Choose the correct order of steps to analyze the attack surface.

Visualize the attack surface->identify the indicators of exposure->simulate the attack->reduce the attack surface

Identify the indicators of exposure->visualize the attack surface->simulate the attack->reduce the attack surface

Visualize the attack surface->simulate the attack-identify the indicators of expos ure->reduce the attack surface

Identify the indicators of exposure->simulate the attack->visialize the attack surfaces reduce the attack surface

Visualize the attack surface->identify the indicators of exposure->simulate the attack->reduce the attack surface

Leslie, the network administrator of Livewire Technologies, has been recommending multilayer inspection firewalls to deploy the company's infrastructure. What layers of the TCP/IP model can it pro:ect?

Application, IP, and network interface

IP, application, and network interface

Network i nterface, TCP, and IP

Application, IP, and network interface

Fargo, head of network defense at Globadyne Tech, has discovered an undesirable process in several Linux systems, which causes machines to hang every 1 hour. Fargo would like to eliminate it; what command should he execute?

# update-rc.d -f [service name] remove

# ps ax | grep [Target Process]

Elden is working as a network administrator at an IT company. His organization opted for a virtualization technique in which the guest OS is aware of the virtual environment in which itis running and communicates with the host machinesfor requesting resources. Identify the virtualization technique implemented by Elden's organization.

Hardware-assisted virtualization

How can one identify the baseline for normal traffic?

When the SYN flag appears at the beginning and the FIN flag appears at the end of the connection

When the RST flag appears at the beginning and the ACK flag appears atthe end of the connection

When the ACK flag appears atthe beginning and the RST flag appears atthe end of the connection

When the FIN flag appears at the beginning and the SYN flag appears at the end ofthe connection

Sophie has been working as a Windows network administrator at an MNC over the past 7 years. She wants to check whether SMB1 is enabled or disabled.Which ofthe following command allows Scphie to do so?

Get-WindowsOptionalFeature -Online -FeatureName SMB1 Protocol

Get-WindowsOptionalFeatures -Online -FeatureNames SMB1 Protocol

Get-WindowsOptionalFeature -Online -FeatureName SMB1 Protocol

Get-WindowsOptionalFeature -Online -FeatureNames SMB1 Protocol

Get-WindowsOptionalFeatures -Online -FeatureName SMB1 Proto col

How is an "attack" represented?

Motive (goal) + method + vulnerability

Steven is a Linux system administrator at an IT company. He wants to disable unnecessary services in the system, which can be exploited by the attackers.Which among the following is the correct syntax for disabling a service?

$ sudo systemctl disable [service]

$ sudo system-ctl disable [servicel

$ sudo systemctl disable [service]

$ sudo system.dl disable [service]

$ sudo system dl disable [service]

Which of the following statement holds true in terms of containers?

Process-level isolation happens; a container in hence less secure

Container requires more memory space

Each container runs in its own OS

Container is fully isolated; hence, more secure

Process-level isolation happens; a container in hence less secure

Byron, a new network administrator at FBI, would like to ensure that Windows PCs there are up-to-date and have less internal security flaws. What can he do?

Install antivirus software and turn off unnecessary services

Centrally assign Windows PC group policies

Dedicate a partition on HDD and format the disk using NTFS

Download and install latest patches and enable Windows Automatic Updates

Install antivirus software and turn off unnecessary services

Which of the following entities is responsible for cloud security?

Both cloud consumer and provider

If an organization has decided to consume PaaS Cloud service model, then identify the organization's responsibility that they need to look after based on shared responsibility model.

Data, interfaces, application, etc.

Data, interfaces, application, middleware, OS, VM, virtual network, etc.

Data, interfaces, application, middleware, OS, VM, virtual network, hypervisors, processing and memory, data storage, network interfaces, facilities and data centers, etc.

Which of the following is NOT an AWS Shared Responsibility Model devised by AWS?

Shared Responsibility Model for Storage Services

Shared Responsibility Model for Container Services

Shared Responsibility Model for Infrastructure Services

Shared Responsibility Model for Abstract Services

Shared Responsibility Model for Storage Services

Mark is monitoring the network traffic on his organization's network. He wants to detect TCP and UDP ping sweeps on his network. Which type of filter will be used to detect this?

tcp.dstport==7 and udp.dstport==7

tcp.dstport==7 and udp.srcport==7

tcp.srcport==7 and udp.dstport==7

tcp.dstport==7 and udp.dstport==7

tcp.srcport==7 and udp.srcport==7

Which ofthe following statements holds true in terms of virtual machines?

Hardware-level virtualization takes place in VMs

OS-level virtualization takes place in VMs

VMs are light weight than containers

In MacOS, how can the user implement disk encryption?

By turning on Device Encryption feature

Phishing-like attempts that present users a fake usage bill of the cloud provider is an example of a:

Cloud to service attack surface

ECCouncil 312-38 Practice Test 14 - Free Online Exam Prep & Questions

In________mechanism, the system or application sends log records either on the local disk or over the network.

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-38 Practice Test 14

Question

ECCouncil 312-38 Practice Tests

Practice Tests