Which NIST Incident category includes any activity that seeks to access or identify a federal agency computer, open ports, protocols, service or any combination for later exploit?

Scans/ Probes/ Attempted Access

You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from a certain region.You suspect a DoS incident on the network. What will be your first reaction as a first responder?

Avoid Fear, Uncertainty and Doubt

What is the best way to describe a mesh network topology?

A network in which every computer in the network has a connection to each and every computer in the network.

A network in which every computer meshes together to form a hybrid between a star and bus topology.

A network in which every computer in the network can communicate with a single central computer.

A network that is extremely cost efficient, offering the best option for allowing computers to communicate amongst each other.

A network designer needs to submit a proposal for a company, which has just published a web portal for its clients on the internet. Such a server needs to be isolated from the internal network, placing itself in a DMZ. Faced with this need, the designer will present a proposal for a firewall with three interfaces, one for the internet network, another for the DMZ server farm and another for the internal network. What kind of topology will the designer propose?

DMZ, External-Internal firewall

The bank where you work has 600 windows computers and 400 Red Hat computers which primarily serve as bank teller consoles. You have created a plan and deployed all the patches to the Windows computers and you are now working on updating the Red Hat computers. What command should you run on the network to update the Red Hat computers, download the security package, force the package installation, and update all currently installed packages?

You should run the up2date --d -f -u command.

You should run the up2data -u command.

You should run the up2date --d -f -u command.

You should run the WSUS --d -f -u command.

You should type the sysupdate --d command.

Dan and Alex are business partners working together. Their Business-Partner Policy states that they should encrypt their emails before sending to each other.How will they ensure the authenticity of their emails?

Dan will use his digital signature to sign his mails while Alex will use Dan's public key to verify the authenticity of the mails.

Dan will use his digital signature to sign his mails while Alex will use his private key to verify the authenticity of the mails.

Dan will use his private key to encrypt his mails while Alex will use his digital signature to verify the authenticity of the mails.

Dan will use his public key to encrypt his mails while Alex will use Dan's digital signature to verify the authenticity of the mails.

A VPN Concentrator acts as a bidirectional tunnel endpoint among host machines. What are the other function(s) of the device? (Choose all that apply.)

Enables input/output (I/O) operations

Provides access memory, achieving high efficiency

What command is used to terminate certain processes in an Ubuntu system?

# netstat Kill [ Target Process]

Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website. After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered. What tool could Simon and his administrators implement to accomplish this?

Snort is the best tool for their situation.

Chris is a senior network administrator. Chris wants to measure the Key Risk Indicator (KRI) to assess the organization. Why is Chris calculating the KRI for his organization? It helps Chris to:

Notifies when risk has reached threshold levels

Facilitates post incident management

Bryson is the IT manager and sole IT employee working for a federal agency in California. The agency was just given a grant and was able to hire on 30 more employees for a new extended project. Because of this, Bryson has hired on two more IT employees to train up and work. Both of his new hires are straight out of college and do not have any practical IT experience. Bryson has spent the last two weeks teaching the new employees the basics of computers, networking, troubleshooting techniques etc. To see how these two new hires are doing, he asks them at what layer of the OSI model do Network Interface Cards (NIC) work on. What should the new employees answer?

They should tell Bryson that NICs perform on the Physical layer.

They should answer with the Presentation layer.

NICs work on the Session layer of the OSI model.

They should tell Bryson that NICs perform on the Physical layer.

The new employees should say that NICs perform on the Network layer.

Ivan needs to pick an encryption method that is scalable even though it might be slower. He has settled on a method that works where one key is public and the other is private. What encryption method did Ivan settle on?

Ivan settled on the asymmetric encryption method.

Ivan settled on the hashing encryption method.

Ivan settled on the asymmetric encryption method.

Ivan settled on the private encryption method.

Ivan settled on the symmetric encryption method.

The agency Jacob works for stores and transmits vast amounts of sensitive government data that cannot be compromised. Jacob has implemented Encapsulating Security Payload (ESP) to encrypt IP traffic. Jacob wants to encrypt the IP traffic by inserting the ESP header in the IP datagram before the transport layer protocol header. What mode of ESP does Jacob need to use to encrypt the IP traffic?

Jacob should utilize ESP in tunnel mode.

Jacob should use ESP in pass-through mode.

Jacob should utilize ESP in tunnel mode.

He should use ESP in gateway mode.

He should use ESP in transport mode.

ECCouncil 312-38 Practice Test 12 - Free Online Exam Prep & Questions

An attacker has access to password hashes of a windows 7 computer. Which of the following attacks can the attacker use to reveal the passwords?

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-38 Practice Test 12

Question

ECCouncil 312-38 Practice Tests

Practice Tests