is incorrect. The RST flag is not set when the Xmas tree scan sends a TCP frame to a remote device.

• Question 40:

  Which VPN QoS model guarantees the traffic from one customer edge (CE) to another?

  A. Pipe model
  B. Hose model
  C. AAA model
  D. Hub-and-Spoke VPN model
  A. Pipe model