EC-COUNCIL EC-COUNCIL Certifications 312-38 Questions & Answers

• Question 101:

  Identify the correct statements regarding a DMZ zone:

  A. It is a file integrity monitoring mechanism

  B. It is a Neutral zone between a trusted network and an untrusted network

  C. It serves as a proxy

  D. It includes sensitive internal servers such as database servers

  Correct Answer: B

• Question 102:

  ------------is a group of broadband wireless communications standards for Metropolitan Area Networks (MANs)

  A. 802.15

  B. 802.16

  C. 802.15.4

  D. 802.12

  Correct Answer: B

• Question 103:

  The company has implemented a backup plan. James is working as a network administrator for the company and is taking full backups of the data every time a backup is initiated. Alex who is a senior security manager

  talks to him about using a differential backup instead and asks him to implement this once a full backup of the data is completed.

  What is/are the reason(s) Alex is suggesting that James use a differential backup? (Select all that apply)

  A. Less storage space is required

  B. Father restoration

  C. Slower than a full backup

  D. Faster than a full backup

  E. Less expensive than full backup

  Correct Answer: AD

• Question 104:

  Will is working as a Network Administrator. Management wants to maintain a backup of all the company data as soon as it starts operations. They decided to use a RAID backup storage technology for their data backup plan. To implement

  the RAID data backup storage, Will sets up a pair of RAID disks so that all the data written to one disk is copied automatically to the other disk as well. This maintains an additional copy of the data.

  Which RAID level is used here?

  A. RAID 3

  B. RAID 1

  C. RAID 5

  D. RAID 0

  Correct Answer: B

• Question 105:

  Henry needs to design a backup strategy for the organization with no service level downtime. Which backup method will he select?

  A. Normal backup

  B. Warm backup

  C. Hot backup

  D. Cold backup

  Correct Answer: C

• Question 106:

  Identify the network topology where each computer acts as a repeater and the data passes from one computer to the other in a single direction until it reaches the destination.

  A. Ring

  B. Mesh

  C. Bus

  D. Star

  Correct Answer: A

• Question 107:

  Lyle is the IT director for a medium-sized food service supply company in Nebraska. Lyle's company employs over 300 workers, half of which use computers. He recently came back from a security training seminar on logical security. He now wants to ensure his company is as secure as possible. Lyle has many network nodes and workstation nodes across the network. He does not have much time for implementing a network-wide solution. He is primarily concerned about preventing any external attacks on the network by using a solution that can drop packets if they are found to be malicious. Lyle also wants this solution to be easy to implement and be network-wide. What type of solution would be best for Lyle?

  A. A NEPT implementation would be the best choice.

  B. To better serve the security needs of his company, Lyle should use a HIDS system.

  C. Lyle would be best suited if he chose a NIPS implementation

  D. He should choose a HIPS solution, as this is best suited to his needs.

  Correct Answer: C

• Question 108:

  Kyle, a front office executive, suspects that a Trojan has infected his computer. What should be his first course of action to deal with the incident?

  A. Contain the damage

  B. Disconnect the five infected devices from the network

  C. Inform the IRT about the incident and wait for their response

  D. Inform everybody in the organization about the attack

  Correct Answer: C

• Question 109:

  Malone is finishing up his incident handling plan for IT before giving it to his boss for review. He is outlining the incident response methodology and the steps that are involved. What is the last step he should list?

  A. Assign eradication.

  B. Recovery

  C. Containment

  D. A follow-up.

  Correct Answer: D

• Question 110:

  Management wants to calculate the risk factor for their organization. Kevin, a network administrator in the organization knows how to calculate the risk factor. Certain parameters are required before calculating risk factor. What are they? (Select all that apply)

  Risk factor =.............X...............X...........

  A. Vulnerability

  B. Impact

  C. Attack

  D. Threat

  Correct Answer: ABD