Which of the following are valid steps to secure routers? Each correct answer represents a complete solution. Choose all that apply.

Keep routers updated with the latest security updates.

Configure access list entries to prevent unauthorized connections and routing.

Use a complex password of the router management console.

Keep routers updated with the latest security updates.

Use a password that is easy to remember the router's administrative console.

Configure access list entries to prevent unauthorized connections and routing.

Use a complex password of the router management console.

Adam, malicious hacker, has just succeeded in stealing through a secure cookie XSS attack. He is able to play back the cookie even if the session is valid on the server. Which of the following is the most likely cause of this issue?

Encryption is performed at the application level (one encryption key).

Scrambling is performed in the network (layer 1 encryption)

You are an IT security consultant working on a contract for a large manufacturing company to audit their entire network. After performing all the tests and building your report, you present a number of recommendations to the company and what they should implement to become more secure. One recommendation is to install a network-based device that notifies IT employees whenever malicious or questionable traffic is found. From your talks with the company, you know that they do not want a device that actually drops traffic completely, they only want notification. What type of device are you suggesting?

A NIDS device would work best for the company.

A HIPS device would best suite this company.

The best solution to cover the needs of this company would be a HIDS device.

You are suggesting a NIPS device.

Cindy is the network security administrator for her company. She just got back from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. She is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs respond with a SYN/ACK response. Before the connection is established, she sends RST packets to those hosts to stop the session. She has done this to see how her intrusion detection system will log the traffic. What type of scan is Cindy attempting here?

Cindy is using a half-open scan to find live hosts on her network.

The type of scan she is using is called a NULL scan.

Cindy is attempting to find live hosts on her company's network by using a XMAS scan.

Cindy is using a half-open scan to find live hosts on her network.

She is utilizing a RST scan to find live hosts that are listening on her network.

According to the company's security policy, all access to any network resources must use Windows Active Directory Authentication. A Linux server was recently installed to run virtual servers and it is not using Windows Authentication.What needs to happen to force this server to use Windows Authentication?

Edit the PAM file to enforce Windows Authentication.

Remove the /var/bin/localauth.conf file.

Edit the PAM file to enforce Windows Authentication.

Heather has been tasked with setting up and implementing VPN tunnels to remote offices. She will most likely be implementing IPsec VPN tunnels to connect the offices. At what layer of the OSI model does an IPsec tunnel function on?

They work on the network layer.

They function on the data link layer.

They work on the network layer.

They function on either the application or the physical layer.

They work on the session layer.

Which of the following attack signature analysis techniques are implemented to examine the header information and conclude that a packet has been altered?

Context-based signature analysis

Composite signature-based analysis

Atomic signature-based analysis

Content-based signature analysis

Context-based signature analysis

Lyle is the IT director for a medium-sized food service supply company in Nebraska. Lyle's company employs over 300 workers, half of which use computers. He recently came back from a security training seminar on logical security. He now wants to ensure his company is as secure as possible. Lyle has many network nodes and workstation nodes across the network. He does not have much time for implementing a network-wide solution. He is primarily concerned about preventing any external attacks on the network by using a solution that can drop packets if they are found to be malicious. Lyle also wants this solution to be easy to implement and be network-wide. What type of solution would be best for Lyle?

Lyle would be best suited if he chose a NIPS implementation.

He should choose a HIPS solution, as this is best suited to his needs.

Lyle would be best suited if he chose a NIPS implementation.

A NEPT implementation would be the best choice.

To better serve the security needs of his company, Lyle should use a HIDS system.

Which of the following is a best practice for wireless network security?

Do not placing packet filter between the AP and the corporate intranet

Do not changing the default SSID

Enabling the remote router login

Daniel is giving training on designing and implementing a security policy in the organization. He is explaining the hierarchy of the security policy which demonstrates how policies are drafted, designed and implemented. What is the correct hierarchy for a security policy implementation?

Laws, Regulations, Policies, Standards and Procedures

Procedures, Policies, Laws, Standards and Regulations

Laws, Regulations, Policies, Standards and Procedures

Regulations, Policies, Laws, Standards and Procedures

Laws, Policies, Regulations, Procedures and Standards

Assume that you are working as a network administrator in the head office of a bank. One day a bank employee informed you that she is unable to log in to her system. At the same time, you get a call from another network administrator informing you that there is a problem connecting to the main server. How will you prioritize these two incidents?

Based on a potential technical effect of the incident

Based on a first come first served basis

Based on the type of response needed for the incident

Based on a potential technical effect of the incident

Based on approval from management

Smith is an IT technician that has been appointed to his company's network vulnerability assessment team. He is the only IT employee on the team. The other team members include employees from Accounting, Management, Shipping, and Marketing. Smith and the team members are having their first meeting to discuss how they will proceed. What is the first step they should do to create the network vulnerability assessment plan?

Their first step is the acquisition of required documents, reviewing of security policies and compliance.

Their first step is to create an initial Executive report to show the management team.

Their first step is to make a hypothesis of what their final findings will be.

Their first step is to analyze the data they have currently gathered from the company or interviews.

Ross manages 30 employees and only 25 computers in the organization. The network the company uses is a peer-to-peer. Ross configures access control measures allowing the employees to set their own control measures for their files and folders. Which access control did Ross implement?

Non-discretionary access control

Fred is a network technician working for Johnson Services, a temporary employment agency in Boston. Johnson Services has three remote offices in New England and the headquarters in Boston where Fred works. The company relies on a number of customized applications to perform daily tasks and unfortunately these applications require users to be local administrators. Because of this, Fred's supervisor wants to implement tighter security measures in other areas to compensate for the inherent risks in making those users local admins. Fred's boss wants a solution that will be placed on all computers throughout the company and monitored by Fred. This solution will gather information on all network traffic to and from the local computers without actually affecting the traffic. What type of solution does Fred's boss want to implement?

Fred's boss wants to implement a HIDS solution.

Fred's boss wants Fred to monitor a NIPS system.

Fred's boss wants to implement a HIDS solution.

Fred's boss wants a NIDS implementation.

Fred's boss wants to implement a HIPS solution.

What is the correct order of activities that a IDS is supposed to attempt in order of detect an intrusion?

Prevention, Intrusion Monitoring, intrusion Detection, Response

Intrusion Detection, Response, Prevention, Intrusion Monitoring

Intrusion Monitoring, Intrusion Detection, Response, Prevention

Prevention, intrusion Detection, Response, Intrusion Monitoring

Larry is a network administrator working for a manufacturing company in Detroit. Larry is responsible for the entire company's network which consists of 300 workstations and 25 servers. After using a hosted email service for a year, the company wants to cut back on costs and bring the email control internal. Larry likes this idea because it will give him more control over email. Larry wants to purchase a server for email but he does not want the server to be on the internal network because this might cause security risks. He decides to place the email server on the outside of the company's internal firewall. There is another firewall connected directly to the Internet that will protect some traffic from accessing the email server; the server will essentially be place between the two firewalls.What logical area is Larry going to place the new email server into?

He is going to place the server in a Demilitarized Zone (DMZ).

He will put the email server in an IPSec zone.

For security reasons, Larry is going to place the email server in the company's Logical Buffer Zone (LBZ).

Larry is going to put the email server in a hot-server zone.

Management decides to implement a risk management system to reduce and maintain the organization's risk at an acceptable level. Which of the following is the correct order in the risk management phase?

Risk Identification, Risk Assessment, Risk Treatment, Risk Monitoring & Review

Risk Identification, Risk Assessment, Risk Monitoring & Review, Risk Treatment

Risk Treatment, Risk Monitoring & Review, Risk Identification, Risk Assessment

Risk Assessment, Risk Treatment, Risk Monitoring & Review, Risk Identification

ECCouncil 312-38 Practice Test 10 - Free Online Exam Questions 361-400

Which of the following statements are true about IPv6 network? Each correct answer represents a complete solution. Choose all that apply.

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-38 Practice Test 10

Question

ECCouncil 312-38 Practice Tests

Practice Tests