312-38 PDF Pass Leader, 312-38 Latest Real Test [Q33-Q54]

NO.33 DRAG DROP
Drag and drop the terms to match with their descriptions.

NO.34 Which of the following is a digital telephone/telecommunication network that carries voice, data, and video over
an existing telephone network infrastructure?

PPP

Frame relay

ISDN

X.25

Integrated Services Digital Network (ISDN) is a digital telephone/telecommunication network that carries voice,
data, and video over an existing telephone network infrastructure. It requires an ISDN modem at both the ends
of a transmission. ISDN is designed to provide a single interface for hooking up a telephone, fax machine,
computer, etc.
ISDN has two levels of service, i.e., Basic Rate Interface (BRI) and Primary Rate Interface (PRI).
Answer option A is incorrect. The Point-to-Point Protocol, or PPP, is a data link protocol commonly used to
establish a direct connection between two networking nodes. It can provide connection authentication,
transmission encryption privacy, and compression. PPP is commonly used as a data link layer protocol for
connection over synchronous and asynchronous circuits, where it has largely superseded the older, non-
standard Serial Line Internet Protocol (SLIP) and telephone company mandated standards (such as Link
Access Protocol, Balanced (LAPB) in the X.25 protocol suite). PPP was designed to work with numerous
network layer protocols, including Internet Protocol (IP), Novell’s Internetwork Packet Exchange (IPX), NBF,
and AppleTalk.
Answer option D is incorrect. The X.25 protocol, adopted as a standard by the Consultative Committee for
International Telegraph and Telephone (CCITT), is a commonly-used network protocol. The X.25 protocol
allows computers on different public networks (such as CompuServe, Tymnet, or a TCP/IP network) to
communicate through an intermediary computer at the network layer level. X.25’s protocols correspond closely
to the data-link and physical-layer protocols defined in the Open Systems Interconnection (OSI) communication
model.
Answer option B is incorrect. Frame relay is a telecommunication service designed for cost-efficient data
transmission for intermittent traffic between local area networks (LANs) and between end-points in a wide area
network (WAN). Frame relay puts data in a variable-size unit called a frame. It checks for lesser errors as
compared to other traditional forms of packet switching and hence speeds up data transmission.
When an error is detected in a frame, it is simply dropped. The end points are responsible for detecting and
retransmitting dropped frames.

NO.35 Which of the following are valid steps to secure routers? Each correct answer represents a complete solution. Choose all that apply.

Keep routers updated with the latest security updates.

Use a password that is easy to remember the router’s administrative console.

Configure access list entries to prevent unauthorized connections and routing.

Use a complex password of the router management console.

NO.36 Fill in the blank with the appropriate term.
______________ is a prime example of a high-interaction honeypot.

NO.37 Which of the following is a protocol that describes an approach to providing “streamlined” support of OSI application services on top of TCP/IP-based networks for some constrained environments?

Network News Transfer Protocol

Lightweight Presentation Protocol

Internet Relay Chat Protocol

Dynamic Host Configuration Protocol

NO.38 FILL BLANK
Fill in the blank with the appropriate term. ______________ is an open wireless technology standard for
exchanging data over short distances from fixed and mobile devices.

NO.39 A war dialer is a tool that is used to scan thousands of telephone numbers to detect vulnerable modems. It
provides an attacker unauthorized access to a computer. Which of the following tools can an attacker use to
perform war dialing? Each correct answer represents a complete solution. Choose all that apply.

ToneLoc

Wingate

THC-Scan

NetStumbler

NO.40 Fill in the blank with the appropriate word. A______________policy is defined as the document that describes the scope of an organization’s security requirements.

NO.41 A network designer needs to submit a proposal for a company, which has just published a web portal for its clients on the internet. Such a server needs to be isolated from the internal network, placing itself in a DMZ.
Faced with this need, the designer will present a proposal for a firewall with three interfaces, one for the internet network, another for the DMZ server farm and another for the internal network. What kind of topology will the designer propose?

Screened subnet

Multi-homed firewall

Bastion host

DMZ, External-Internal firewall

NO.42 You are using more than the safety of the existing network. You’ll find a machine that is not in use as such, but is a software that emulates the operation of a sensitive database server. What is this?

The reactive IDS

Honey Pot

None

Virus

The polymorphic virus

NO.43 Which of the following network devices operate at the network layer of the OSI model? Each correct answer represents a complete solution. Choose all that apply.

Router

Bridge

Repeater

Gateway

NO.44 Which of the following is a tool that runs on the Windows OS and analyzes iptables log messages to detect port scans and other suspicious traffic?

PSAD

Hping

NetRanger

Nmap

NO.45 Which of the following firewalls are used to monitor the status of active connections, and configure the network packets to pass through the firewall? Each correct answer represents a complete solution. Choose all that apply.

Farm owner

Proxy server

Dynamic packet filtering

The circuit gateway

NO.46 Which of the following is a technique for gathering information about a remote network protected by a firewall?

Firewalking

Warchalking

Wardriving

Wardialing

Fire walking is a technique for gathering information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. If the firewall allows this crafted packet through, it forwards the packet to the next hop. On the next hop, the packet expires and elicits an ICMP
“TTL expired in transit” message to the attacker. If the firewall does not allow the traffic, there should be no response, or an ICMP “administratively prohibited” message should be returned to the attacker. A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall. The main drawback of this technique is that if an administrator blocks ICMP packets from leaving the network, it is ineffective.
Answer option B is incorrect. Warchalking is the drawing of symbols in public places to advertise an open Wi-Fi wireless network. Having found a Wi-Fi node, the warchalker draws a special symbol on a nearby object, such as a wall, the pavement, or a lamp post. The name warchalking is derived from the cracker terms war dialing and war driving.
Answer option C is incorrect. War driving, also called access point mapping, is the act of locating and possibly exploiting connections to wireless local area networks while driving around a city or elsewhere. To do war driving, one needs a vehicle, a computer (which can be a laptop), a wireless Ethernet card set to work in promiscuous mode, and some kind of an antenna which can be mounted on top of or positioned inside the car.
Because a wireless LAN may have a range that extends beyond an office building, an outside user may be able to intrude into the network, obtain a free Internet connection, and possibly gain access to company records and other resources.
Answer option D is incorrect. War dialing or wardialing is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems, and fax machines. Hackers use the resulting lists for various purposes, hobbyists for exploration, and crackers – hackers that specialize in computer security – for password guessing.

NO.47 Which of the following statements are true about an IPv6 network? Each correct answer represents a complete solution. Choose all that apply.

For interoperability, IPv4 addresses use the last 32 bits of IPv6 addresses.

It increases the number of available IP addresses.

It uses longer subnet masks than those used in IPv4.

It provides improved authentication and security.

It uses 128-bit addresses.

NO.48 Which of the following is a standard protocol for interfacing external application software with an information server, commonly a Web server?

DHCP

IP

CGI

TCP

The Common Gateway Interface (CGI) is a standard protocol for interfacing external application software with an information server, commonly a Web server. The task of such an information server is to respond to requests (in the case of web servers, requests from client web browsers) by returning output. When a user requests the name of an entry, the server will retrieve the source of that entry’s page (if one exists), transform it into HTML, and send the result.
Answer option A is incorrect. DHCP is a Dynamic Host Configuration Protocol that allocates unique (IP) addresses dynamically so that they can be used when no longer needed. A DHCP server is set up in a DHCP environment with the appropriate configuration parameters for the given network. The key parameters include the range or “pool” of available IP addresses, correct subnet masks, gateway, and name server addresses.
Answer option B is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP.IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4 (IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6), is being deployed actively worldwide.
Answer option D is incorrect. Transmission Control Protocol (TCP) is a reliable, connection-oriented protocol operating at the transport layer of the OSI model. It provides a reliable packet delivery service encapsulated within the Internet Protocol (IP). TCP guarantees the delivery of packets, ensures proper sequencing of data, and provides a checksum feature that validates both the packet header and its data for accuracy. If the network corrupts or loses a TCP packet during transmission, TCP is responsible for retransmitting the faulty packet. It can transmit large amounts of data. Application layer protocols, such as HTTP and FTP, utilize the services of TCP to transfer files between clients and servers.

NO.49 Fill in the blank with the appropriate word. The primary goal of _________________ risk analysis is to determine the proportion of effect and theoretical response.

NO.50 Which BC/DR activity works on the assumption that the most critical processes are brought back from a remote location first, followed by the less critical functions?

Recovery

Restoration

Response

Resumption

NO.51 Which of the following is the main international standards organization for the World Wide Web?

W3C

ANSI

WASC

CCITT

NO.52 Docker provides Platform-as-a-Service (PaaS) through ________ and delivers containerized software packages.

Server-level virtualization

Network-level virtualization

OS-level virtualization

Storage-level virtualization

NO.53 What is a person, who offers formal experienced testimony in the court, called?

Expert Witness

Evidence Manager

Evidence Documenter

Attorney

NO.54 Malone is finishing up his incident handling plan for IT before giving it to his boss for review. He is outlining the incident response methodology and the steps that are involved. Which step should Malone list as the last step in the incident response methodology?

Malone should list a follow-up as the last step in the methodology

Recovery would be the correct choice for the last step in the incident response methodology

He should assign eradication to the last step.

Containment should be listed on Malone’s plan for incident response.

312-38 PDF Pass Leader, 312-38 Latest Real Test [Q33-Q54]

How much Certified Network Defender Cost

Leave a Reply Cancel reply