Which among the following is used to limitthe number of cmdlets or administrative privileges of administrator, user, or service accounts?

Just Enough Administration (EA)

Windows Security Identifier (SID)

How is application whitelisting different from application blacklisting?

It rejects all applications other than the allowed applications

It allows all applications other than the undesirable applications

It allows execution of trusted applications in a unified environment

It allows execution of untrusted applications in an isolated environment

It rejects all applications other than the allowed applications

Which of the follow ng security models enable strict identity verification for every user or device attempting to access the network resources?

Zero-trust network model II. Castle-and-Moat model

Which of the Windows security component is responsible for controlling access of a user to Windows resources?

Local Security Authority Subsystem (LSASS)

Network Logon Service (Netlogon)

Security Accounts Manager (SAM)

Security Reference Monitor (SRM)

Local Security Authority Subsystem (LSASS)

John is working as a network defender at a well-reputed multinational company. He wanted to implement security that can help him identify any future attacks that can be targeted toward his organiza:ion and take appropriate security measures and actions beforehand to defend against them. Which one of the following security defense techniques should be implement?

Retrospective security approach

Which ofthe following is true regarding any attack surface?

Decrease in vulnerabilities decreases the attack surface

Increase in vulnerabilities decreases the attack surface

Decrease in risk exposures increases the attack surface

Decrease in vulnerabilities increases the attack surface

How is a "risk" represented?

Motive (goal) + method + vulnerability

John, a network administrator, is configuring Amazon EC2 cloud service for his organization. Identify the type of cloud service modules his organization adopted.

Infrastructure-as-a-Service (laaS)

Based on which ofthe following registry key, the Windows Event log audit configurations are recorded?

HKEY LOCAL MACHINE\SYSTEM\Services\EventLog\ < ErrDev>

HKEY LOCAL MACHINE\SYSTEM\CurrentControlSet\EventLog\ < EntAppsvc >

HKEY_LOCAL_MACHINE\CurrentControlSet\Services\EveniLog\< ESENT >

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\ < Event Log >

How can a WAF validate traffic before it reaches a web application?

It uses a rule-based filtering technique

It uses a role-based filtering technigue

It uses an access-based filtering technigue

It uses a sandboxing filtering technique

It uses a rule-based filtering technique

Which ofthe follow ng things need to be identified during attack surface visualization?

Attacker's tools, techniques, and procedures

Authentication, authorization, and auditing in networks

Regulatory frameworks, standards and, procedures for organizations

Assets, topologies, and policies ofthe organization

Which ofthe follow ng is not part ofthe recommended first response steps for network defenders?

Do not change the state ofthe suspected device

Restrict yours elf from doing the investigation

Extract relevant data from the suspected devices as early as possible

Do not change the state ofthe suspected device

Who is an IR custodian?

An individual who receives the initial IR alerts and leads the IR team in all the IR activities

An individual responsible for conveying company details after an incident

An individual who receives the initial IR alerts and leads the IR team in all the IR activities

An individual who makes a decision on the classifications and the severity of the incident identified

An individual responsible for the remediation and resolution of the incident that occurred

ECCouncil 312-38 Practice Test 13 - Free Online Exam Prep & Questions

DRAG DROP

George works as a Network Administrator for Blue Soft Inc. The company uses Windows Vista operating system. The network of the company is continuously connected to the Internet. What will George use to protect the network of the company from intrusion?

Select and Place:

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-38 Practice Test 13

Question

ECCouncil 312-38 Practice Tests

Practice Tests