Daniel who works as a network administrator has just deployed an IDS in his organization's network. He wants to calculate the False Positive rate for his implementation. Which of the following formulas will he use, to calculate the False Positive rate?

False Positive/False Positive+True Negative

False Negative/True Negative+True Positive

False Positive/False Positive+True Negative

True Negative/False Negative+True Positive

False Negative/False Negative+True Positive

John has successfully remediated the vulnerability of an internal application that could have caused a threat to the network. He is scanning the application for the existence of a remediated vulnerability, this process is called a __________ and it has to adhere to the __________.

Verification, Security Policies

Vulnerability scanning, Risk Analysis

Which filter to locate unusual ICMP request an Analyst can use in order to detect a ICMP probes from the attacker to a target OS looking for the response to perform ICMP based fingerprinting?

(icmp.type==8 && ((!(icmp.code==8))

(icmp.type==9 && ((!(icmp.code==9))

(icmp.type==8 && ((!(icmp.code==8))

(icmp.type==12) | | (icmp.type==15| |(icmp.type==17)

(icmp.type==14) | | (icmp.type==15| |(icmp.type==17)

You are using Wireshark to monitor your network traffic and you see a lot of packages with the FIN, PUSH and URG flags activated; what can you infer about this behavior?

An attacker is running a XMAS scan against the network

The Layer 3 Controls are activated in the Switches

The Spanning Tree Protocol is activated in the Switches

One NIC is broadcasting erroneous traffic

An attacker is running a XMAS scan against the network

The GMT enterprise is working on their internet and web usage policies. GMT would like to control internet bandwidth consumption by employees. Which group of policies would this belong to?

Enterprise Information Security Policy

Network Services Specific Security Policy

System Specific Security Policy

Steven's company has recently grown from 5 employees to over 50. Every workstation has a public IP address and navigated to the Internet with little to no protection. Steven wants to use a firewall. He also wants IP addresses to be private addresses, to prevent public Internet devices direct access to them. What should Steven implement on the firewall to ensure this happens?

Steven should use a Demilitarized Zone (DMZ).

Steven should use Open Shortest Path First (OSPF).

Steven should enable Network Address Translation (NAT).

Steven should use a Demilitarized Zone (DMZ).

Assume that you are a network administrator and the company has asked you to draft an Acceptable Use Policy (AUP) for employees. Under which category of an information security policy does AUP fall into?

System Specific Security Policy (SSSP)

Issue Specific Security Policy (ISSP)

Enterprise Information Security Policy (EISP)

System Specific Security Policy (SSSP)

During the recovery process, RTO and RPO should be the main parameters of your disaster recovery plan. What does RPO refer to?

The duration required to restore the data

The encryption feature, acting as add-on security to the data

The hot plugging technique used to replace computer components

The duration required to restore the data

The interval after which the data quality is lost

Which of the following is the full form of SAINT?

System Administrators Integrated Network Tool

System Automated Integrated Network Tool

Security Admin Integrated Network Tool

System Admin Integrated Network Tool

System Administrators Integrated Network Tool

Which of the following phases is the first step towards creating a business continuity plan?

Business Continuity Plan Development

Plan Approval and Implementation

James is a network administrator working at a student loan company in Minnesota. This company processes over 20,000 student loans a year from colleges all over the state. Most communication between the company, schools, and lenders is carried out through emails. Much of the email communication used at his company contains sensitive information such as social security numbers. For this reason, James wants to utilize email encryption. Since a server-based PKI is not an option for him, he is looking for a low/no cost solution to encrypt emails. What should James use?

James could use PGP as a free option for encrypting the company's emails.

James should utilize the free OTP software package.

James can enforce mandatory HTTPS in the email clients to encrypt emails.

James could use PGP as a free option for encrypting the company's emails.

James can use MD5 algorithm to encrypt all the emails.

John, the network administrator and he wants to enable the NetFlow feature in Cisco routers to collect and monitor the IP network traffic passing through the router. Which command will John use to enable NetFlow on an interface?

Router(Config-if) # IP route cache flow

Justine has been tasked by her supervisor to ensure that the company's physical security is on the same level as their logical security measures. She installs video cameras at all entrances and exits and installs badge access points for all doors. The last item she wants to install is a method to prevent unauthorized people piggybacking employees. What should she install to prevent piggybacking?

Justine needs to install a biometrics station at each entrance.

She should install a Thompson Trapdoor.

Justine will need to install a revolving security door.

ECCouncil 312-38 Practice Test 11 - Free Online Exam Questions 401-440

Which protocol could choose the network administrator for the wireless network design, if he need to satisfied the minimum requirement of 2.4 GHz, 22 MHz of bandwidth, 2 Mbits/s stream for data rate and use DSSS for modulation.

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-38 Practice Test 11

Question

ECCouncil 312-38 Practice Tests

Practice Tests