EC-COUNCIL Certified Ethical Hacker 312-38 Questions & Answers

• Question 1:

  In _______ mechanism, the system or application sends log records either on the local disk or over the network.

  A. Network-based

  B. Pull-based

  C. Push-based

  D. Host-based

  Correct Answer: C

• Question 2:

  Which of the following helps prevent executing untrusted or untested programs or code from untrusted or unverified third-parties?

  A. Application sandboxing

  B. Deployment of WAFS

  C. Application whitelisting

  D. Application blacklisting

  Correct Answer: A

• Question 3:

  Who is an IR custodian?

  A. An individual responsible for conveying company details after an incident

  B. An individual who receives the initial IR alerts and leads the IR team in all the IR activities

  C. An individual who makes a decision on the classifications and the severity of the incident identified

  D. An individual responsible for the remediation and resolution of the incident that occurred

  Correct Answer: B

• Question 4:

  Which of the following attack surface increase when you keep USB ports enabled on your laptop unnecessarily?

  A. Human attack surface

  B. Network attack surface

  C. Physical attack surface

  D. Software attack surface

  Correct Answer: C

• Question 5:

  Which of the following is not part of the recommended first response steps for network defenders?

  A. Restrict yourself from doing the investigation

  B. Extract relevant data from the suspected devices as early as possible

  C. Disable virus protection

  D. Do not change the state of the suspected device

  Correct Answer: D

• Question 6:

  Which among the following tools can help in identifying IoEs to evaluate human attack surface?

  A. securiCAD

  B. Amass

  C. Skybox

  D. SET

  Correct Answer: A

• Question 7:

  In ______ method, event logs are arranged in the form of a circular buffer.

  A. Non-wrapping method

  B. LIFO method

  C. Wrapping method

  D. FIFO method

  Correct Answer: D

• Question 8:

  Which of the following indicators refers to potential risk exposures that attackers can use to breach the security of an organization?

  A. Indicators of attack

  B. Key risk indicators

  C. Indicators of exposure

  D. Indicators of compromise

  Correct Answer: C

• Question 9:

  Which of the following can be used to disallow a system/user from accessing all applications except a specific folder on a system?

  A. Hash rule

  B. Path rule

  C. Internet zone rule

  D. Certificate rule

  Correct Answer: A

• Question 10:

  Richard has been working as a Linux system administrator at an MNC. He wants to maintain a productive and secure environment by improving the performance of the systems through Linux patch management. Richard is using Ubuntu and wants to patch the Linux systems manually. Which among the following command installs updates (new ones) for Debian-based Linux OSes?

  A. sudo apt-get upgrade

  B. sudo apt-get dist-update

  C. sudo apt-get dist-upgrade

  D. sudo apt-get update

  Correct Answer: C