EC-COUNCIL 312-38 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-38 Online Questions & Answers

• Question 591:

  James was inspecting ARP packets in his organization's network traffic with the help of Wireshark. He is checking the volume of traffic containing ARP requests as well as the source IP address from which they are originating. Which type of attack is James analyzing?

  A. ARP Sweep
  B. ARP misconfiguration
  C. ARP spoofinq
  D. ARP Poisioning
  A. ARP Sweep

• Question 592:

  Fill in the blank with the appropriate term.

  A gateway is a type of network gateway that provides the added capability to control devices across the Internet.

  home automation

  Explanation/Reference:

  A home automation gateway is a type of network gateway that provides the added capability to control devices across the Internet. Most gateways plug in to the home broadband router (and a wall outlet for power). When connected to a router that has Internet connectivity, the automation gateway helps in enabling computers and Web-enabled phones to remotely access automation devices at home.

• Question 593:

  Which of the following helps in viewing account activity and events for supported services made by AWS?

  A. AWS CloudFormation
  B. AWS Certificate Manager
  C. AWS CloudHSM
  D. AWS CloudTrial
  D. AWS CloudTrial

• Question 594:

  Dan and Alex are business partners working together. Their Business-Partner Policy states that they should encrypt their emails before sending to each other. How will they ensure the authenticity of their emails?

  A. Dan will use his digital signature to sign his mails while Alex will use Dan's public key to verify the authenticity of the mails.
  B. Dan will use his digital signature to sign his mails while Alex will use his private key to verify the authenticity of the mails.
  C. Dan will use his private key to encrypt his mails while Alex will use his digital signature to verify the authenticity of the mails.
  D. Dan will use his public key to encrypt his mails while Alex will use Dan's digital signature to verify the authenticity of the mails.
  A. Dan will use his digital signature to sign his mails while Alex will use Dan's public key to verify the authenticity of the mails.

• Question 595:

  Which of the following is a network that supports mobile communications across an arbitrary number of wireless LANs and satellite coverage areas?

  A. LAN
  B. WAN
  C. GAN
  D. HAN
  C. GAN

  ---

  Explanation/Reference:

  A global area network (GAN) is a network that is used for supporting mobile communications across an arbitrary number of wireless LANs, satellite coverage areas, etc. The key challenge in mobile communications is handing off the user communications from one local coverage area to the next. Answer option B is incorrect. A wide area network (WAN) is a geographically dispersed telecommunications network. The term distinguishes a broader telecommunication structure from a local area network (LAN). A wide area network may be privately owned or rented, but the term usually connotes the inclusion of public (shared user) networks. An intermediate form of network in terms of geography is a metropolitan area network (MAN). A wide area network is also defined as a network of networks, as it interconnects LANs over a wide geographical area. Answer option D is incorrect. A home area network (HAN) is a residential LAN that is used for communication between digital devices typically deployed in the home, usually a small number of personal computers and accessories, such as printers and mobile computing devices. Answer option A is incorrect. The Local Area Network (LAN) is a group of computers connected within a restricted geographic area, such as residence, educational institute, research lab, and various other organizations. It allows the users to share files and services, and is commonly used for intra-office communication. The LAN has connections with other LANs via leased lines, leased services, or by tunneling across the Internet using the virtual private network technologies.

• Question 596:

  Which of the following types of coaxial cable is used for cable TV and cable modems?

  A. RG-62
  B. RG-59
  C. RG-58
  D. RG-8
  B. RG-59

  ---

  Explanation/Reference:

  RG-59 type of coaxial cable is used for cable TV and cable modems.

  Answer option D is incorrect. RG-8 coaxial cable is primarily used as a backbone in an Ethernet LAN environment and often connects one wiring closet to another. It is also known as 10Base5 or ThickNet.

  Answer option A is incorrect. RG-62 coaxial cable is used for ARCNET and automotive radio antennas.

  Answer option C is incorrect. RG-58 coaxial cable is used for Ethernet networks. It uses baseband signaling and 50-Ohm terminator. It is also known as 10Base2 or ThinNet.

• Question 597:

  DRAG DROP

  Drag and drop the terms to match with their descriptions.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Following are the terms with their descriptions:

  

• Question 598:

  Which of the following steps of the OPSEC process examines each aspect of the planned operation to identify OPSEC indicators that could reveal critical information and then compare those indicators with the adversary's intelligence collection capabilities identified in the previous action?

  A. Analysis of Threats
  B. Analysis of Vulnerabilities
  C. Assessment of Risk
  D. Identification of Critical Information
  E. Application of Appropriate OPSEC Measures
  B. Analysis of Vulnerabilities

  ---

  Explanation/Reference:

  OPSEC is a 5-step process that helps in developing protection mechanisms in order to safeguard sensitive information and preserve essential secrecy. The OPSEC process has five steps, which are as follows: 1.Identification of Critical Information: This step includes identifying information vitally needed by an adversary, which focuses the remainder of the OPSEC process on protecting vital information, rather than attempting to protect all classified or sensitive unclassified information. 2.Analysis of Threats: This step includes the research and analysis of intelligence, counter-intelligence, and open source information to identify likely adversaries to a planned operation. 3.Analysis of Vulnerabilities: It includes examining each aspect of the planned operation to identify OPSEC indicators that could reveal critical information and then comparing those indicators with the adversary's intelligence collection capabilities identified in the previous action. 4.Assessment of Risk: Firstly, planners analyze the vulnerabilities identified in the previous action and identify possible OPSEC measures for each vulnerability. Secondly, specific OPSEC measures are selected for execution based upon a risk assessment done by the commander and staff. 5.Application of Appropriate OPSEC Measures: The command implements the OPSEC measures selected in the assessment of risk action or, in the case of planned future operations and activities, includes the measures in specific OPSEC plans.

• Question 599:

  Which of the following is a Unix and Windows tool capable of intercepting traffic on a network segment and capturing username and password?

  A. AirSnort
  B. Ettercap
  C. BackTrack
  D. Aircrack
  B. Ettercap

  ---

  Explanation/Reference:

  Ettercap is a Unix and Windows tool for computer network protocol analysis and security auditing. It is capable of intercepting traffic on a network segment, capturing passwords, and conducting active eavesdropping against a number of

  common protocols. It is a free open source software. Ettercap supports active and passive dissection of many protocols (including ciphered ones) and provides many features for network and host analysis. Answer option C is incorrect.

  BackTrack is a Linux distribution distributed as a Live CD, which is used for penetration testing. It allows users to include customizable scripts, additional tools and configurable kernels in personalized distributions. It contains various tools,

  such as Metasploit integration, RFMON injection capable wireless drivers, kismet, autoscan-network (network discovering and managing application), nmap, ettercap, wireshark (formerly known as Ethereal).

  Answer option A is incorrect. AirSnort is a Linux-based WLAN WEP cracking tool that recovers encryption keys. AirSnort operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10

  million packets to decrypt the WEP keys. Answer option D is incorrect. Aircrack is the fastest WEP/WPA cracking tool used for 802.11a/b/g WEP and WPA cracking.

• Question 600:

  Which of the following is a passive attack?

  A. Unauthorized access
  B. Traffic analysis
  C. Replay attack
  D. Session hijacking
  B. Traffic analysis