EC-COUNCIL EC-COUNCIL Certifications 312-38 Questions & Answers

• Question 621:

  Which of the following data security technology can ensure information protection by obscuring specific areas of information?

  A. Data retention

  B. Data encryption

  C. Data hashing

  D. Data masking

  Correct Answer: D

• Question 622:

  Elden is working as a network administrator at an IT company. His organization opted for a virtualization technique in which the guest OS is aware of the virtual environment in which it is running and communicates with the host machines for requesting resources. Identify the virtualization technique implemented by Elden's organization.

  A. Hybrid virtualization

  B. Hardware-assisted virtualization

  C. Full virtualization

  D. Para virtualization

  Correct Answer: B

• Question 623:

  Albert works as a Windows system administrator at an MNC. He uses PowerShell logging to identify any suspicious scripting activity across the network. He wants to record pipeline execution details as PowerShell executes, including variable initialization and command invocations. Which PowerShell logging component records pipeline execution details as PowerShell executes?

  A. Module logging

  B. Script block logging

  C. Event logging

  D. Transcript logging

  Correct Answer: A

• Question 624:

  How can one identify the baseline for normal traffic?

  A. When the SYN flag appears at the beginning and the FIN flag appears at the end of the connection

  B. When the RST flag appears at the beginning and the ACK flag appears at the end of the connection

  C. When the ACK flag appears at the beginning and the RST flag appears at the end of the connection D. When the FIN flag appears at the beginning and the SYN flag appears at the end of the connection

  Correct Answer: A

• Question 625:

  Sophie has been working as a Windows network administrator at an MNC over the past 7 years. She wants to check whether SMB1 is enabled or disabled. Which of the following command allows Sophie to do so?

  A. Get-WindowsOptionalFeatures -Online -FeatureNames SMB1Protocol

  B. Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

  C. Get-WindowsOptionalFeature -Online -FeatureNames SMB1Protocol

  D. Get-WindowsOptionalFeatures -Online -FeatureName SMB1Protocol

  Correct Answer: B

• Question 626:

  How is an "attack" represented?

  A. Motive (goal) + method

  B. Motive (goal) + method + vulnerability

  C. Asset + Threat + Vulnerability

  D. Asset + Threat

  Correct Answer: A

• Question 627:

  Kelly is taking backups of the organization's data. Currently, she is taking backups of only those files that are created or modified after the last backup. What type of backup is Kelly using?

  A. Full backup

  B. Incremental backup

  C. Normal backup

  D. Differential backup

  Correct Answer: D

• Question 628:

  Identify the virtualization level that creates a massive pool of storage areas for different virtual machines running on the hardware.

  A. Fabric virtualization

  B. Storage device virtualization

  C. Server virtualization

  D. File system virtualization

  Correct Answer: B

• Question 629:

  Sam wants to implement a network-based IDS and finalizes an IDS solution that works based on pattern matching. Which type of network-based IDS is Sam implementing?

  A. Behavior-based IDS

  B. Anomaly-based IDS

  C. Signature-based IDS

  D. Stateful protocol analysis

  Correct Answer: C

• Question 630:

  Steven is a Linux system administrator at an IT company. He wants to disable unnecessary services in the system, which can be exploited by the attackers. Which among the following is the correct syntax for disabling a service?

  A. $ sudo system-ctl disable [service]

  B. $ sudo systemctl disable [service]

  C. $ sudo system.ctl disable [service]

  D. $ sudo system ctl disable [service]

  Correct Answer: B