EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 551:

  Which of the following are provided by digital signatures?

  A. Identification and validation
  B. Authentication and identification
  C. Integrity and validation
  D. Security and integrity
  B. Authentication and identification

• Question 552:

  Which of the following is a free security-auditing tool for Linux?

  A. SAINT
  B. SATAN
  C. Nessus
  D. HPing
  C. Nessus

• Question 553:

  Which of the following VPN topologies establishes a persistent connection between an organization's main office and its branch offices using a third-party network or the Internet?

  A. Hub-and-Spoke
  B. Full Mesh
  C. Point-to-Point
  D. Star
  A. Hub-and-Spoke

• Question 554:

  Which of the following is a technique for gathering information about a remote network protected by a firewall?

  A. Firewalking
  B. Warchalking
  C. Wardriving
  D. Wardialing
  A. Firewalking

  ---

  Explanation/Reference:

  Fire walking is a technique for gathering information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. If the firewall allows this crafted packet through, it forwards the packet to the next hop. On the next hop, the packet expires and elicits an ICMP "TTL expired in transit" message to the attacker. If the firewall does not allow the traffic, there should be no response, or an ICMP "administratively prohibited" message should be returned to the attacker. A malicious attacker can use firewalking to determine the types of ports/ protocols that can bypass the firewall. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall. The main drawback of this technique is that if an administrator blocks ICMP packets from leaving the network, it is ineffective. Answer option B is incorrect. Warchalking is the drawing of symbols in public places to advertise an open Wi-Fi wireless network. Having found a Wi-Fi node, the warchalker draws a special symbol on a nearby object, such as a wall, the pavement, or a lamp post. The name warchalking is derived from the cracker terms war dialing and war driving. Answer option C is incorrect. War driving, also called access point mapping, is the act of locating and possibly exploiting connections to wireless local area networks while driving around a city or elsewhere. To do war driving, one needs a vehicle, a computer (which can be a laptop), a wireless Ethernet card set to work in promiscuous mode, and some kind of an antenna which can be mounted on top of or positioned inside the car. Because a wireless LAN may have a range that extends beyond an office building, an outside user may be able to intrude into the network, obtain a free Internet connection, and possibly gain access to company records and other resources. Answer option D is incorrect. War dialing or wardialing is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems, and fax machines. Hackers use the resulting lists for various purposes, hobbyists for exploration, and crackers - hackers that specialize in computer security - for password guessing.

• Question 555:

  Which of the following is a session layer protocol?

  A. RPC
  B. SLP
  C. RDP
  D. ICMP
  A. RPC

• Question 556:

  The CEO of Max Rager wants to send a confidential message regarding the new formula for its coveted soft drink, SuperMax, to its manufacturer in Texas. However, he fears the message could be altered in transit. How can he prevent this incident from happening and what element of the message ensures the success of this method?

  A. Hashing; hash code
  B. Symmetric encryption; secret key
  C. Hashing; public key
  D. Asymmetric encryption; public key
  A. Hashing; hash code

• Question 557:

  Token Ring is standardized by which of the following IEEE standards?

  A. 802.2
  B. 802.4
  C. 802.3
  D. 802.1
  B. 802.4

• Question 558:

  John is a network administrator and is monitoring his network traffic with the help of Wireshark. He suspects that someone from outside is making a TCP OS fingerprinting attempt on his organization's network. Which of following Wireshark filter(s) will he use to locate the TCP OS fingerprinting attempt? (Choose all that apply.)

  A. tcp.flags=0x00
  B. tcp.options.wscale_val==20
  C. tcp.flags==0x2b
  D. tcp.options.mss_val
  A. tcp.flags=0x00
  C. tcp.flags==0x2b
  D. tcp.options.mss_val

• Question 559:

  What is the best way to describe a mesh network topology?

  A. A network in which every computer in the network has a connection to each and every computer in the network.
  B. A network in which every computer meshes together to form a hybrid between a star and bus topology.
  C. A network in which every computer in the network can communicate with a single central computer.
  D. A network that is extremely cost efficient, offering the best option for allowing computers to communicate amongst each other.
  A. A network in which every computer in the network has a connection to each and every computer in the network.

• Question 560:

  Which of the following security models enable strict identity verification for every user or device attempting to access the network resources?

  I. Zero-trust network model

  II.

  Castle-and-Moat model

  A. Both I and II
  B. I only
  C. II only
  D. None
  I. Zero-trust network model II. Castle-and-Moat model
  B. I only

  ---

  Explanation/Reference: