Get New 2023 Valid Practice Certified Ethical Hacker 312-38 Q&A - Testing Engine
312-38 Dumps PDF - 100% Passing Guarantee
The EC-Council Certified Network Defender (CND) certification exam is designed to test the skills and knowledge of network administrators and security professionals. EC-Council Certified Network Defender CND certification is recognized worldwide as a symbol of expertise in network defense, and is highly sought after by employers. EC-Council Certified Network Defender CND certification exam covers a wide range of topics, including network defense fundamentals, network perimeter defense, network security threats, and network security solutions.
NEW QUESTION # 16
CORRECT TEXT
Fill in the blank with the appropriate term.
A ______________ is a term in computer terminology used for a trap that is set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems.
Answer:
Explanation:
honeypot
Explanation:
A honeypot is a term in computer terminology used for a trap that is set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer, data, or a network site that appears to be part of a network, but is actually isolated, and monitored, and which seems to contain information or a resource of value to attackers.
NEW QUESTION # 17
A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It
provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to
perform war dialing? Each correct answer represents a complete solution. Choose all that apply.
- A. ToneLoc
- B. THC-Scan
- C. Wingate
- D. NetStumbler
Answer: A,B
Explanation:
THC-Scan and ToneLoc are tools used for war dialing. A war dialer is a tool that is used to scan thousands of
telephone numbers to detect vulnerable modems. It provides the attacker unauthorized access to a computer.
Answer option D is incorrect. NetStumbler is a Windows-based tool that is used for the detection of wireless
LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. It detects wireless networks and marks their
relative position with a GPS. It uses an 802.11 Probe Request
that has been sent to the broadcast destination address.
Answer option B is incorrect. Wingate is a proxy server.
NEW QUESTION # 18
Albert works as a Windows system administrator at an MNC. He uses PowerShell logging to identify any suspicious scripting activity across the network. He wants to record pipeline execution details as PowerShell executes, including variable initialization and command invocations. Which PowerShell logging component records pipeline execution details as PowerShell executes?
- A. Event logging
- B. Transcript logging
- C. Module logging
- D. Script block logging
Answer: C
NEW QUESTION # 19
Management asked Adam to implement a system allowing employees to use the same credentials to access multiple applications. Adam should implement the--------------------------authentication technique to satisfy the management request.
- A. Smart Card Authentication
- B. Two-factor Authentication
- C. Biometric
- D. Single-sign-on
Answer: D
NEW QUESTION # 20
Which of the following fields in the IPv6 header is decremented by 1 for each router that forwards the packet?
- A. Next header
- B. Traffic class
- C. Hop limit
- D. Flow label
Answer: C
Explanation:
The hop limit field in the IPv6 header is decremented by 1 for each router that forwards a packet.
The packet is discarded when the hop limit field reaches zero.
Answer option B is incorrect. Next header is an 8-bit field that specifies the next encapsulated
protocol.
Answer option A is incorrect. Flow label is a 20-bit field that is used for specifying special router
handling from source to destination for a sequence of packets.
Answer option C is incorrect. Traffic class is an 8-bit field that specifies the Internet traffic priority
delivery value.
NEW QUESTION # 21
CORRECT TEXT
Fill in the blank with the appropriate term. ______________is a powerful and low-interaction open source honeypot.
Answer:
Explanation:
Honeyd
Explanation:
Honeyd is a powerful and low-interaction open source honeypot. It was released by Niels Provos in 2002. It was written in C and designed for Unix platforms. It introduced a variety of new concepts, including the ability to monitor millions of unused IPs, IP stack spoofing, etc. It can also simulate hundreds of operating systems and monitor all UDP and TCP-based ports.
NEW QUESTION # 22
Which of the following interfaces uses hot plugging technique to replace computer components without the need to shut down the system?
- A. SCSI
- B. SDRAM
- C. SATA
- D. IDE
Answer: A
NEW QUESTION # 23
Brendan wants to implement a hardware based RAID system in his network. He is thinking of choosing a suitable RAM type for the architectural setup in the system. The type he is interested in provides access times of up to 20 ns. Which type of RAM will he select for his RAID system?
- A. NAND flash memory
- B. SDRAM
- C. SRAM
- D. NVRAM
Answer: C
NEW QUESTION # 24
In which of the following transmission modes is communication bi-directional?
- A. Half-duplex mode
- B. Root mode
- C. Full-duplex mode
- D. Simplex mode
Answer: C
NEW QUESTION # 25
What command is used to terminate certain processes in an Ubuntu system?
- A. # netstat Kill [ Target Process]
- B. #grep Kill [Target Process]
- C. #kill -9 [PID]
- D. #ps ax Kill
Answer: C
NEW QUESTION # 26
Which of the following attacks are computer threats that try to exploit computer application vulnerabilities that are unknown to others or undisclosed to the software developer? Each correct answer represents a complete solution. Choose all that apply.
- A. Zero-hour
- B. Spoofing
- C. Zero-day
- D. Buffer overflow
Answer: A,C
NEW QUESTION # 27
Which of the following protocols is used for routing of voice conversation over the Internet?
- A. IP
- B. DHCP
- C. VoIP
- D. DNS
Answer: C
NEW QUESTION # 28
Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?
- A. Disaster recovery plan
- B. Continuity of Operations Plan
- C. Business continuity plan
- D. Contingency plan
Answer: D
NEW QUESTION # 29
Sophie has been working as a Windows network administrator at an MNC over the past 7 years.
She wants to check whether SMB1 is enabled or disabled. Which of the following command allows Sophie to do so?
- A. Get-WindowsOptionalFeatures -Online -FeatureNames SMB1Protocol
- B. Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
- C. Get-WindowsOptionalFeatures -Online -FeatureName SMB1Protocol
- D. Get-WindowsOptionalFeature -Online -FeatureNames SMB1Protocol
Answer: B
NEW QUESTION # 30
You are responsible for network functions and logical security throughout the corporation. Your company has over 250 servers running Windows Server 2012, 5000 workstations running Windows 10, and 200 mobile users working from laptops on Windows 8. Last week 10 of your company's laptops were stolen from a salesman, while at a conference in Barcelon a. These laptops contained proprietary company information. While doing a damage assessment, a news story leaks about a blog post containing information about the stolen laptops and the sensitive information. What built-in Windows feature could you have implemented to protect the sensitive information on these laptops?
- A. You should have implemented the Distributed File System (DFS).
- B. You should have used 3DES.
- C. If you would have implemented Pretty Good Privacy (PGP).
- D. You could have implemented the Encrypted File System (EFS)
Answer: D
NEW QUESTION # 31
Which of the following IEEE standards defines a physical bus topology?
- A. 802.4
- B. 802.5
- C. 802.3
- D. 802.6
Answer: A
NEW QUESTION # 32
Disaster Recovery is a _________.
- A. Security-centric strategy
- B. Business-centric strategy
- C. Data-centric strategy
- D. Operation-centric strategy
Answer: C
NEW QUESTION # 33
Which of the following representatives in the incident response process are included in the incident response team? Each correct answer represents a complete solution. Choose all that apply.
- A. Lead investigator
- B. Legal representative
- C. Information security representative
- D. Sales representative
- E. Technical representative
- F. Human resources
Answer: A,B,C,E,F
Explanation:
Incident response is a process that detects a problem, determines the cause of an issue, minimizes the damages, resolves the problem, and documents each step of process for future reference. To perform all these roles, an incident response team is needed. The incident response team includes the following representatives who are involved in the incident response process: Lead investigator: The lead investigator is the manager of an incident response team. He is always involved in the creation of an incident response plan. The duties of a lead investigator are as follows:Keep the management updated.Ensure that the incident response moves smoothly and efficiently.Interview and interrogate the suspects and witnesses. Information security representative: The information security representative is a member of the incident response team who alerts the team about possible security safeguards that can impact their ability to respond to an incident. Legal representative: The legal representative is a member of the incident response team who ensures that the process follows all the laws during the response to an incident. Technical representative: Technical representative is a representative of the incident response team. More than one technician can be deployed to an incident. The duties of a technical representative are as follows:Perform forensic backups of the systems that are involved in an incident. Provide more information about the configuration of the network or system. Human resources: Human resources personnel ensure that the policies of the organization are enforced during the incident response process. They suspend access to a suspect if it is needed. Human resources personnel are closely related with the legal representatives and cover up the organization's legal responsibility.
NEW QUESTION # 34
Henry needs to design a backup strategy for the organization with no service level downtime.
Which backup method will he select?
- A. Hot backup
- B. Warm backup
- C. Normal backup
- D. Cold backup
Answer: A
NEW QUESTION # 35
Which of the following are the six different phases of the Incident handling process? Each correct answer represents a complete solution. Choose all that apply.
- A. Eradication
- B. Identification
- C. Lessons learned
- D. Recovery
- E. Containment
- F. Preparation
- G. Post mortem review
Answer: A,B,C,D,E,F
NEW QUESTION # 36
You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from a certain region. You suspect a DoS incident on the network. What will be your first reaction as a first responder?
- A. Make an initial assessment
- B. Communicate the incident
- C. Avoid Fear, Uncertainty and Doubt
- D. Disable Virus Protection
Answer: C
NEW QUESTION # 37
------------is a group of broadband wireless communications standards for Metropolitan Area Networks (MANs)
- A. 802.15.4
- B. 802.12
- C. 802.15
- D. 802.16
Answer: D
NEW QUESTION # 38
Which of the following is a communication protocol that multicasts messages and information among all member devices in an IP multicast group?
- A. EGP
- B. IGMP
- C. ICMP
- D. BGP
Answer: B
Explanation:
Internet Group Management Protocol (IGMP) is a communication protocol that multicasts messages and information among all member devices in an IP multicast group. However, multicast traffic is sent to a single MAC address but is processed by multiple hosts. It can be effectively used for gaming and showing online videos. IGMP is vulnerable to network attacks. Answer option A is incorrect. Internet Control Message Protocol (ICMP) is a maintenance protocol that allows routers and host computers to swap basic control information when data is sent from one computer to another. It is generally considered a part of the IP layer. It allows the computers on a network to share error and status information. An ICMP message, which is encapsulated within an IP datagram, is very useful to troubleshoot the network connectivity and can be routed throughout the Internet. Answer option C is incorrect. BGP stands for Border Gateway Protocol. It is an interautonomous system routing protocol and is a form of Exterior Gateway Protocol (EGP). This protocol is defined in RFC-1267 and RFC-1268. It is used for exchanging network reachability information with other BGP systems. This information includes a complete list of intermediate autonomous systems that the network traffic has to cover in order to reach a particular network. This information is used for figuring out loop-free interdomain routing between autonomous systems. BGP-4 is the latest version of BGP. Answer option D is incorrect. Exterior Gateway Protocol (EGP) is a protocol that exchanges routing information between different autonomous systems. It is commonly used between hosts on the Internet to exchange routing table information. Border Gateway Protocol (BGP) is the only active EGP.
NEW QUESTION # 39
Which of the following is an Internet application protocol used for transporting Usenet news articles between news servers and for reading and posting articles by end-user client applications?
- A. NTP
- B. NNTP
- C. DCAP
- D. BOOTP
Answer: B
NEW QUESTION # 40
If a network is at risk resulting from misconfiguration performed by unskilled and/or unqualified individuals, what type of threat is this?
- A. Internal Threats
- B. Structured Threats
- C. Unstructured Threats
- D. External Threats
Answer: C
NEW QUESTION # 41
......
312-38 Braindumps Real Exam Updated on Sep 01, 2023 with 171 Questions: https://pass4sure.exam-killer.com/312-38-valid-questions.html
