Home / ECCouncil / 312-38

ECCouncil 312-38 Practice Test - Questions Answers, Page 45

Question list

List of questions

Question 441

(0)

An attacker has access to password hashes of a windows 7 computer. Which of the following attacks can the attacker use to reveal the passwords?

Question 442

(0)

Which NIST Incident category includes any activity that seeks to access or identify a federal agency computer, open ports, protocols, service or any combination for later exploit?

Question 443

(0)

James is working as a Network Administrator in a reputed company situated in California. He is monitoring his network traffic with the help of Wireshark. He wants to check and analyze the traffic ag

Question 444

(0)

Management wants to bring their organization into compliance with the ISO standard for information security risk management. Which ISO standard will management decide to implement?

Question 445

(0)

Which of the following systems includes an independent NAS Head and multiple storage arrays?

Question 446

(0)

You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from a certain region. You suspect a DoS incident on the n

Question 447

(0)

The security network team is trying to implement a firewall capable of operating only in the session layer, monitoring the TCP inter-packet link protocol to determine when a requested session is leg

Question 448

(0)

If a network is at risk resulting from misconfiguration performed by unskilled and/or unqualified individuals, what type of threat is this?

Question 449

(0)

John is a network administrator and is monitoring his network traffic with the help of Wireshark. He suspects that someone from outside is making a TCP OS fingerprinting attempt on his organization'

Question 450

(0)

Michael decides to view the ________ to track employee actions on the organization's network.

Related questions

Which of the following tools are NOT used for logging network activities in the Linux operating system? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is a management process that provides a framework for promoting quick recovery and the capability for an effective response to protect the interests of its brand, reputation, and stakeholders?

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com . He is using a tool to crack the wireless encryption keys. The description of the tool is as follows: „It is a Linux-based WLAN WEP cracking tool that recovers encryption keys. It operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys." Which of the following tools is John using to crack the wireless encryption keys?

Emmanuel works as a Windows system administrator at an MNC. He uses PowerShell to enforce the script execution policy. He wants to allow the execution of the scripts that are signed by a trusted publisher. Which ofthe following script execution policy setting this?

Which of the follow ng security models enable strict identity verification for every user or device attempting to access the network resources?

Which of the following IEEE standards defines a physical bus topology?

Which of the following standards defines Logical Link Control (LLC)?

Sam wants to implement a network-based IDS and finalizes an IDS solution that works based on pattern matching. Which type of network-based IDS is Sam implementing?

John is a senior network security administrator working at a multinational company. He wants to block specif c sys calls from being used by container binaries. Which Linux kernel feature restricts actions within the container?

Which of the following types of RAID is also known as disk striping?

Question 441

An attacker has access to password hashes of a windows 7 computer. Which of the following attacks can the attacker use to reveal the passwords?

XSS

Rainbow table

Brute force

Dictionary attacks

Show Answer Comment (0)

Question 442

Which NIST Incident category includes any activity that seeks to access or identify a federal agency computer, open ports, protocols, service or any combination for later exploit?

Malicious code

Scans/ Probes/ Attempted Access

Denial-of-Service

Improper usage

Show Answer Comment (0)

James is working as a Network Administrator in a reputed company situated in California. He is monitoring his network traffic with the help of Wireshark. He wants to check and analyze the traffic against a PING sweep attack. Which of the following Wireshark filters will he use?

Icmp.type==8 or icmp.type==16

icmp.type==8 or icmp.type==0

icmp.type==8 and icmp.type==0

Icmp.type==0 and icmp.type==16

Show Answer Comment (0)

Question 444

Management wants to bring their organization into compliance with the ISO standard for information security risk management. Which ISO standard will management decide to implement?

ISO/IEC 27005

ISO/IEC 27006

ISO/IEC 27002

ISO/IEC 27004

Show Answer Comment (0)

Question 445

Which of the following systems includes an independent NAS Head and multiple storage arrays?

FreeNAS

None of these

Gateway NAS System

Integrated NAS System

Show Answer Comment (0)

Question 446

You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from a certain region.

You suspect a DoS incident on the network. What will be your first reaction as a first responder?

Avoid Fear, Uncertainty and Doubt

Communicate the incident

Make an initial assessment

Disable Virus Protection

Show Answer Comment (0)

Question 447

The security network team is trying to implement a firewall capable of operating only in the session layer, monitoring the TCP inter-packet link protocol to determine when a requested session is legitimate or not. Using this type of firewall, they could be able to intercept the communication, making the external network see that the firewall is the source, and facing the user, who responds from the outside is the firewall itself. They are just limiting a requirements previous listed, because they already have a packet filtering firewall and they must add a cheap solution that meets the objective. What kind of firewall would you recommend?

Packet Filtering with NAT

Circuit Level Gateway

Application Proxies

Application Level Gateways

Show Answer Comment (0)

Question 448

If a network is at risk resulting from misconfiguration performed by unskilled and/or unqualified individuals, what type of threat is this?

External Threats

Unstructured Threats

Structured Threats

Internal Threats

Show Answer Comment (0)

Question 449

John is a network administrator and is monitoring his network traffic with the help of Wireshark. He suspects that someone from outside is making a TCP OS fingerprinting attempt on his organization's network. Which of following Wireshark filter(s) will he use to locate the TCP OS fingerprinting attempt? (Choose all that apply.)

tcp.flags=0x00

tcp.options.wscale_val==20

tcp.flags==0x2b

tcp.options.mss_val<1460

Show Answer Comment (0)