EC-COUNCIL EC-COUNCIL Certifications 312-38 Questions & Answers

• Question 131:

  Each of the following is a network layer protocol used for a particular (MAC) address to obtain an IP address?

  A. ARP

  B. None

  C. RARP

  D. P.M

  E. PIM

  Correct Answer: C

• Question 132:

  Adam, malicious hacker, has just succeeded in stealing through a secure cookie XSS attack. He is able to play back the cookie even if the session is valid on the server. Which of the following is the most likely cause of this issue?

  A. Two-way encryption is used.

  B. Encryption is performed at the application level (one encryption key).

  C. Encryption does not apply.

  D. Scrambling is performed in the network (layer 1 encryption)

  E. None

  Correct Answer: B

• Question 133:

  Which of the following is a compatible network device that converts various communication protocols and are used to connect different network technologies?

  A. port

  B. change

  C. none

  D. bridge

  E. router

  Correct Answer: A

• Question 134:

  Which of the following is a computer network protocol used by the hosts to apply for the tasks the IP address and other configuration information?

  A. DHCP

  B. ARP

  C. Telnet

  D. None

  E. SNMP

  Correct Answer: A

• Question 135:

  The risk assessment team in Southern California has estimated that the probability of an incident that has potential to impact almost 80% of the bank's business is very high. How should this risk be categorized in the risk matrix?

  A. High

  B. Medium

  C. Extreme

  D. Low

  Correct Answer: C

• Question 136:

  Which IEEE standard does wireless network use?

  A. 802.11

  B. 802.18

  C. 802.9

  D. 802.10

  Correct Answer: A

• Question 137:

  A network is setup using an IP address range of 0.0.0.0 to 127.255.255.255. The network has a default subnet mask of 255.0.0.0. What IP address class is the network range a part of?

  A. Class C

  B. Class A

  C. Class B

  D. Class D

  Correct Answer: B

• Question 138:

  The bank where you work has 600 windows computers and 400 Red Hat computers which primarily serve as bank teller consoles. You have created a plan and deployed all the patches to the Windows computers and you are now working on updating the Red Hat computers. What command should you run on the network to update the Red Hat computers, download the security package, force the package installation, and update all currently installed packages?

  A. You should run the up2data -u command.

  B. You should run the up2date --d -f -u command.

  C. You should run the WSUS --d -f -u command.

  D. You should type the sysupdate --d command.

  Correct Answer: B

• Question 139:

  Dan and Alex are business partners working together. Their Business-Partner Policy states that they should encrypt their emails before sending to each other. How will they ensure the authenticity of their emails?

  A. Dan will use his digital signature to sign his mails while Alex will use Dan's public key to verify the authenticity of the mails.

  B. Dan will use his digital signature to sign his mails while Alex will use his private key to verify the authenticity of the mails.

  C. Dan will use his private key to encrypt his mails while Alex will use his digital signature to verify the authenticity of the mails.

  D. Dan will use his public key to encrypt his mails while Alex will use Dan's digital signature to verify the authenticity of the mails.

  Correct Answer: A

• Question 140:

  A VPN Concentrator acts as a bidirectional tunnel endpoint among host machines. What are the other function(s) of the device? (Choose all that apply.)

  A. Enables input/output (I/O) operations

  B. Provides access memory, achieving high efficiency

  C. Manages security keys

  D. Assigns user addresses

  Correct Answer: CD