Home / ECCouncil / 312-38

ECCouncil 312-38 Practice Test - Questions Answers, Page 39

Question list

List of questions

Question 381

(0)

Daniel is giving training on designing and implementing a security policy in the organization. He is explaining the hierarchy of the security policy which demonstrates how policies are drafted, desi

Question 382

(0)

The _______ protocol works in the network layer and is responsible for handling the error codes during the delivery of packets. This protocol is also responsible for providing communication in the T

Question 383

(0)

Assume that you are working as a network administrator in the head office of a bank. One day a bank employee informed you that she is unable to log in to her system. At the same time, you get a call

Question 384

(0)

Smith is an IT technician that has been appointed to his company's network vulnerability assessment team. He is the only IT employee on the team. The other team members include employees from Accoun

Question 385

(0)

A local bank wants to protect their card holder data. The bank should comply with the __________ standard to ensure the security of card holder data.

Question 386

(0)

Ross manages 30 employees and only 25 computers in the organization. The network the company uses is a peer-to-peer. Ross configures access control measures allowing the employees to set their own c

Question 387

(0)

Fred is a network technician working for Johnson Services, a temporary employment agency in Boston. Johnson Services has three remote offices in New England and the headquarters in Boston where Fred

Question 388

(0)

Which of the following can be used to suppress fire from Class K sources?

Question 389

(0)

Match the following NIST security life cycle components with their activities:

Question 390

(0)

What is the correct order of activities that a IDS is supposed to attempt in order of detect an intrusion?

Related questions

Which of the following tools are NOT used for logging network activities in the Linux operating system? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is a management process that provides a framework for promoting quick recovery and the capability for an effective response to protect the interests of its brand, reputation, and stakeholders?

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com . He is using a tool to crack the wireless encryption keys. The description of the tool is as follows: „It is a Linux-based WLAN WEP cracking tool that recovers encryption keys. It operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys." Which of the following tools is John using to crack the wireless encryption keys?

Emmanuel works as a Windows system administrator at an MNC. He uses PowerShell to enforce the script execution policy. He wants to allow the execution of the scripts that are signed by a trusted publisher. Which ofthe following script execution policy setting this?

Which of the follow ng security models enable strict identity verification for every user or device attempting to access the network resources?

Which of the following types of RAID is also known as disk striping?

Which of the following IEEE standards defines a physical bus topology?

Which of the following standards defines Logical Link Control (LLC)?

Sam wants to implement a network-based IDS and finalizes an IDS solution that works based on pattern matching. Which type of network-based IDS is Sam implementing?

John is a senior network security administrator working at a multinational company. He wants to block specif c sys calls from being used by container binaries. Which Linux kernel feature restricts actions within the container?

Question 381

Daniel is giving training on designing and implementing a security policy in the organization. He is explaining the hierarchy of the security policy which demonstrates how policies are drafted, designed and implemented. What is the correct hierarchy for a security policy implementation?

Procedures, Policies, Laws, Standards and Regulations

Laws, Regulations, Policies, Standards and Procedures

Regulations, Policies, Laws, Standards and Procedures

Laws, Policies, Regulations, Procedures and Standards

Show Answer Comment (0)

Question 382

The _______ protocol works in the network layer and is responsible for handling the error codes during the delivery of packets. This protocol is also responsible for providing communication in the TCP/IP stack.

RARP

ICMP

ARP

DHCP

Show Answer Comment (0)

Question 383

Assume that you are working as a network administrator in the head office of a bank. One day a bank employee informed you that she is unable to log in to her system. At the same time, you get a call from another network administrator informing you that there is a problem connecting to the main server. How will you prioritize these two incidents?

Based on a first come first served basis

Based on the type of response needed for the incident

Based on a potential technical effect of the incident

Based on approval from management

Show Answer Comment (0)

Question 384

Smith is an IT technician that has been appointed to his company's network vulnerability assessment team. He is the only IT employee on the team. The other team members include employees from Accounting, Management, Shipping, and Marketing. Smith and the team members are having their first meeting to discuss how they will proceed. What is the first step they should do to create the network vulnerability assessment plan?

Their first step is the acquisition of required documents, reviewing of security policies and compliance.

Their first step is to create an initial Executive report to show the management team.

Their first step is to make a hypothesis of what their final findings will be.

Their first step is to analyze the data they have currently gathered from the company or interviews.

Show Answer Comment (0)

Question 385

A local bank wants to protect their card holder data. The bank should comply with the __________ standard to ensure the security of card holder data.

PCI DSS

SOX

HIPAA

ISEC

Show Answer Comment (0)

Question 386

Ross manages 30 employees and only 25 computers in the organization. The network the company uses is a peer-to-peer. Ross configures access control measures allowing the employees to set their own control measures for their files and folders. Which access control did Ross implement?

Mandatory access control

Non-discretionary access control

Discretionary access control

Role-based access control

Show Answer Comment (0)

Question 387

Fred is a network technician working for Johnson Services, a temporary employment agency in Boston. Johnson Services has three remote offices in New England and the headquarters in Boston where Fred works. The company relies on a number of customized applications to perform daily tasks and unfortunately these applications require users to be local administrators. Because of this, Fred's supervisor wants to implement tighter security measures in other areas to compensate for the inherent risks in making those users local admins. Fred's boss wants a solution that will be placed on all computers throughout the company and monitored by Fred. This solution will gather information on all network traffic to and from the local computers without actually affecting the traffic. What type of solution does Fred's boss want to implement?

Fred's boss wants Fred to monitor a NIPS system.

Fred's boss wants to implement a HIDS solution.

Fred's boss wants a NIDS implementation.

Fred's boss wants to implement a HIPS solution.

Show Answer Comment (0)