Free 312-38 Sample Questions and 100% Cover Real Exam Questions (Updated 232 Questions)
Download Real EC-COUNCIL 312-38 Exam Dumps Test Engine Exam Questions
How much Certified Network Defender Cost
The cost of the Certified Network Defender is $150. For more information related to exam price, please visit the official website as the cost of exams may be subjected to vary county-wise.
The EC-Council Certified Network Defender (CND) certification is a globally recognized certification that validates the skills and knowledge of network administrators, network security professionals, and other IT professionals. EC-Council Certified Network Defender CND certification is designed to equip candidates with the skills and knowledge needed to protect networks from various cyber threats. The EC-Council CND certification is ideal for individuals who are seeking to advance their careers in the field of network security.
NEW QUESTION # 66
Which of the following incident handling stage removes the root cause of the incident?
- A. Recovery
- B. Eradication
- C. Detection
- D. Containment
Answer: B
NEW QUESTION # 67
FILL BLANK
Fill in the blank with the appropriate term. ______________ is the use of sensitive words in e-mails to jam the
authorities that listen in on them by providing a form of a red herring and an intentional annoyance.
Answer:
Explanation:
Email jamming
Explanation: Email jamming is the use of sensitive words in e-mails to jam the authorities that listen in on them
by providing a form of a red herring and an intentional annoyance. In this attack, an attacker deliberately
includes "sensitive" words and phrases in otherwise innocuous emails to ensure that these are picked up by
the monitoring systems. As a result the senders of these emails will eventually be added to a "harmless" list
and their emails will be no longer intercepted, hence it will allow them to regain some privacy.
NEW QUESTION # 68
CORRECT TEXT
Fill in the blank with the appropriate term. The ___________protocol is a feature of packet-based data transmission protocols. It is used to keep a record of the frame sequences sent and their respective acknowledgements received by both the users.
Answer:
Explanation:
Sliding Window
Explanation:
The Sliding Window protocol is a feature of packet-based data transmission protocols. It is used in the data link layer (OSI model) as well as in TCP (transport layer of the OSI model). It is used to keep a record of the frame sequences sent, and their respective acknowledgements received, by both the users. Its additional feature over a simpler protocol is that can allow multiple packets to be "in transmission" simultaneously, rather than waiting for each packet to be acknowledged before sending the next.In transmit flow control, sliding window is a variable-duration window that allows a sender to transmit a specified number of data units before an acknowledgment is received or before a specified event occurs.An example of a sliding window is one in which, after the sender fails to receive an acknowledgment for the first transmitted frame, the sender "slides" the window, i.e., resets the window, and sends a second frame. This process is repeated for the specified number of times before the sender interrupts transmission. Sliding window is sometimes called acknowledgment delay period.
NEW QUESTION # 69
Which of the following systems is formed by a group of honeypots?
- A. Research honeypot
- B. Honeynet
- C. Production honeypot
- D. Honeyfarm
Answer: B
NEW QUESTION # 70
Which of the following is the primary international body for fostering cooperative standards for telecommunications equipment and systems?
- A. ICANN
- B. CCITT
- C. NIST
- D. IEEE
Answer: B
Explanation:
CCITT is the primary international body for fostering cooperative standards for telecommunications equipment and systems. It is now known as the ITU-T (for Telecommunication Standardization Sector of the International Telecommunications Union). The ITU-T mission is to ensure the efficient and timely production of standards covering all fields of telecommunications on a worldwide basis, as well as defining tariff and accounting principles for international telecommunication services.
Answer option A is incorrect. Internet Corporation for Assigned Names and Numbers (ICANN) is a non-profit organization that oversees the allocation of IP addresses, management of the DNS infrastructure, protocol parameter assignment, and root server system management.
Answer option B is incorrect. The Institute of Electrical and Electronic Engineers (IEEE) is a society of technical professionals. It promotes the development and application of electro-technology and allied sciences. IEEE develops communications and network standards, among other activities. The organization publishes number of journals, has many local chapters, and societies in specialized areas.
Answer option C is incorrect. The National Institute of Standards and Technology (NIST), known between 1901 and 1988 as the National Bureau of Standards (NBS), is a measurement standards laboratory which is a non- regulatory agency of the United States Department of Commerce. The institute's official mission is as follows:
To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve quality of life.
NIST had an operating budget for fiscal year 2007 (October 1, 2006-September 30, 2007) of about $843.3 million. NIST's 2009 budget was $992 million, but it also received $610 million as part of the American Recovery and Reinvestment Act. NIST employs about 2,900 scientists, engineers, technicians, and support and administrative personnel. About 1,800 NIST associates (guest researchers and engineers from American companies and foreign nations) complement the staff. In addition, NIST partners with 1,400 manufacturing specialists and staff at nearly 350 affiliated centers around the country.
NEW QUESTION # 71
Which of the following ranges of addresses can be used in the first octet of a Class A network address?
- A. 224-255
- B. 0-127
- C. 192-223
- D. 128-191
Answer: B
NEW QUESTION # 72
What is the location of honeypot on a network?
- A. Hub
- B. Honeynet
- C. Honeyfarm
- D. DMZ
Answer: D
NEW QUESTION # 73
Which of the following types of cyberstalking damages the reputation of their victim and turns other people against them by setting up their own Websites, blogs, or user pages for this purpose?
- A. Attempts to gather information about the victim
- B. False accusation
- C. False victimization
- D. Encouraging others to harass the victim
Answer: B
Explanation:
In false accusations, many cyberstalkers try to damage the reputation of their victim and turn other people against them. They post false information about them on Websites. They may set up their own Websites, blogs, or user pages for this purpose. They post allegations about the victim to newsgroups, chat rooms, or other sites that allow public contributions. Answer option D is incorrect. In false victimization, the cyberstalker claims that the victim is harassing him/her. Answer option C is incorrect. In this type of cyberstalking, many cyberstalkers try to involve third parties in the harassment. They claim that the victim has harmed the stalker in some way, or may post the victim's name and telephone number in order to encourage others to join the pursuit. Answer option B is incorrect. In an attempt to gather information, cyberstalkers may approach their victim's friends, family, and work colleagues to obtain personal information. They may advertise for information on the Internet. They often will monitor the victim's online activities and attempt to trace their IP address in an effort to gather more information about their victims.
NEW QUESTION # 74
Which of the following is a class of attacks to break through, which depends on a greater probability of collisions between random attack was detected, and try to fixed rate permutations?
- A. replay attack
- B. None
- C. Dictionary attack
- D. phishing attack
- E. birthday attack
Answer: E
NEW QUESTION # 75
Sam, a network administrator is using Wireshark to monitor the network traffic of the organization.
He wants to detect TCP packets with no flag set to check for a specific attack attempt. Which filter will he use to view the traffic?
- A. Tcp.flags==000x0
- B. Tcp.flags==0000x
- C. Tcp.flags==0x000
- D. Tcp.flags==x0000
Answer: C
NEW QUESTION # 76
Which of the following IEEE standards defines the demand priority access method?
- A. 802.3
- B. 802.12
- C. 802.11
- D. 802.15
Answer: B
NEW QUESTION # 77
Consider a scenario consisting of a tree network. The root Node N is connected to two man nodes N1 and N2. N1 is connected to N11 and N12. N2 is connected to N21 and N22. What will happen if any one of the main nodes fail?
- A. Failure of the main node affects all other child nodes at the same level irrespective of the main node.
- B. Does not cause any disturbance to the child nodes or its tranmission
- C. Affects the root node only
- D. Failure of the main node will affect all related child nodes connected to the main node
Answer: D
NEW QUESTION # 78
Which of the following UTP cables is NOT suitable for data transmission or Ethernet data work usage?
- A. Category 4
- B. Category 5
- C. Category 1
- D. Category 6
Answer: C
NEW QUESTION # 79
Which of the following types of coaxial cable is used for cable TV and cable modems?
- A. RG-62
- B. RG-59
- C. RG-58
- D. RG-8
Answer: B
Explanation:
RG-59 type of coaxial cable is used for cable TV and cable modems.
Answer option D is incorrect. RG-8 coaxial cable is primarily used as a backbone in an Ethernet
LAN environment and often connects one wiring closet to another. It is also known as 10Base5 or
ThickNet.
Answer option A is incorrect. RG-62 coaxial cable is used for ARCNET and automotive radio
antennas.
Answer option C is incorrect. RG-58 coaxial cable is used for Ethernet networks. It uses baseband
signaling and 50-Ohm terminator. It is also known as 10Base2 or ThinNet.
NEW QUESTION # 80
Which of the following is a standard-based protocol that provides the highest level of VPN security?
- A. IPSec
- B. PPP
- C. IP
- D. L2TP
Answer: A
Explanation:
Internet Protocol Security (IPSec) is a standard-based protocol that provides the highest level of VPN security. IPSec can encrypt virtually everything above the networking layer. It is used for VPN connections that use the L2TP protocol. It secures both data and password. IPSec cannot be used with Point-to-Point Tunneling Protocol (PPTP). Answer option B is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP.IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4 (IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6), is being deployed actively worldwide. Answer option C is incorrect. Point-to-Point Protocol (PPP) is a remote access protocol commonly used to connect to the Internet. It supports compression and encryption and can be used to connect to a variety of networks. It can connect to a network running on the IPX, TCP/IP, or NetBEUI protocol. It supports multi-protocol and dynamic IP assignments. It is the default protocol for the Microsoft Dial-Up adapter. Answer option A is incorrect. Layer 2 Tunneling Protocol (L2TP) is a more secure version of Point-to-Point Tunneling Protocol (PPTP). It provides tunneling, address assignment, and authentication. It allows the transfer of Point-to-Point Protocol (PPP) traffic between different networks.L2TP combines with IPSec to provide tunneling and security for Internet Protocol (IP), Internetwork Packet Exchange (IPX), and other protocol packets across IP networks.
NEW QUESTION # 81
Henry needs to design a backup strategy for the organization with no service level downtime. Which backup method will he select?
- A. Hot backup
- B. Warm backup
- C. Normal backup
- D. Cold backup
Answer: A
NEW QUESTION # 82
Which of the following can be performed with software or hardware devices in order to record everything a person types using his keyboard?
- A. War dialing
- B. IRC bot
- C. Warchalking
- D. Keystroke logging
Answer: D
Explanation:
Keystroke logging is a method of logging and recording user keystrokes. It can be performed with software or hardware devices. Keystroke logging devices can record everything a person types using his keyboard, such as to measure employee's productivity on certain clerical tasks. These types of devices can also be used to get usernames, passwords, etc. Answer option C is incorrect. War dialing is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, BBS systems, and fax machines. Hackers use the resulting lists for various purposes, hobbyists for exploration, and crackers (hackers that specialize in computer security) for password guessing. Answer option A is incorrect. Warchalking is the drawing of symbols in public places to advertise an open Wi-Fi wireless network. Having found a Wi-Fi node, the warchalker draws a special symbol on a nearby object, such as a wall, the pavement, or a lamp post. The name warchalking is derived from the cracker terms war dialing and war driving. Answer option D is incorrect. An Internet Relay Chat (IRC) bot is a set of scripts or an independent program that connects to Internet Relay Chat as a client, and so appears to other IRC users as another user. An IRC bot differs from a regular client in that instead of providing interactive access to IRC for a human user, it performs automated functions.
NEW QUESTION # 83
......
New 312-38 exam dumps Use Updated EC-COUNCIL Exam: https://www.latestcram.com/312-38-exam-cram-questions.html
Verified 312-38 Dumps Q&As - 312-38 Test Engine with Correct Answers: https://drive.google.com/open?id=1TuLd8dTomfzYV-z1U0299EuP8h5dRM9l
