[Full-Version] 2024 New Prep4sureGuide 312-38 PDF Recently Updated Questions
312-38 Exam with Guarantee Updated 232 Questions
NEW QUESTION # 33
Which of the following standards is a proposed enhancement to the 802.11a and 802.11b wireless LAN (WLAN) specifications that offers quality of service (QoS) features, including the prioritization of data, voice, and video transmissions?
- A. 802.11e
- B. 802.11n
- C. 802.11h
- D. 802.15
Answer: A
NEW QUESTION # 34
In MacOS, how can the user implement disk encryption?
- A. By enabling FileVault feature
- B. By executing dm-crypt command
- C. By turning on Device Encryption feature
- D. By enabling BitLocker feature
Answer: A
NEW QUESTION # 35
Which of the following provide an "always on" Internet access service when connecting to an ISP?Each correct answer represents a complete solution. Choose two.
- A. DSL
- B. Analog modem
- C. Digital modem
- D. Cable modem
Answer: A,D
NEW QUESTION # 36
Which of the following examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware, and policy violations?
- A. Wireless Intrusion Prevention System
- B. Network Behavior Analysis
- C. Host-based Intrusion Prevention
- D. Network-based Intrusion Prevention
Answer: B
Explanation:
Explanation
Explanation:
Network Behavior Analysis examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware, and policy violations.
Answer option B is incorrect. Network-based Intrusion Prevention (NIPS) monitors the entire network for suspicious traffic by analyzing protocol activity.
Answer option C is incorrect. Wireless Intrusion Prevention System (WIPS) monitors a wireless network for suspicious traffic by analyzing wireless networking protocols.
Answer option D is incorrect. Host-based Intrusion Prevention (HIPS) is an installed software package that monitors a single host for suspicious activity by analyzing events occurring within that host.
NEW QUESTION # 37
John works as an Ethical Hacker for www.company.com Inc. He wants to find out the ports that are open in www.company.com's server using a port scanner. However, he does not want to establish a full TCP connection. Which of the following scanning techniques will he use to accomplish this task?
- A. TCP SYN/ACK
- B. Xmas tree
- C. TCP FIN
- D. TCP SYN
Answer: D
Explanation:
According to the scenario, John does not want to establish a full TCP connection. Therefore, he will use the TCP SYN scanning technique. TCP SYN scanning is also known as half-open scanning because in this type of scanning, a full TCP connection is never opened. The steps of TCP SYN scanning are as follows: 1.The attacker sends a SYN packet to the target port. 2.If the port is open, the attacker receives the SYN/ACK message. 3.Now the attacker breaks the connection by sending an RST packet. 4.If the RST packet is received, it indicates that the port is closed. This type of scanning is hard to trace because the attacker never establishes a full 3-way handshake connection and most sites do not create a log of incomplete TCP connections. Answer option C is incorrect. In TCP SYN/ACK scanning, an attacker sends a SYN/ACK packet to the target port. If the port is closed, the victim assumes that this packet was mistakenly sent by the attacker, and sends the RST packet to the attacker. If the port is open, the SYN/ACK packet will be ignored and the port will drop the packet. TCP SYN/ACK scanning is stealth scanning, but some intrusion detection systems can detect TCP SYN/ACK scanning. Answer option D is incorrect. TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port will drop that packet. TCP FIN scanning is useful only for identifying ports of non-Windows operating systems because Windows operating systems send only RST packets irrespective of whether the port is open or closed. Answer option B is incorrect. Xmas Tree scanning is just the opposite of null scanning. In Xmas Tree scanning, all packets are turned on. If the target port is open, the service running on the target port discards the packets without any reply. According to RFC 793, if the port is closed, the remote system replies with the RST packet. Active monitoring of all incoming packets can help system network administrators detect an Xmas Tree scan.
NEW QUESTION # 38
Which type of firewall consists of three interfaces and allows further subdivision of the systems based on specific security objectives of the organization?
- A. Bastion host
- B. Unscreened subnet
- C. Screened subnet
- D. Multi-homed firewall
Answer: D
NEW QUESTION # 39
Which of the following applications is used for the statistical analysis and reporting of the log files?
- A. jplag
- B. Sawmill
- C. Sniffer
- D. Snort
Answer: B
Explanation:
Explanation
NEW QUESTION # 40
Which of the following is a network layer protocol used to obtain an IP address for a given hardware (MAC) address?
- A. PIM
- B. RARP
- C. IP
- D. ARP
Answer: B
Explanation:
Reverse Address Resolution Protocol (RARP) is a Network layer protocol used to obtain an IP address for a given hardware (MAC) address. RARP is sort of the reverse of an ARP. Common protocols that use RARP are BOOTP and DHCP. Answer option D is incorrect. Address Resolution Protocol (ARP) is a network maintenance protocol of the TCP/IP protocol suite. It is responsible for the resolution of IP addresses to media access control (MAC) addresses of a network interface card (NIC). The ARP cache is used to maintain a correlation between a MAC address and its corresponding IP address. ARP provides the protocol rules for making this correlation and providing address conversion in both directions. ARP is limited to physical network systems that support broadcast packets. Answer option B is incorrect. Protocol-Independent Multicast (PIM) is a family of multicast routing protocols for Internet Protocol (IP) networks that provide one-to-many and many-to-many distribution of data over a LAN, WAN, or the Internet. It is termed protocol-independent because PIM does not include its own topology discovery mechanism, but instead uses routing information supplied by other traditional routing protocols, such as Border Gateway Protocol (BGP). Answer option A is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP. IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4 (IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6), is being deployed actively worldwide.
NEW QUESTION # 41
Which of the following IP class addresses are not allotted to hosts? Each correct answer represents a complete solution. Choose all that apply.
- A. Class C
- B. Class A
- C. Class B
- D. Class D
- E. Class E
Answer: D,E
Explanation:
Class addresses D and E are not allotted to hosts. Class D addresses are reserved for multicasting, and their address range can extend from 224 to 239. Class E addresses are reserved for experimental purposes. Their addresses range from 240 to 254.
Answer option A is incorrect. Class A addresses are specified for large networks. It consists of up to
16,777,214 client devices (hosts), and their address range can extend from 1 to 126.
Answer option B is incorrect. Class B addresses are specified for medium size networks. It consists of up to
65,534 client devices, and their address range can extend from 128 to 191.
Answer option E is incorrect. Class C addresses are specified for small local area networks (LANs). It consists of up to 245 client devices, and their address range can extend from 192 to 223.
NEW QUESTION # 42
Which of the following tools is used to ping a given range of IP addresses and resolve the host name of the
remote system?
- A. Hping
- B. Nmap
- C. Netscan
- D. SuperScan
Answer: D
NEW QUESTION # 43
CORRECT TEXT
Fill in the blank with the appropriate term. ______________ is an open wireless technology standard for exchanging data over short distances from fixed and mobile devices.
Answer:
Explanation:
Bluetooth
Explanation:
Bluetooth is an open wireless technology standard for exchanging data over short distances from fixed and mobile devices, creating personal area networks with high levels of security. Created by telecoms vendor Ericsson in 1994, it was originally conceived as a wireless alternative to RS-232 data cables. It can connect several devices, overcoming problems of synchronization. Today Bluetooth is managed by the Bluetooth Special Interest Group.
NEW QUESTION # 44
John has implemented _________ in the network to restrict the number of public IP addresses in his organization and to enhance the firewall filtering technique.
- A. Proxies
- B. DMZ
- C. NAT
- D. VPN
Answer: C
NEW QUESTION # 45
Which of the following is a network that supports mobile communications across an arbitrary number of wireless LANs and satellite coverage areas?
- A. HAN
- B. LAN
- C. WAN
- D. GAN
Answer: D
Explanation:
A global area network (GAN) is a network that is used for supporting mobile communications across an arbitrary number of wireless LANs, satellite coverage areas, etc. The key challenge in mobile communications is handing off the user communications from one local coverage area to the next.
Answer option B is incorrect. A wide area network (WAN) is a geographically dispersed telecommunications network. The term distinguishes a broader telecommunication structure from a local area network (LAN). A wide area network may be privately owned or rented, but the term usually connotes the inclusion of public (shared user) networks. An intermediate form of network in terms of geography is a metropolitan area network (MAN). A wide area network is also defined as a network of networks, as it interconnects LANs over a wide geographical area.
Answer option D is incorrect. A home area network (HAN) is a residential LAN that is used for communication between digital devices typically deployed in the home, usually a small number of personal computers and accessories, such as printers and mobile computing devices.
Answer option A is incorrect. The Local Area Network (LAN) is a group of computers connected within a restricted geographic area, such as residence, educational institute, research lab, and various other organizations. It allows the users to share files and services, and is commonly used for intra-office communication. The LAN has connections with other LANs via leased lines, leased services, or by tunneling across the Internet using the virtual private network technologies.
NEW QUESTION # 46
Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client computers must be able to automatically connect to the wireless LAN.
However, the unauthorized computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants to configure all the wireless access points and client computers to act in accordance with the company's security policy. What will he do to accomplish this? Each correct answer represents a part of the solution. Choose three.
- A. Configure the authentication type for the wireless LAN to Shared Key.
- B. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
- C. On each client computer, add the SSID for the wireless LAN as the preferred network.
- D. Broadcast SSID to connect to the access point (AP).
- E. Install a firewall software on each wireless access point.
- F. Configure the authentication type for the wireless LAN to Open system.
Answer: A,B,C
NEW QUESTION # 47
Fred is a network technician working for Johnson Services, a temporary employment agency in Boston. Johnson Services has three remote offices in New England and the headquarters in Boston where Fred works.
The company relies on a number of customized applications to perform daily tasks and unfortunately these applications require users to be local administrators. Because of this, Fred's supervisor wants to implement tighter security measures in other areas to compensate for the inherent risks in making those users local admins. Fred's boss wants a solution that will be placed on all computers throughout the company and monitored by Fred. This solution will gather information on all network traffic to and from the local computers without actually affecting the traffic. What type of solution does Fred's boss want to implement?
- A. Fred's boss wants to implement a HIPS solution.
- B. Fred's boss wants a NIDS implementation.
- C. Fred's boss wants to implement a HIDS solution.
- D. Fred's boss wants Fred to monitor a NIPS system.
Answer: C
NEW QUESTION # 48
Daniel is monitoring network traffic with the help of a network monitoring tool to detect any abnormalities.
What type of network security approach is Daniel adopting?
- A. Retrospective
- B. Preventative
- C. Reactive
- D. Defense-in-depth
Answer: C
NEW QUESTION # 49
FILL BLANK
Fill in the blank with the appropriate term. ______________is a protocol used to synchronize the timekeeping
among the number of distributed time servers and clients.
Answer:
Explanation:
NTP
Explanation:
Network Time Protocol (NTP) is used to synchronize the timekeeping among the number of distributed time
servers and clients. It is used for the time management in a large and diverse network that contains many
interfaces. In this protocol, servers define the time, and clients have to be synchronized with the defined time.
These clients can choose the most reliable source of time defined from the several NTP servers for their
information transmission.
NEW QUESTION # 50
Which of the following types of coaxial cable is used for cable TV and cable modems?
- A. RG-62
- B. RG-59
- C. RG-58
- D. RG-8
Answer: B
Explanation:
RG-59 type of coaxial cable is used for cable TV and cable modems.
Answer option A is incorrect. RG-8 coaxial cable is primarily used as a backbone in an Ethernet
LAN environment and often connects one wiring closet to another. It is also known as 10Base5 or
ThickNet.
Answer option B is incorrect. RG-62 coaxial cable is used for ARCNET and automotive radio
antennas.
Answer option D is incorrect. RG-58 coaxial cable is used for Ethernet networks. It uses baseband
signaling and 50-Ohm terminator. It is also known as 10Base2 or ThinNet.
NEW QUESTION # 51
......
Latest 312-38 Pass Guaranteed Exam Dumps Certification Sample Questions: https://www.prep4sureguide.com/312-38-prep4sure-exam-guide.html
312-38 Updated Exam Dumps [2024] Practice Valid Exam Dumps Question: https://drive.google.com/open?id=1bEel2HBWZyxIC8xupF5h8xK4U-WSYwtl