Get 312-38 Braindumps & 312-38 Real Exam Questions
EC-COUNCIL 312-38 Actual Questions and Braindumps
NEW QUESTION 21
CORRECT TEXT
Fill in the blank with the appropriate term.
______________ is an enumeration technique used to glean information about computer systems on a network and the services running its open ports.
Answer:
Explanation:
Banner grabbing
Explanation:
Banner grabbing is an enumeration technique used to glean information about computer systems on a network and the services running its open ports. Administrators can use this to take inventory of the systems and services on their network. An intruder however can use banner grabbing in order to find network hosts that are running versions of applications and operating systems with known exploits. Some examples of service ports used for banner grabbing are those used by Hyper Text Transfer Protocol (HTTP), File Transfer Protocol (FTP), and Simple Mail Transfer Protocol (SMTP); ports 80, 21, and 25 respectively. Tools commonly used to perform banner grabbing are Telnet, which is included with most operating systems, and Netcat. For example, one could establish a connection to a target host running a Web service with netcat, then send a bad html request in order to get information about the service on the host: [root@prober] nc www.targethost.com 80 HEAD / HTTP/1.1 HTTP/1.1 200 OK Date: Mon, 11 May 2009 22:10:40 EST Server: Apache/2.0.46 (Unix) (Red Hat/Linux) Last-Modified: Thu, 16 Apr 2009 11:20:14 PST ETag: "1986-69b-123a4bc6" Accept-Ranges: bytes Content-Length: 1110 Connection: close Content-Type: text/html The administrator can now catalog this system or an intruder now knows what version of Apache to look for exploits.
NEW QUESTION 22
John has implemented _________ in the network to restrict the number of public IP addresses in his organization and to enhance the firewall filtering technique.
- A. VPN
- B. NAT
- C. DMZ
- D. Proxies
Answer: B
NEW QUESTION 23
A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to perform war dialing? Each correct answer represents a complete solution. Choose all that apply.
- A. ToneLoc
- B. THC-Scan
- C. Wingate
- D. NetStumbler
Answer: A,B
Explanation:
THC-Scan and ToneLoc are tools used for war dialing. A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It provides the attacker unauthorized access to a computer.
Answer option D is incorrect. NetStumbler is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. It detects wireless networks and marks their relative position with a GPS. It uses an 802.11 Probe Request that has been sent to the broadcast destination address.
Answer option B is incorrect. Wingate is a proxy server.
NEW QUESTION 24
Which of the following standards is a proposed enhancement to the 802.11a and 802.11b wireless LAN (WLAN) specifications that offers quality of service (QoS) features, including the prioritization of data, voice, and video transmissions?
- A. 802.11h
- B. 802.11n
- C. 802.11e
- D. 802.15
Answer: C
Explanation:
The 802.11e standard is a proposed enhancement to the 802.11a and 802.11b wireless LAN (WLAN) specifications. It offers quality of service (QoS) features, including the prioritization of data, voice, and video transmissions. 802.11e enhances the 802.11 Media Access Control layer (MAC layer) with a coordinated time division multiple access (TDMA) construct, and adds error-correcting mechanisms for delay-sensitive applications such as voice and video. Answer option D is incorrect. 802.11h refers to the amendment added to the IEEE 802.11 standard for Spectrum and Transmit Power Management Extensions.
Answer option B is incorrect. 802.11n is an amendment to the IEEE 802.11-2007 wireless networking standard to improve network throughput over the two previous standards - 802.11a and 802.11g - with a significant increase in the maximum raw data rate from 54 Mbit/s to 600 Mbit/s with the use of four spatial streams at a channel width of 40 MHz. Answer option A is incorrect. IEEE 802.15 is a working group of the IEEE 802 and specializes in Wireless PAN (Personal Area Network) standards. It includes seven task groups, which are as follows:
1.Task group 1 (WPAN/Bluetooth)
2.Task group 2 (Coexistence)
3.Task group 3 (High Rate WPAN)
4.Task group 4 (Low Rate WPAN)
5.Task group 5 (Mesh Networking)
6.Task Group 6 (BAN)
7.Task group 7 (VLC)
NEW QUESTION 25
Which of the following refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system?
- A. Spoofing
- B. Phishing
- C. Smurf
- D. Session hijacking
Answer: D
NEW QUESTION 26
In which of the following attacks does an attacker use software that tries a large number of key combinations in
order to get a password?
- A. Buffer overflow
- B. Smurf attack
- C. Brute force attack
- D. Zero-day attack
Answer: C
Explanation:
In a brute force attack, an attacker uses software that tries a large number of key combinations in order to get
a password. To prevent such attacks, users should create passwords that are more difficult to guess, i.e., by
using a minimum of six characters, alphanumeric combinations, and lower-upper case combinations.
Answer option D is incorrect. Smurf is an attack that generates significant computer network traffic on a victim
network. This is a type of denial-of-service attack that floods a target system via spoofed broadcast ping
messages. In such attacks, a perpetrator sends a large amount of ICMP echo request (ping) traffic to IP
broadcast addresses, all of which have a spoofed source IP address of the intended victim. If the routing
device delivering traffic to those broadcast addresses delivers the IP broadcast to all hosts, most hosts on that
IP network will take the ICMP echo request and reply to it with an echo reply, which multiplies the traffic by the
number of hosts responding.
Answer option A is incorrect. Buffer overflow is a condition in which an application receives more data than it is
configured to accept. It helps an attacker not only to execute a malicious code on the target system but also to
install backdoors on the target system for further attacks. All buffer overflow attacks are due to only sloppy
programming or poor memory management by the application developers. The main types of buffer overflows
are:
Stack overflow
Format string overflow
Heap overflow
Integer overflow
Answer option C is incorrect. A zero-day attack, also known as zero-hour attack, is a computer threat that tries
to exploit computer application vulnerabilities which are unknown to others, undisclosed to the software vendor,
or for which no security fix is available. Zero-day exploits (actual code that can use a security hole to carry out
an attack) are used or shared by attackers before the software vendor knows about the mvulnerability. User
awareness training is the most effective technique to mitigate such attacks.
NEW QUESTION 27
Which of the following is NOT a WEP authentication method?
- A. Open system authentication
- B. Shared key authentication
- C. Media access authentication
- D. Kerberos authentication
Answer: D
NEW QUESTION 28
Which of the following layers provides communication session management between host computers?
- A. Link layer
- B. Internet layer
- C. Application layer
- D. Transport layer
Answer: D
NEW QUESTION 29
Fill in the blank with the appropriate term. ______________________ is typically carried out by a remote attacker attempting to gain information or access to a network on which it is not authorized or allowed.
Answer:
Explanation:
Network reconnaissance
NEW QUESTION 30
Which of the following attacks, the attacker cannot use the software, which is trying a number of key combinations in order to obtain your password?
- A. None
- B. Shock brutal force
- C. Buffer overflow
- D. Smurf attack
- E. Zero-day attack
Answer: B
Explanation:
Explanation
NEW QUESTION 31
In which of the following types of port scans does the scanner attempt to connect to all 65,535 ports?
- A. Strobe
- B. UDP
- C. FTP bounce
- D. Vanilla
Answer: D
NEW QUESTION 32
CORRECT TEXT
Fill in the blank with the appropriate term.
A ______________ is a term in computer terminology used for a trap that is set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems.
Answer:
Explanation:
honeypot
Explanation:
A honeypot is a term in computer terminology used for a trap that is set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer, data, or a network site that appears to be part of a network, but is actually isolated, and monitored, and which seems to contain information or a resource of value to attackers.
NEW QUESTION 33
John has implemented________in the network to restrict the limit of public IP addresses in his organization and to enhance the firewall filtering technique.
- A. VPN
- B. NAT
- C. DMZ
- D. Proxies
Answer: B
NEW QUESTION 34
Which of the following is a telecommunication service designed for cost-efficient data transmission for intermittent traffic between local area networks (LANs) and between end-points in a wide area network (WAN)?
- A. PPP
- B. X.25
- C. ISDN
- D. Frame relay
Answer: D
NEW QUESTION 35
Fill in the blank with the appropriate term. ______________is a free open-source utility for network exploration and security auditing that is used to discover computers and services on a computer network, thus creating a "map" of the network.
Answer:
Explanation:
Nmap
NEW QUESTION 36
You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate location. However, budget is an issue. Which of the following is most appropriate for this client?
- A. Cold site
- B. Warm site
- C. Hot site
- D. Off site
Answer: A
Explanation:
A cold site provides an office space, and in some cases basic equipment. However, you will need to restore your data to that equipment in order to use it. This is a much less expensive solution than the hot site. Answer option C is incorrect. A hot site has equipment installed, configured and ready to use. This may make disaster recovery much faster, but will also be more expensive. And a school district can afford to be down for several hours before resuming IT operations, so the less expensive option is more appropriate. Answer option A is incorrect. A warm site is between a hot and cold site. It has some equipment ready and connectivity ready. However, it is still significantly more expensive than a cold site, and not necessary for this scenario. Answer option D is incorrect. Off site is not any type of backup site terminology.
NEW QUESTION 37
Which of the following encryption techniques do digital signatures use?
- A. MD5
- B. IDEA
- C. RSA
- D. Blowfish
Answer: A
NEW QUESTION 38
Which of the following tools is used for wireless LANs detection?
- A. NetStumbler
- B. Airopeek
- C. Sniffer
- D. Fort Knox
Answer: A
NEW QUESTION 39
Which of the following types of transmission is the process of sending one bit at a time over a single transmission line?
- A. Parallel data transmission
- B. Serial data transmission
- C. Multicast transmission
- D. Unicast transmission
Answer: B
NEW QUESTION 40
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:
Which of the following tools is John using to crack the wireless encryption keys?
- A. PsPasswd
- B. Cain
- C. Kismet
- D. AirSnort
Answer: D
Explanation:
AirSnort is a Linux-based WLAN WEP cracking tool that recovers encryption keys. AirSnort operates by passively monitoring transmissions. It uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys. Answer option C is incorrect. Kismet is a Linux-based 802.11 wireless network sniffer and intrusion detection system. It can work with any wireless card that supports raw monitoring (rfmon) mode. Kismet can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet can be used for the following tasks: To identify networks by passively collecting packets To detect standard named networks To detect masked networks To collect the presence of non-beaconing networks via data traffic Answer option A is incorrect. Cain is a multipurpose tool that can be used to perform many tasks such as Windows password cracking, Windows enumeration, and VoIP session sniffing. This password cracking program can perform the following types of password cracking attacks: Dictionary attack Brute force attack Rainbow attack Hybrid attack Answer option B is incorrect. PsPasswd is a tool that helps Network Administrators change an account password on the local or remote system. The command syntax of PsPasswd is as follows: pspasswd [\\computer[,computer[,..] | @file [-u user [-p psswd]] Username [NewPassword]
NEW QUESTION 41
Which of the following layers of the OSI model provides interhost communication?
- A. Session layer
- B. Application layer
- C. Network layer
- D. Transport layer
Answer: A
NEW QUESTION 42
Which of the following honeypots provides an attacker access to the real operating system without any
restriction and collects a vast amount of information about the attacker?
- A. Medium-interaction honeypot
- B. High-interaction honeypot
- C. Low-interaction honeypot
- D. Honeyd
Answer: B
Explanation:
A high-interaction honeypot offers a vast amount of information about attackers. It provides an attacker access
to the real operating system without any restriction. A high-interaction honeypot is a powerful weapon that
provides opportunities to discover new tools, to identify new vulnerabilities in the operating system, and to learn
how blackhats communicate with one another.
Answer option D is incorrect. A low-interaction honeypot captures limited amounts of information that are
mainly transactional data and some limited interactive information. Because of simple design and basic
functionality, low-interaction honeypots are easy to install, deploy, maintain, and configure. A low-interaction
honeypot detects unauthorized scans or unauthorized connection attempts. A low-interaction honeypot is like a
one-way connection, as the honeypot provides services that are limited to listening ports. Its role is very
passive and does not alter any traffic. It generates logs or alerts when incoming packets match their patterns.
Answer option B is incorrect. A medium-interaction honeypot offers richer interaction capabilities than a low-
interaction honeypot, but does not provide any real underlying operating system target. Installing and
configuring a medium-interaction honeypot takes more time than a low-interaction honeypot. It is also more
complicated to deploy and maintain as compared to a low-interaction honeypot. A medium-interaction honeypot
captures a greater amount of information but comes with greater risk. Answer option C is incorrect. Honeyd is
an example of a low-interaction honeypot.
NEW QUESTION 43
How is application whitelisting different from application blacklisting?
- A. It rejects all applications other than the allowed applications
- B. It allows execution of trusted applications in a unified environment
- C. It allows execution of untrusted applications in an isolated environment
- D. It allows all applications other than the undesirable applications
Answer: A
NEW QUESTION 44
Fill in the blank with the appropriate term.
______________ is a prime example of a high-interaction honeypot.
Answer:
Explanation:
Honeynet
NEW QUESTION 45
With which of the following flag sets does the Xmas tree scan send a TCP frame to a remote device? Each
correct answer represents a part of the solution. Choose all that apply.
- A. URG
- B. PUSH
- C. FIN
- D. RST
Answer: A,B,C
Explanation:
With the URG, PUSH, and FIN flag sets, the Xmas tree scan sends a TCP frame to a remote device. The
Xmas tree scan is called an Xmas tree scan because the alternating bits are turned on and off in the flags byte
(00101001), much like the lights of a Christmas tree. Answer option B is incorrect. The RST flag is not set
when the Xmas tree scan sends a TCP frame to a remote device.
NEW QUESTION 46
......
312-38 Dumps To Pass EC-COUNCIL Exam in 24 Hours - VerifiedDumps: https://www.verifieddumps.com/312-38-valid-exam-braindumps.html
Buy Latest 312-38 Exam Q&A PDF - One Year Free Update: https://drive.google.com/open?id=1HTX5puS7CQtmmkhHByDY1QdY2PTDs2yS
