312-38 Dumps with Free 365 Days Update Fast Exam Updates
Verified 312-38 dumps Q&As - 2024 Latest 312-38 Download
The EC-Council 312-38: EC-Council Certified Network Defender (CND) exam is a comprehensive certification that is designed to test the knowledge and skills of professionals in the field of network defense. EC-Council Certified Network Defender CND certification covers a variety of topics, including network security, network protocols, and network defense technologies. 312-38 exam is recognized globally and is considered an essential requirement for many cybersecurity roles. It is particularly valuable for professionals who work in industries that handle sensitive information.
NEW QUESTION # 36
Which of the following is a presentation layer protocol?
- A. LWAPP
- B. RPC
- C. BGP
- D. TCP
Answer: A
NEW QUESTION # 37
Which of the following is a network layer protocol used to obtain an IP address for a given hardware (MAC)
address?
- A. ARP
- B. PIM
- C. IP
- D. RARP
Answer: D
Explanation:
Reverse Address Resolution Protocol (RARP) is a Network layer protocol used to obtain an IP address for a
given hardware (MAC) address. RARP is sort of the reverse of an ARP. Common protocols that use RARP are
BOOTP and DHCP.
Answer option D is incorrect. Address Resolution Protocol (ARP) is a network maintenance protocol of the
TCP/IP protocol suite. It is responsible for the resolution of IP addresses to media access control (MAC)
addresses of a network interface card (NIC). The ARP cache is used to maintain a correlation between a MAC
address and its corresponding IP address. ARP provides the protocol rules for making this correlation and
providing address conversion in both directions. ARP is limited to physical network systems that support
broadcast packets.
Answer option B is incorrect. Protocol-Independent Multicast (PIM) is a family of multicast routing protocols for
Internet Protocol (IP) networks that provide one-to-many and many-to-many distribution of data over a LAN,
WAN, or the Internet. It is termed protocol-independent because PIM does not include its own topology
discovery mechanism, but instead uses routing information supplied by other traditional routing protocols, such
as Border Gateway Protocol (BGP).
Answer option A is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a
packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP.
IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering
distinguished protocol datagrams (packets) from the source host to the destination host solely based on their
addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram
encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4
(IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6),
is being deployed actively worldwide.
NEW QUESTION # 38
Which of the following is a 16-bit field that identifies the source port number of the application program in the host that is sending the segment?
- A. Header Length
- B. Acknowledgment Number
- C. Sequence Number
- D. Source Port Address
Answer: D
Explanation:
Source Port Address is a 16-bit field that identifies the source port number of the application
program in the host that is sending the segment.
Answer option A is incorrect. This is a 32-bit field that identifies the byte number that the sender of
the segment is expecting to receive from the receiver.
Answer option C is incorrect. This is a 4-bit field that defines the 4-byte words in the TCP header.
The header length can be between 20 and 60 bytes. Therefore, the value of this field can be
between 5 and 15.
Answer option D is incorrect. This is a 32-bit field that identifies the number assigned to the first
byte of data contained in the segment.
NEW QUESTION # 39
Fill in the blank with the appropriate word. A______________policy is defined as the document that describes the scope of an organization's security requirements.
Answer:
Explanation:
security
NEW QUESTION # 40
In _______ mechanism, the system or application sends log records either on the local disk or over the network.
- A. Push-based
- B. Host-based
- C. Network-based
- D. Pull-based
Answer: A
NEW QUESTION # 41
Which of the following firewalls are used to monitor the status of active connections, and configure the network packets to pass through the firewall? Each correct answer represents a complete solution. Choose all that apply.
- A. Proxy server
- B. Farm owner
- C. The circuit gateway
- D. Dynamic packet filtering
Answer: B,D
NEW QUESTION # 42
Mark is monitoring the network traffic on his organization's network. He wants to detect a TCP and UDP ping sweep on his network. Which type of filter will be used to detect this on the network?
- A. Tcp.dstport==7 and udp.dstport==7
- B. Tcp.srcport==7 and udp.dstport==7
- C. Tcp.srcport==7 and udp.srcport==7
- D. Tcp.dstport==7 and udp.srcport==7
Answer: A
NEW QUESTION # 43
Which of the following is a digital telephone/telecommunication network that carries voice, data, and video over
an existing telephone network infrastructure?
- A. ISDN
- B. PPP
- C. X.25
- D. Frame relay
Answer: A
Explanation:
Integrated Services Digital Network (ISDN) is a digital telephone/telecommunication network that carries voice,
data, and video over an existing telephone network infrastructure. It requires an ISDN modem at both the ends
of a transmission. ISDN is designed to provide a single interface for hooking up a telephone, fax machine,
computer, etc.
ISDN has two levels of service, i.e., Basic Rate Interface (BRI) and Primary Rate Interface (PRI).
Answer option A is incorrect. The Point-to-Point Protocol, or PPP, is a data link protocol commonly used to
establish a direct connection between two networking nodes. It can provide connection authentication,
transmission encryption privacy, and compression. PPP is commonly used as a data link layer protocol for
connection over synchronous and asynchronous circuits, where it has largely superseded the older, non-
standard Serial Line Internet Protocol (SLIP) and telephone company mandated standards (such as Link
Access Protocol, Balanced (LAPB) in the X.25 protocol suite). PPP was designed to work with numerous
network layer protocols, including Internet Protocol (IP), Novell's Internetwork Packet Exchange (IPX), NBF,
and AppleTalk.
Answer option D is incorrect. The X.25 protocol, adopted as a standard by the Consultative Committee for
International Telegraph and Telephone (CCITT), is a commonly-used network protocol. The X.25 protocol
allows computers on different public networks (such as CompuServe, Tymnet, or a TCP/IP network) to
communicate through an intermediary computer at the network layer level. X.25's protocols correspond closely
to the data-link and physical-layer protocols defined in the Open Systems Interconnection (OSI) communication
model.
Answer option B is incorrect. Frame relay is a telecommunication service designed for cost-efficient data
transmission for intermittent traffic between local area networks (LANs) and between end-points in a wide area
network (WAN). Frame relay puts data in a variable-size unit called a frame. It checks for lesser errors as
compared to other traditional forms of packet switching and hence speeds up data transmission.
When an error is detected in a frame, it is simply dropped. The end points are responsible for detecting and
retransmitting dropped frames.
NEW QUESTION # 44
Which of the following types of coaxial cable is used for cable TV and cable modems?
- A. RG-8
- B. RG-59
- C. RG-58
- D. RG-62
Answer: B
Explanation:
RG-59 type of coaxial cable is used for cable TV and cable modems.
Answer option A is incorrect. RG-8 coaxial cable is primarily used as a backbone in an Ethernet LAN environment and often connects one wiring closet to another. It is also known as 10Base5 or ThickNet.
Answer option B is incorrect. RG-62 coaxial cable is used for ARCNET and automotive radio antennas.
Answer option D is incorrect. RG-58 coaxial cable is used for Ethernet networks. It uses baseband signaling and 50-Ohm terminator. It is also known as 10Base2 or ThinNet.
NEW QUESTION # 45
Which of the following is a worldwide organization that aims to establish, refine, and promote Internet security
standards?
- A. IEEE
- B. ITU
- C. WASC
- D. ANSI
Answer: C
Explanation:
Web Application Security Consortium (WASC) is a worldwide organization that aims to establish, refine, and
promote Internet security standards. WASC is vendor-neutral, although members may belong to corporations
involved in the research, development, design, and distribution of Web security-related products.
Answer option A is incorrect. ANSI (American National Standards Institute) is the primary organization for
fostering the development of technology standards in the United States. ANSI works with industry groups and
is the U.S. member of the International Organization for Standardization (ISO) and the International Electro-
technical Commission (IEC). Long-established computer standards from ANSI include the American Standard
Code for Information Interchange (ASCII) and the Small Computer System Interface (SCSI).
Answer option D is incorrect. The International Telecommunication Union (ITU) is an organization established
to standardize and regulate international radio and telecommunications. Its main tasks include standardization,
allocation of the radio spectrum, and organizing interconnection arrangements between different countries to
allow international phone calls. ITU sets standards for global telecom networks.
The ITU's telecommunications division (ITU-T) produces more than 200 standard recommendations each year
in the converging areas of telecommunications, information technology, consumer electronics, broadcasting
and multimedia communications. ITU was streamlined into the following three sectors:
ITU-D (Telecommunication Development)
ITU-R (Radio communication)
ITU-T (Telecommunication Standardization)
Answer option C is incorrect. The Institute of Electrical and Electronic Engineers (IEEE) is a society of technical
professionals. It promotes the development and application of electro-technology and allied sciences. IEEE
develops communications and network standards, among other activities. The organization publishes number
of journals, has many local chapters, and societies in specialized areas.
NEW QUESTION # 46
Which of the following protocols is described as a connection-oriented and reliable delivery transport layer protocol?
- A. IP
- B. UDP
- C. SSL
- D. TCP
Answer: D
NEW QUESTION # 47
Which of the following protocols is used to share information between routers to transport IP Multicast packets among networks?
- A. LWAPP
- B. RSVP
- C. RPC
- D. DVMRP
Answer: D
Explanation:
The Distance Vector Multicast Routing Protocol (DVMRP) is used to share information between routers to transport IP Multicast packets among networks. It uses a reverse path-flooding technique and is used as the basis for the Internet's multicast backbone (MBONE). In particular, DVMRP is notorious for poor network scaling, resulting from reflooding, particularly with versions that do not implement pruning. DVMRP's flat unicast routing mechanism also affects its capability to scale.
Answer option A is incorrect. The Resource Reservation Protocol (RSVP) is a Transport layer protocol designed to reserve resources across a network for an integrated services Internet. RSVP does not transport application data but is rather an Internet control protocol, like ICMP, IGMP, or routing protocols. RSVP provides receiver-initiated setup of resource reservations for multicast or unicast data flows with scaling and robustness.
RSVP can be used by either hosts or routers to request or deliver specific levels of quality of service (QoS) for application data streams. RSVP defines how applications place reservations and how they can leave the reserved resources once the need for them has ended. RSVP operation will generally result in resources being reserved in each node along a path.
Answer option C is incorrect. A remote procedure call (RPC) hides the details of the network by using the common procedure call mechanism familiar to every programmer. Like any ordinary procedure, RPC is also synchronous and parameters are passed to it. A process of the client calls a function on a remote server and remains suspended until it gets back the results.
Answer option D is incorrect. LWAPP (Lightweight Access Point Protocol) is a protocol used to control multiple Wi-Fi wireless access points at once. This can reduce the amount of time spent on configuring, monitoring, or troubleshooting a large network. This also allows network administrators to closely analyze the network.
NEW QUESTION # 48
The bank where you work has 600 windows computers and 400 Red Hat computers which primarily serve as bank teller consoles. You have created a plan and deployed all the patches to the Windows computers and you are now working on updating the Red Hat computers. What command should you run on the network to update the Red Hat computers, download the security package, force the package installation, and update all currently installed packages?
- A. You should run the up2date -d -f -u command
- B. You should run the up2data -u command
- C. You should run the WSUS -d -f -u command.
- D. You should type the sysupdate -d command
Answer: A
NEW QUESTION # 49
Fill in the blank with the appropriate term. ______________is a method for monitoring the e-mail delivery to the intended recipient.
Answer:
Explanation:
Email tracking
NEW QUESTION # 50
Harry has sued the company claiming they made his personal information public on a social networking site in the United States. The company denies the allegations and consulted a/an
_______ for legal advice to defend them against this allegation.
- A. PR Specialist
- B. Attorney
- C. Incident Handler
- D. Evidence Manager
Answer: B
NEW QUESTION # 51
Which IEEE standard does wireless network use?
- A. 802.18
- B. 802.10
- C. 802.11
- D. 802.9
Answer: C
NEW QUESTION # 52
Which of the following protocols is used for inter-domain multicast routing?
- A. RADIUS
- B. RPC
- C. BGP
- D. VoIP
Answer: C
NEW QUESTION # 53
Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends a large number of unsolicited commercial e-mail (UCE) messages to these addresses. Which of the following e-mail crimes is Peter committing?
- A. E-mail spam
- B. E-mail storm
- C. E-mail bombing
- D. E-mail spoofing
Answer: A
Explanation:
Peter is performing spamming activity. Spam is a term that refers to the unsolicited e-mails sent to a large number of e-mail users. The number of such e-mails is increasing day by day, as most companies now prefer to use e-mails for promoting their products. Because of these unsolicited e-mails, legitimate e-mails take a much longer time to deliver to their destination. The attachments sent through spam may also contain viruses.
However, spam can be stopped by implementing spam filters on servers and e-mail clients.
Answer option C is incorrect. Mail bombing is an attack that is used to overwhelm mail servers and clients by sending a large number of unwanted e-mails. The aim of this type of attack is to completely fill the recipient's hard disk with immense, useless files, causing at best irritation, and at worst total computer failure. E-mail filtering and properly configuring email relay functionality on mail servers can be helpful for protection against this type of attack.
Answer option B is incorrect. An e-mail storm is a sudden spike of Reply All messages on an e-mail distribution list, usually caused by a controversial or misdirected message. Such storms start when multiple members of the distribution list reply to the entire list at the same time in response to an instigating message. Other members soon respond, usually adding vitriol to the discussion, asking to be removed from the list, or pleading for the cessation of messages. If enough members reply to these unwanted messages, this triggers a chain reaction of e-mail messages. The sheer load of traffic generated by these storms can render the e-mail servers carrying them inoperative, similar to a DDoS attack.
Some e-mail viruses also have the capacity to create e-mail storms, by sending copies of themselves to an infected user's contacts, including distribution lists, infecting the contacts in turn.
Answer option D is incorrect. E-mail spoofing is a term used to describe e-mail activity in which the sender address and other parts of the e-mail header are altered to appear as though the e-mail originated from a different source. E-mail spoofing is a technique commonly used for spam e-mail and phishing to hide the origin of an e-mail message. By changing certain properties of the e-mail, such as the From, Return-Path, and Reply- To fields (which can be found in the message header), ill-intentioned users can make the e-mail appear to be from someone other than the actual sender. The result is that, although the e-mail appears to come from the address indicated in the From field, it actually comes from another source.
NEW QUESTION # 54
Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client computers must be able to automatically connect to the wireless LAN. However, the unauthorized computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants to configure all the wireless access points and client computers to act in accordance with the company's security policy. What will he do to accomplish this? Each correct answer represents a part of the solution. Choose three.
- A. Configure the authentication type for the wireless LAN to Shared Key.
- B. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
- C. Configure the authentication type for the wireless LAN to Open system.
- D. On each client computer, add the SSID for the wireless LAN as the preferred network.
- E. Broadcast SSID to connect to the access point (AP).
- F. Install a firewall software on each wireless access point.
Answer: A,B,D
Explanation:
To configure all the wireless access points and client computers to act in accordance with the company's security policy, Mark will take the following actions: Configure the authentication type for the wireless LAN to Shared Key. Shared Key authentication provides access control.Disable SSID Broadcast and enable MAC address filtering on all the wireless access points. Disabling SSID Broadcast and enabling MAC address filtering will prevent unauthorized wireless client computers from connecting to the access point (AP). Only the computers with particular MAC addresses will be able to connect to the wireless access points.On each client computer, add the SSID for the wireless LAN as the preferred network. Answer option E is incorrect. Setting the authentication type for the wireless LAN to Open System will disable Wired Equivalent Privacy (WEP). This level of WEP will not provide security.
NEW QUESTION # 55
Which of the following cables is made of glass or plastic and transmits signals in the form of light?
- A. Fiber optic cable
- B. Twisted pair cable
- C. Coaxial cable
- D. Plenum cable
Answer: A
Explanation:
Fiber optic cable is also known as optical fiber. It is made of glass or plastic and transmits signals in the form of light. It is of cylindrical shape and consists of three concentric sections: the core, the cladding, and the jacket.
Optical fiber carries much more information than conventional copper wire and is in general not subject to electromagnetic interference and the need to retransmit signals. Most telephone company's long-distance lines are now made of optical fiber. Transmission over an optical fiber cable requires repeaters at distance intervals.
The glass fiber requires more protection within an outer cable than copper.
Answer option B is incorrect. Twisted pair cabling is a type of wiring in which two conductors (the forward and return conductors of a single circuit) are twisted together for the purposes of canceling out electromagnetic interference (EMI) from external sources. It consists of the following twisted pair cables:
Shielded Twisted Pair: Shielded Twisted Pair (STP) is a special kind of copper telephone wiring used in some business installations. An outer covering or shield is added to the ordinary twisted pair telephone wires; the shield functions as a ground. Twisted pair is the ordinary copper wire that connects home and many business computers to the telephone company. Shielded twisted pair is often used in business installations. Unshielded Twisted Pair: Unshielded Twisted Pair (UTP) is the ordinary wire used in home. UTP cable is also the most common cable used in computer networking. Ethernet, the most common data networking standard, utilizes UTP cables. Twisted pair cabling is often used in data networks for short and medium length connections because of its relatively lower costs compared to optical fiber and coaxial cable.UTP is also finding increasing use in video applications, primarily in security cameras. Many middle to high-end cameras include a UTP output with setscrew terminals. This is made possible by the fact that UTP cable bandwidth has improved to match the baseband of television signals.
Answer option A is incorrect. Coaxial cable is the kind of copper cable used by cable TV companies between the community antenna and user homes and businesses. Coaxial cable is sometimes used by telephone companies from their central office to the telephone poles near users. It is also widely installed for use in business and corporation Ethernet and other types of local area network. Coaxial cable is called "coaxial" because it includes one physical channel that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running along the same axis. The outer channel serves as a ground.
Many of these cables or pairs of coaxial tubes can be placed in a single outer sheathing and, with repeaters, can carry information for a great distance. It is shown in the figure below:
Answer option C is incorrect. Plenum cable is cable that is laid in the plenum spaces of buildings. The plenum is the space that can facilitate air circulation for heating and air conditioning systems, by providing pathways for either heated/conditioned or return airflows. Space between the structural ceiling and the dropped ceiling or under a raised floor is typically considered plenum. However, some drop ceiling designs create a tight seal that does not allow for airflow and therefore may not be considered a plenum air-handling space. The plenum space is typically used to house the communication cables for the building's computer and telephone network.
NEW QUESTION # 56
......
The EC-Council Certified Network Defender CND certification is ideal for individuals who are looking to pursue a career in network security and defense. It is also suitable for professionals who are already working in the field and are looking to enhance their skills and knowledge. The EC-Council CND exam is a rigorous test, and passing it demonstrates that a candidate has the necessary expertise to secure and defend a network against various cyber threats. It is an essential certification for professionals who are responsible for maintaining the security of their organization's network.
Updated EC-COUNCIL Study Guide 312-38 Dumps Questions: https://freedumps.torrentvalid.com/312-38-valid-braindumps-torrent.html