EC-COUNCIL EC-COUNCIL Certifications 312-38 Questions & Answers

• Question 611:

  DRAG DROP

  Drag and drop the terms to match with their descriptions.

  Select and Place:

  

  Correct Answer:

  

  Following are the terms with their descriptions:

  

  A Trojan horse is a malicious software program that contains hidden code and masquerades itself as a normal program. When a Trojan horse program is run, its hidden code runs to destroy or scramble data on the hard disk. An example of a Trojan horse is a program that masquerades as a computer logon to retrieve user names and password information. The developer of a Trojan horse can use this information later to gain unauthorized access to computers. Trojan horses are normally spread by e-mail attachments. Ping sweep is a technique used to determine which of a range of IP addresses map to live hosts. It consists of ICMP ECHO requests sent to multiple hosts. If a given address is live, it will return an ICMP ECHO reply. A ping is often used to check that a network device is functioning. To disable ping sweeps on a network, administrators can block ICMP ECHO requests from outside sources. However, ICMP TIMESTAMP and ICMP INFO can be used in a similar manner. Spamware is software designed by or for spammers to send out automated spam e-mail. Spamware is used to search for e-mail addresses to build lists of e-mail addresses to be used either for spamming directly or to be sold to spammers. The spamware package also includes an e-mail harvesting tool. A backdoor is any program that allows a hacker to connect to a computer without going through the normal authentication process. The main advantage of this type of attack is that the network traffic moves from inside a network to the hacker's computer. The traffic moving from inside a network to the outside world is typically the least restrictive, as companies are more concerned about what comes into a network, rather than what leaves it. It, therefore, becomes hard to detect backdoors.

• Question 612:

  DRAG DROP

  George works as a Network Administrator for Blue Soft Inc. The company uses Windows Vista operating system. The network of the company is continuously connected to the Internet. What will George use to protect the network of the company from intrusion?

  Select and Place:

  

  Correct Answer:

  

  A firewall is a set of related programs configured to protect private networks connected to the Internet from intrusion. It is used to regulate the network traffic between different computer networks. It permits or denies the transmission of a network packet to its destination based on a set of rules. A firewall is often installed on a separate computer so that an incoming packet does not get into the network directly.

• Question 613:

  Choose the correct order of steps to analyze the attack surface.

  A. Identify the indicators of exposure->visualize the attack surface->simulate the attack->reduce the attack surface

  B. Visualize the attack surface->simulate the attack->identify the indicators of exposure->reduce the attack surface

  C. Identify the indicators of exposure->simulate the attack->visualize the attack surface->reduce the attack surface

  D. Visualize the attack surface->identify the indicators of exposure->simulate the attack->reduce the attack surface

  Correct Answer: D

• Question 614:

  Leslie, the network administrator of Livewire Technologies, has been recommending multilayer inspection firewalls to deploy the company's infrastructure. What layers of the TCP/IP model can it protect?

  A. IP, application, and network interface

  B. Network interface, TCP, and IP

  C. Application, TCP, and IP

  D. Application, IP, and network interface

  Correct Answer: D

• Question 615:

  To provide optimum security while enabling safe/necessary services, blocking known dangerous services, and making employees accountable for their online activity, what Internet Access policy would Brian, the network administrator, have to choose?

  A. Prudent policy

  B. Paranoid policy

  C. Promiscuous policy

  D. Permissive policy

  Correct Answer: A

• Question 616:

  Which command list all ports available on a server?

  A. sudo apt nst -tunIp

  B. sudo netstat -tunIp

  C. sudo apt netstate -Is tunIp

  D. sudo ntstat -Is tunIp

  Correct Answer: B

• Question 617:

  Which BC/DR activity works on the assumption that the most critical processes are brought back from a remote location first, followed by the less critical functions?

  A. Recovery

  B. Restoration

  C. Response

  D. Resumption

  Correct Answer: A

• Question 618:

  Emmanuel works as a Windows system administrator at an MNC. He uses PowerShell to enforce the script execution policy. He wants to allow the execution of the scripts that are signed by a trusted publisher. Which of the following script execution policy setting this?

  A. AllSigned

  B. Restricted

  C. RemoteSigned

  D. Unrestricted

  Correct Answer: A

• Question 619:

  Fargo, head of network defense at Globadyne Tech, has discovered an undesirable process in several Linux systems, which causes machines to hang every 1 hour. Fargo would like to eliminate it; what command should he execute?

  A. # update-rc.d -f [service name] remove

  B. # service [service name] stop

  C. # ps ax | grep [Target Process]

  D. # kill -9 [PID]

  Correct Answer: D

• Question 620:

  Which of the following refers to the data that is stored or processed by RAM, CPUs, or databases?

  A. Data in Backup

  B. Data at Rest

  C. Data in Transit

  D. Data is Use

  Correct Answer: B