2021 312-38 Premium Files Test pdf - Free Dumps Collection
Get ready to pass the 312-38 Exam right now using our Certified Ethical Hacker Exam Package
NEW QUESTION 48
Which of the following plans is documented and organized for emergency response, backup operations, and recovery maintained by an activity as part of its security program that will ensure the availability of critical resources and facilitates the continuity of operations in an emergency situation?
- A. Business Continuity Plan
- B. Disaster Recovery Plan
- C. Contingency Plan
- D. Continuity Of Operations Plan
Answer: C
Explanation:
Contingency plan is prepared and documented for emergency response, backup operations, and recovery maintained by an activity as the element of its security program that will ensure the availability of critical resources and facilitates the continuity of operations in an emergency situation.
A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans are often devised by governments or businesses who want to be prepared for anything that could happen.
Contingency plans include specific strategies and actions to deal with
specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also include a monitoring process and "triggers" for initiating planned actions. They are required to help governments, businesses, or individuals to recover from serious incidents in the minimum time with minimum cost and disruption.
Answer option B is incorrect. A disaster recovery plan should contain data, hardware, and software that can be critical for a business. It should also include the plan for sudden loss such as hard disc crash. The business should use backup and data recovery utilities to limit the loss of data.
Answer option D is incorrect. The Continuity Of Operation Plan (COOP) refers to the preparations and institutions maintained by the United States government, providing survival of federal government operations in the case of catastrophic events. It provides procedures and capabilities to sustain an organization's essential.
COOP is the procedure documented to ensure persistent critical operations throughout any period where normal operations are unattainable.
Answer option C is incorrect. Business Continuity Planning (BCP) is the creation and validation of a practiced logistical plan for how an organization will recover and restore partially or completely interrupted critical (urgent) functions within a predetermined time after a disaster or extended disruption. The logistical plan is called a business continuity plan.
NEW QUESTION 49
Nancy is working as a network administrator for a small company. Management wants to implement a RAID storage for their organization. They want to use the appropriate RAID level for their backup plan that will satisfy the following requirements: 1. It has a parity check to store all the information about the data in multiple drives 2. Help reconstruct the data during downtime. 3. Process the data at a good speed. 4. Should not be expensive. The management team asks Nancy to research and suggest the appropriate RAID level that best suits their requirements. What RAID level will she suggest?
- A. RAID 0
- B. RAID 3
- C. RAID 1
- D. RAID 10
Answer: B
NEW QUESTION 50
With which of the following flag sets does the Xmas tree scan send a TCP frame to a remote device? Each correct answer represents a part of the solution. Choose all that apply.
- A. PUSH
- B. FIN
- C. RST
- D. URG
Answer: A,B,D
Explanation:
With the URG, PUSH, and FIN flag sets, the Xmas tree scan sends a TCP frame to a remote device. The Xmas tree scan is called an Xmas tree scan because the alternating bits are turned on and off in the flags byte (00101001), much like the lights of a Christmas tree. Answer option B is incorrect. The RST flag is not set when the Xmas tree scan sends a TCP frame to a remote device.
NEW QUESTION 51
Which of the following is a 16-bit field that identifies the source port number of the application program in the host that is sending the segment?
- A. Header Length
- B. Acknowledgment Number
- C. Source Port Address
- D. Sequence Number
Answer: C
Explanation:
Source Port Address is a 16-bit field that identifies the source port number of the application
program in the host that is sending the segment.
Answer option A is incorrect. This is a 32-bit field that identifies the byte number that the sender of
the segment is expecting to receive from the receiver.
Answer option C is incorrect. This is a 4-bit field that defines the 4-byte words in the TCP header.
The header length can be between 20 and 60 bytes. Therefore, the value of this field can be
between 5 and 15.
Answer option D is incorrect. This is a 32-bit field that identifies the number assigned to the first
byte of data contained in the segment.
NEW QUESTION 52
Which of the following IEEE standards is an example of a DQDB access method?
- A. 802.5
- B. 802.6
- C. 802.3
- D. 802.4
Answer: B
NEW QUESTION 53
Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website. After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered. What tool could Simon and his administrators implement to accomplish this?
- A. Snort is the best tool for their situation
- B. They can implement Wireshark
- C. They could use Tripwire
- D. They need to use Nessus
Answer: C
NEW QUESTION 54
The IP addresses reserved for experimental purposes belong to which of the following classes?
- A. Class D
- B. Class A
- C. Class E
- D. Class C
Answer: C
NEW QUESTION 55
Which of the following types of transmission is the process of sending one bit at a time over a single
transmission line?
- A. Serial data transmission
- B. Parallel data transmission
- C. Multicast transmission
- D. Unicast transmission
Answer: A
Explanation:
In serial data transmission, one bit is sent after another (bit-serial) on a single transmission line. It is the
simplest method of transmitting digital information from one point to another. This transmission is suitable for
providing communication between two participants as well as for multiple participants. It is used for all long-
haul communication and provides high data rates. It is also inexpensive and beneficial in transferring data over
long distances.
Answer option D is incorrect. In parallel data transmission, several data signals are sent simultaneously over
several parallel channels. Parallel data transmission is faster than serial data transmission. It is used primarily
for transferring data between devices at the same site. For instance, communication between a computer and
printer is most often parallel, allowing the entire byte to be transferred in one operation.
Answer option A is incorrect. The unicast transmission method is used to establish communication between a
single host and a single receiver. Packets sent to a unicast address are delivered to the interface recognized
by that IP address, as shown in the following figure:
Answer option C is incorrect. The multicast transmission method is used to establish communication between
a single host and multiple receivers. Packets are sent to all interfaces recognized by that IP address, as shown
in the figure below:
NEW QUESTION 56
Which of the following types of RAID offers no protection for the parity disk?
- A. RAID 3
- B. RAID 2
- C. RAID 1
- D. RAID 5
Answer: A
NEW QUESTION 57
Heather has been tasked with setting up and implementing VPN tunnels to remote offices. She will most likely be implementing IPsec VPN tunnels to connect the offices. At what layer of the OSI model does an IPsec tunnel function on?
- A. They function on the data link layer
- B. They work on the network layer
- C. They function on either the application or the physical layer.
- D. They work on the session layer.
Answer: B
NEW QUESTION 58
Which type of wireless network attack is characterized by an attacker using a high gain amplifier from a nearby location to drown out the legitimate access point signal?
- A. Unauthorized association
- B. Rogue access point attack
- C. Ad Hoc Connection attack
- D. Jamming signal attack
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 59
You work as a professional Computer Hacking Forensic Investigator for DataEnet Inc. You want to investigate
e-mail information of an employee of the company. The suspected employee is using an online e-mail system
such as Hotmail or Yahoo. Which of the following folders on the local computer will you review to accomplish
the task? Each correct answer represents a complete solution. Choose all that apply.
- A. Download folder
- B. Cookies folder
- C. History folder
- D. Temporary Internet Folder
Answer: B,C,D
Explanation:
Online e-mail systems such as Hotmail and Yahoo leave files containing e-mail message information on the
local computer. These files are stored in a number of folders, which are as follows:
Cookies folder
Temp folder
History folder
Cache folder
Temporary Internet Folder Forensic tools can recover these folders for the respective e-mail clients. When
folders are retrieved, e-mail files can be accessed. If the data is not readable, various tools are available to
decrypt the information such as a cookie reader used with cookies.
Answer option D is incorrect. Download folder does not contain any e-mail message information.
NEW QUESTION 60
FILL BLANK
Fill in the blank with the appropriate term. ______________ is an open wireless technology standard for
exchanging data over short distances from fixed and mobile devices.
Answer:
Explanation:
Bluetooth
Explanation:
Bluetooth is an open wireless technology standard for exchanging data over short distances from fixed and
mobile devices,
creating personal area networks with high levels of security. Created by telecoms vendor Ericsson in 1994, it
was originally conceived as a wireless alternative to RS-232 data cables. It can connect several devices,
overcoming problems of synchronization. Today Bluetooth is managed by the Bluetooth Special Interest Group.
NEW QUESTION 61
Which of the following is the practice of sending unwanted e-mail messages, frequently with commercial content, in large quantities to an indiscriminate set of recipients? Each correct answer represents a complete solution. Choose all that apply.
- A. Email spoofing
- B. Email jamming
- C. Junk mail
- D. E-mail spam
Answer: C,D
Explanation:
E-mail spam, also known as unsolicited bulk email (UBE), junk mail, or unsolicited commercial email (UCE), is the practice of sending unwanted e-mail messages, frequently with commercial content, in large quantities to an indiscriminate set of recipients. Answer option C is incorrect. Email spoofing is a fraudulent email activity in which the sender address and other parts of the email header are altered to appear as though the email originated from a different source. Email spoofing is a technique commonly used in spam and phishing emails to hide the origin of the email message. By changing certain properties of the email, such as the From, Return-Path and Reply-To fields (which can be found in the message header), ill-intentioned users can make the email appear to be from someone other than the actual sender. The result is that, although the email appears to come from the address indicated in the From field (found in the email headers), it actually comes from another source. Answer option D is incorrect. Email jamming is the use of sensitive words in e-mails to jam the authorities that listen in on them by providing a form of a red herring and an intentional annoyance. In this attack, an attacker deliberately includes "sensitive" words and phrases in otherwise innocuous emails to ensure that these are picked up by the monitoring systems. As a result the senders of these emails will eventually be added to a "harmless" list and their emails will be no longer intercepted, hence it will allow them to regain some privacy.
NEW QUESTION 62
Which of the following is a network point that acts as an entrance to another network?
- A. Bridge
- B. Hub
- C. Receiver
- D. Gateway
Answer: D
NEW QUESTION 63
Which of the following IEEE standards defines the token passing ring topology?
- A. 802.7
- B. 802.5
- C. 802.3
- D. 802.4
Answer: B
NEW QUESTION 64
Which of the following flags is set when a closed port responds to an Xmas tree scan?
- A. RST
- B. PUSH
- C. FIN
- D. ACK
Answer: A
NEW QUESTION 65
Which of the following biometric devices is used to take impressions of the friction ridges of the skin on the underside of the tip of the fingers?
- A. Fingerprint reader
- B. Iris camera
- C. Voice recognition voiceprint
- D. Facial recognition device
Answer: A
Explanation:
A fingerprint reader is used to take impressions of the friction ridges of the skin on the underside of the tip of the fingers. Fingerprints help in identifying users and are unique and different to everyone and do not change over time. Even identical twins who share their DNA do not have the same fingerprints. Police and Government agencies have used these modes in order to identify humans for many years, but other agencies are starting to use biometric fingerprint readers for identification in many different applications.A fingerprint is created when the friction ridges of the skin come in contact with a surface that is receptive to a print by means of an agent to form the print like perspiration, oil, ink, grease, and many more. The agent is then transferred to the surface and leaves an impression which creates the fingerprint. Answer option B is incorrect. An iris camera is used to perform recognition detection of a user's identity by mathematical analysis of the random patterns that are visible within the iris of an eye from some distance. It is used to combine computer vision, pattern recognition, statistical inference, and optics. Answer option A is incorrect. A facial recognition device helps in viewing an image or video of a person and compares it to one that is in the database. It performs facial recognition by comparing the following:Structure, shape, and proportions of the face Distance between the eyes, nose, mouth, and jaw Upper outlines of the eye sockets The sides of the mouth Location of the nose and eyes The area surrounding the check bonesAnswer option C is incorrect. A voice recognition voiceprint is a spectrogram, which is a graph that shows a sound's frequency on the vertical axis and time on the horizontal axis. Different speech sounds help in creating different shapes on the graph. Spectrograms also use color or shades of gray to represent the acoustical qualities of sound.
NEW QUESTION 66
Which characteristic of an antenna refers to how directional an antennas radiation pattern is?
- A. Typical gain
- B. Directivity
- C. Radiation pattern
- D. Polarization
Answer: C
NEW QUESTION 67
......
Master 2021 Latest The Questions Certified Ethical Hacker and Pass 312-38 Real Exam!: https://www.exam4docs.com/312-38-study-questions.html
A fully updated 2021 312-38 Exam Dumps exam guide from training expert Exam4Docs: https://drive.google.com/open?id=124smjH-hzFipl7OU7Z1FUpNUGUXlPIch
