312-38 Exam Questions
99 real 312-38 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51Network Security Policy and Management
Fill in the blank with the appropriate word. The primary goal of _________________ risk analysis is to determine the proportion of effect and theoretical response. Answer: qualitat...
qualitative risk analysisrisk assessmentrisk managementrisk proportion - Question #52Computer Network Defense Fundamentals
Which of the following topologies is a type of physical network design where each computer in the network is connected to a central device through an unshielded twisted-pair (UTP)...
network topologiesstar topologyphysical network designUTP cabling - Question #53Network Security Controls, Protocols, and Devices
Fill in the blank with the appropriate term. A _____________ is a technique to authenticate digital documents by using computer cryptography. Answer: signature
digital signaturecryptographydocument authenticationPKI - Question #54Network Security Controls, Protocols, and Devices
Which of the following is an intrusion detection system that reads all incoming packets and tries to find suspicious patterns known as signatures or rules?
Network Intrusion DetectionNIDSSignature-based DetectionPacket Analysis - Question #55Network Security Policy and Management
Fill in the blank with the appropriate term. The_______________ is typically considered as the top InfoSec officer in the organization and helps in maintaining current and appropri...
CISOInfoSec governancesecurity managementsecurity roles - Question #56Network Security Threats, Attacks, and Vulnerabilities
In which of the following types of port scans does the scanner attempt to connect to all 65,535 ports?
port scanningvanilla scanTCP connectreconnaissance - Question #57Network Security Controls, Protocols, and Devices
Which of the following is a firewall that keeps track of the state of network connections traveling across it?
stateful firewallconnection trackingfirewall typesnetwork defense - Question #58Network Security Controls, Protocols, and Devices
Fill in the blank with the appropriate term. ______________ encryption is a type of encryption that uses two keys, i.e., a public key and a private key pair for data encryption. It...
asymmetric encryptionpublic key cryptographyPKIencryption types - Question #59Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. ______________is a protocol used to synchronize the timekeeping among the number of distributed time servers and clients. Answer: NTP
NTPtime synchronizationnetwork protocolsdistributed timekeeping - Question #60Computer Network Defense Fundamentals
Fill in the blank with the appropriate term.The ______________is a communication protocol that communicates information between the network routers and the multicast end stations....
IGMPmulticastrouting protocolnetwork communication - Question #61Network Security Threats, Attacks, and Vulnerabilities
Which of the following can be performed with software or hardware devices in order to record everything a person types using his keyboard?
Keystroke loggingInput captureSpywareCredential theft - Question #62Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. A ______________ is a translation device or service that is often controlled by a separate Media Gateway Controller, which provides the...
VoIPmedia gatewaysignalingIP telephony - Question #63Incident Response and Business Continuity
Drag and drop the Response management plans to match up with their respective purposes. Answer:
incident responseresponse plansbusiness continuitycrisis management - Question #64Incident Response and Business Continuity
Which of the following tools is a free laptop tracker that helps in tracking a user's laptop in case it gets stolen?
Laptop TrackingTheft RecoverySecurity ToolsAsset Protection - Question #65Network Security Monitoring and Analysis
Fill in the blank with the appropriate term. ______________is a free open-source utility for network exploration and security auditing that is used to discover computers and servic...
Nmapnetwork scanningsecurity auditingnetwork discovery - Question #66Network Security Controls, Protocols, and Devices
Fill in the blank with the appropriate term. ______________is a powerful and low-interaction open source honeypot. Answer: Honeyd
honeypotHoneyddeception technologyintrusion detection - Question #67Computer Network Defense Fundamentals
Which of the following statements are true about volatile memory?Each correct answer represents a complete solution. Choose all that apply.
volatile memorymemory typespower requirementsdata persistence - Question #68Network Security Controls, Protocols, and Devices
Which of the following firewalls are used to track the state of active connections and determine the network packets allowed to enter through the firewall?Each correct answer repre...
Stateful FirewallsPacket FilteringConnection State TrackingFirewall Types - Question #69Computer Network Defense Fundamentals
Which of the following statements are NOT true about the FAT16 file system?Each correct answer represents a complete solution. Choose all that apply.
FAT16File SystemsStorage LimitationsFile System Security - Question #70Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. The ____________ is used for routing voice conversations over the Internet. It is also known by other names such as IP Telephony, Broad...
VoIPbroadband telephonyvoice protocolsIP telephony - Question #71Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. The ___________protocol is a feature of packet-based data transmission protocols. It is used to keep a record of the frame sequences se...
sliding windowflow controlpacket transmissionacknowledgement - Question #73Network Security Controls, Protocols, and Devices
Which of the following standards is an amendment to the original IEEE 802.11 and specifies security mechanisms for wireless networks?
IEEE 802.11iWireless SecurityWPA2CCMP - Question #74Network Security Monitoring and Analysis
Which of the following tools is an open source network intrusion prevention and detection system that operates as a network sniffer and logs activities of the network that is match...
IDS/IPSSnortSignature-Based DetectionNetwork Monitoring - Question #75Network Security Policy and Management
Which of the following is a non-profit organization that oversees the allocation of IP addresses, management of the DNS infrastructure, protocol parameter assignment, and root serv...
ICANNIP address allocationDNS managementInternet governance - Question #76Network Security Threats, Attacks, and Vulnerabilities
With which of the following flag sets does the Xmas tree scan send a TCP frame to a remote device? Each correct answer represents a part of the solution. Choose all that apply.
TCP FlagsPort ScanningNetwork ReconnaissanceXmas Tree Scan - Question #77Computer Network Defense Fundamentals
Network security is the specialist area, which consists of the provisions and policies adopted by the Network Administrator to prevent and monitor unauthorized access, misuse, modi...
CIA TriadData ProtectionSecurity ObjectivesAccess Control - Question #78Network Security Policy and Management
Which of the following policies helps in defining what users can and should do to use network and organization's computer equipment?
user policysecurity policyacceptable useaccess control - Question #79Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. In computing, ______________ is a class of data storage devices that read their data in sequence. Answer: SAM
sequential access memorySAMdata storagestorage devices - Question #80Incident Response and Business Continuity
Which of the following are the responsibilities of the disaster recovery team?Each correct answer represents a complete solution. Choose all that apply.
Disaster Recovery PlanningBusiness ContinuityDR Team ResponsibilitiesIncident Response - Question #81Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. ______________ is an open wireless technology standard for exchanging data over short distances from fixed and mobile devices. Answer:...
Bluetoothwireless technologyshort-range communicationIEEE 802.15 - Question #82Network Security Threats, Attacks, and Vulnerabilities
In which of the following attacks does an attacker use software that tries a large number of key combinations in order to get a password?
Brute force attackPassword crackingAuthentication attacksAttack methods - Question #83Network Security Controls, Protocols, and Devices
In an Ethernet peer-to-peer network, which of the following cables is used to connect two computers, using RJ-45 connectors and Category-5 UTP cable?
Ethernet CablesCrossover CableRJ-45 ConnectorsNetwork Topology - Question #84Network Security Controls, Protocols, and Devices
Which of the following is a credit card-sized device used to securely store personal information and used in conjunction with a PIN number to authenticate users?
Smart card authenticationPhysical security tokensPIN-based authenticationAccess control - Question #85Computer Network Defense Fundamentals
Which of the following OSI layers establishes, manages, and terminates the connections between the local and remote applications?
OSI ModelSession LayerConnection ManagementNetwork Protocols - Question #86Network Security Threats, Attacks, and Vulnerabilities
Adam, a malicious hacker, is sniffing an unprotected Wi-FI network located in a local store with Wireshark to capture hotmail e-mail traffic. He knows that lots of people are using...
Wireshark filtersEmail protocolsPacket sniffingHTTP packet analysis - Question #87Network Security Controls, Protocols, and Devices
Which of the following are the distance-vector routing protocols? Each correct answer represents a complete solution. Choose all that apply.
routing protocolsdistance-vector routingRIPIGRP - Question #88Network Security Controls, Protocols, and Devices
With which of the following forms of acknowledgment can the sender be informed by the data receiver about all segments that have arrived successfully?
TCP AcknowledgmentsSelective ACKProtocol ReliabilityData Delivery Confirmation - Question #89Network Security Monitoring and Analysis
Fill in the blank with the appropriate term. ______________is a method for monitoring the e-mail delivery to the intended recipient. Answer: Email tracking
email trackingemail monitoringdelivery trackingemail security - Question #90Network Security Controls, Protocols, and Devices
You work as the network administrator for uCertify Inc. The company has planned to add the support for IPv6 addressing. The initial phase deployment of IPv6 requires support from s...
IPv6-IPv4 translationNAT-PTIPv6 migrationProtocol translation - Question #91Network Security Threats, Attacks, and Vulnerabilities
Which of the following types of cyberstalking damages the reputation of their victim and turns other people against them by setting up their own Websites, blogs, or user pages for...
CyberstalkingFalse accusationOnline harassmentReputation attacks - Question #92Computer Network Defense Fundamentals
Which of the following IP class addresses are not allotted to hosts?Each correct answer represents a complete solution. Choose all that apply.
IPv4 classesIP addressinghost allocationmulticast - Question #93Incident Response and Business Continuity
Which of the following is a management process that provides a framework for promoting quick recovery and the capability for an effective response to protect the interests of its b...
Business Continuity ManagementDisaster RecoveryCrisis ResponseOrganizational Resilience - Question #94Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. In the ______________method, a device or computer that transmits data needs to first listen to the channel for an amount of time to che...
CSMA/CAwireless accesscollision avoidancechannel sensing - Question #95Computer Network Defense Fundamentals
Which of the following organizations is responsible for managing the assignment of domain names and IP addresses?
ICANNDomain NamesIP AddressesInternet Governance - Question #96Incident Response and Business Continuity
Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency,...
contingency planningbusiness continuitydisaster recoverysecurity planning - Question #97Network Security Monitoring and Analysis
Which of the following examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malw...
Network Behavior AnalysisAnomaly DetectionTraffic AnalysisDDoS Detection - Question #98Network Security Controls, Protocols, and Devices
Which of the following routing metrics refers to the length of time that is required to move a packet from source to destination through the internetwork?
routing metricslatency/delaypacket transmissionrouting protocols - Question #99Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. The ______________model is a description framework for computer network protocols and is sometimes called the Internet Model or the DoD...
TCP/IP modelDoD modelInternet modelnetwork protocols - Question #100Computer Network Defense Fundamentals
Fill in the blank with the appropriate term. A ______________is a block of data that a Web server stores on the client computer. Answer: cookie
cookieHTTPweb storageclient-side data