最新の2025年12月04日 312-38日本語問題集は学習ガイドは試験合格するための秘訣
312-38日本語問題集の無料PDFをゲットせよ！最近更新された問題
質問 # 152
次のツールのうち、人間の攻撃対象領域を評価するためにIoEを特定するのに役立つのはどれですか？
- A. SET
- B. スカイボックス
- C. securiCAD
- D. アマス
正解：C
質問 # 153
パケット フィルタリング ファイアウォールは OSI モデルのどの層で機能しますか?
- A. セッション層
- B. 物理層
- C. アプリケーション層
- D. ネットワーク層
正解：D
解説：
Packet filtering firewalls operate at the Network Layer of the OSI model. This layer is responsible for the transmission of data packets across network boundaries, which is a fundamental function of packet filtering firewalls. They analyze incoming and outgoing packets and make decisions based on set rules, such as IP addresses, protocols, and ports, to allow or block traffic. This is crucial for protecting the network from unauthorized access and potential threats.
質問 # 154
企業は、データを暗号化してセキュリティを確保し、いつでもどこからでもアクセスできるようにするデータバックアップ方法を実装したいと考えています。実装する必要がある適切なバックアップ方法は何ですか？
- A. オンサイトバックアップ
- B. ホットサイトのバックアップ
- C. オフサイトバックアップ
- D. クラウドバックアップ
正解：D
質問 # 155
Johnは、組織のネットワークにパケットフィルタリングファイアウォールを実装したいと考えています。パケットフィルタリングファイアウォールはどのTCP / IPレイヤーで機能しますか？
- A. TCPレイヤー
- B. ネットワークインターフェースレイヤー
- C. IPレイヤー
- D. アプリケーション層
正解：C
解説：
A packet filtering firewall operates at the network layer of the TCP/IP model. It analyzes the headers of IP packets, which include source and destination IP addresses, protocol information, and port numbers, to determine whether to allow or block the packets based on predefined rules and access control lists (ACLs). This type of firewall does not perform deep packet inspection but rather checks the packet headers against the ACLs to make decisions1234.
References: The explanation aligns with the core functions of packet filtering firewalls as described in various sources, including the Enterprise Networking Planet and NordLayer articles, which detail how these firewalls interact with the IP layer to filter traffic12. GeeksforGeeks also confirms that packet filtering firewalls work at the network layer of the OSI model, which corresponds to the IP layer in the TCP/IP model4.
質問 # 156
角膜の後ろの目の色の部分の数学的パターン認識を必要とする認証技術はどれですか?
- A. 顔認識
- B. 虹彩スキャン
- C. 網膜スキャン
- D. 静脈スキャン
正解：B
解説：
Iris scanning is an authentication technique that involves mathematical pattern-recognition of the colored part of the eye, known as the iris. This method uses the unique patterns in the iris to identify and verify an individual's identity. The iris is a muscle within the eye that controls the size of the pupil and is visible from the exterior. It has a complex structure and contains many microscopic features that are unique to each individual, making it a reliable biometric for authentication purposes.
質問 # 157
マローンは、レビューのために上司に提出する前に、IT のインシデント処理計画を仕上げています。彼は、インシデント対応の方法論とそれに関連する手順の概要を説明しています。彼が最後に挙げるべきステップは何でしょうか?
- A. 続報。
- B. 消去を割り当てます。
- C. 回復
- D. 封じ込め
正解：A
解説：
The last step Malone should list in his incident handling plan is 'A follow-up'. This step is crucial as it involves analyzing the incident to understand how it occurred and what can be done to prevent similar incidents in the future. It often includes a review of the effectiveness of the response, identification of lessons learned, updating policies and procedures accordingly, and conducting training sessions if necessary. This step ensures that the organization improves its security posture and is better prepared for future incidents.
References: The follow-up step is aligned with the incident response life cycle which includes preparation, identification, containment, eradication, recovery, and then follow-up as the final phase. This is consistent with the best practices in incident response and is covered in the Certified Network Defender (CND) curriculum as well as in the NIST guidelines on incident response1.
質問 # 158
地元銀行はカード所有者のデータを保護したいと考えています
ａ．このデータのセキュリティを確保するには、樹皮はどの基準に準拠する必要がありますか?
- A. HIPAA
- B. SOX
- C. PCI DSS
- D. GDPR
正解：C
解説：
The Payment Card Industry Data Security Standard (PCI DSS) is the relevant standard for any organization that stores, processes, or transmits cardholder data. It outlines a set of requirements designed to ensure that all companies that handle credit card information maintain a secure environment. This includes specific measures for protecting stored cardholder data, encrypting data transmission across public networks, and maintaining a vulnerability management program, among others123.
質問 # 159
プレーンテキストとして保存された事前計算されたハッシュ値を含むパスワードクラッキングの試みを特定し、これらを使用してパスワードをクラッキングします。
- A. 辞書
- B. レインボーテーブル
- C. ハイブリッド
- D. ブルートフォース
正解：B
解説：
The password cracking attempt described involves the use of Rainbow tables. A Rainbow table is a precomputed table for reversing cryptographic hash functions, primarily for cracking password hashes. These tables store a mapping between the hash of a password and the correct password for that hash, allowing for quick retrieval of the plaintext password if the hash is known. This method is efficient for cracking passwords because it avoids the time-consuming process of computing hashes on the fly during an attack.
References: Rainbow tables are a well-known tool in password cracking that leverage precomputed hash values to expedite the cracking process1. They are particularly useful when dealing with standard hashing algorithms where salting is not used, as they can significantly reduce the time needed to crack a password by avoiding the need for real-time hash calculations23. This technique is distinct from brute force attacks, which try all possible combinations, dictionary attacks, which use a list of likely passwords, and hybrid attacks, which combine elements of brute force and dictionary methods4.
質問 # 160
次のイベント相関アプローチのどれが、1つまたは複数のフィールド間の相関を決定するために、すべてのフィールドを体系的かつ意図的に相互に正と負の相関についてチェックおよび比較しますか？
- A. グラフベースのアプローチ
- B. ルールベースのアプローチ
- C. フィールドベースのアプローチ
- D. 自動化されたフィールド相関
正解：C
解説：
The Field-Based Approach in event correlation involves systematically checking and comparing all fields for both positive and negative correlations to determine the relationships across one or multiple fields. This approach is methodical and intentional, examining the data within each field and across fields to identify patterns and connections that may indicate security events or incidents.
質問 # 161
管理者は、ネットワーク管理者に、組織のニーズに最適なバックアップ計画に適したバックアップメディアを提案するように依頼しました。管理者が適切なバックアップメディアを決定する際に考慮する要素は次のうちどれですか？
- A. 説明責任
- B. 機能
- C. 拡張性
- D. 信頼性
正解：D
解説：
When deciding on the appropriate backup medium, the network administrator will consider Reliability as the primary factor. This is because the backup medium must be dependable for restoring data in case of data loss or system failure. The reliability of a backup medium ensures that data can be recovered accurately and completely when needed.
References: The importance of reliability in choosing a backup medium is supported by best practices in data backup and recovery, which emphasize the need for a dependable backup solution to ensure data integrity and availability1234.
質問 # 162
ダニエルは、ネットワーク監視ツールを使用してネットワークトラフィックを監視し、異常を検出しています。
ダニエルはどのような種類のネットワークセキュリティアプローチを採用していますか？
- A. 回顧展
- B. 多層防御
- C. リアクティブ
- D. 予防
正解：C
解説：
Daniel is adopting a Reactive network security approach. This approach involves monitoring network traffic to detect any abnormalities or intrusions as they occur. The goal of reactive security is to identify and respond to threats in real-time. It is a part of the broader defense strategy that includes Protect, Detect, Respond, and Predict, where 'Detect' aligns with the reactive approach. By using network monitoring tools, Daniel is able to observe the network for any signs of compromise or unusual activity and then take appropriate action to mitigate the threat.
References: The Certified Network Defender (CND) program by EC-Council emphasizes the importance of a continual/adaptive security strategy, which includes the ability to detect ongoing threats as a critical component of network defense12. This strategy is further detailed in the CND course outline, which covers key topics such as network traffic monitoring and analysis, indicating the reactive nature of such activities1.
質問 # 163
次の UPS のタイプのうち、10kVA を超える電力を供給するために使用され、理想的な電気出力を提供しますが、電源コンポーネントが常に磨耗するため信頼性が低下するのはどれですか?
- A. ラインインタラクティブ
- B. オンラインでの二重変換
- C. スタンバイ オンライン ハイブリッド
- D. フェロのそばにいてください
正解：B
解説：
The type of UPS that is used to supply power above 10kVA and provides an ideal electric output presentation, while its constant wear on the power components reduces dependability, is the Double conversion on-line UPS. This UPS system works by converting the incoming AC power to DC to charge the batteries and then converting it back to AC for the connected equipment. This double conversion process provides a very clean and stable power supply, which is ideal for sensitive electronic equipment. However, because the power components are constantly in use, they tend to wear out more quickly, which can reduce the overall dependability of the system12.
References: The information provided is consistent with industry standards for UPS systems and their applications, particularly for power requirements above 10kVA. The double conversion on-line UPS is recognized for its ability to deliver high-quality power output, which is essential for critical systems and applications12.
質問 # 164
次のVPNトポロジのうち、サードパーティのネットワークまたはインターネットを使用して組織の本社と支社の間に永続的な接続を確立するのはどれですか？
- A. ハブアンドスポーク
- B. フルメッシュ
- C. スター
- D. ポイントツーポイント
正解：A
解説：
The Hub-and-Spoke VPN topology is designed to establish a persistent connection between a central hub, typically an organization's main office, and its various branches. This topology is efficient for organizations with many branch offices that need to communicate with the main office but not necessarily with each other directly. It uses a third-party network or the Internet to create these connections, allowing for secure communication over potentially insecure networks like the Internet. The hub-and-spoke model reduces the number of tunnels required compared to other topologies, such as full mesh, which needs a direct tunnel between each site.
質問 # 165
不審なトラフィック シグネチャのどのカテゴリに SYN フラッド試行が含まれますか?
- A. 情報提供
- B. サービス拒否
- C. 偵察
- D. 不正アクセス
正解：B
解説：
SYN flood attempts are a type of Denial of Service (DoS) attack. They are designed to exploit the TCP handshake process by sending a large number of SYN packets to a target server, which can overwhelm the server's resources and prevent legitimate users from establishing a connection. The goal of a SYN flood is not to gain unauthorized access or gather information, but rather to disrupt the normal operation of a service, making it a Denial of Service attack.
質問 # 166
SyslogとSNMPは、ログレコードが転送される2つの主要な_______プロトコルです。
- A. プッシュベース
- B. ホストベース
- C. ネットワークベース
- D. プルベース
正解：A
質問 # 167
米国とカナダの小売店チェーンである Wallcot は、管理オフィスのセキュリティを向上させたいと考えています。彼らは 2 つのドアを持つメカニズムを実装したいと考えています。一度に開くことができるドアは 1 つだけです。最初のドアから入った人は、次のドアを開ける許可が必要です。許可が得られない場合、その人は許可された人が外に出すまでドアの間に閉じ込められます。このような仕組みは何と呼ばれるのでしょうか?
- A. 隠蔽検出装置
- B. 物理ロック
- C. マントラップ
- D. 警報システム
正解：C
解説：
The apt-get command is a powerful and free package management utility for Debian-based Linux distributions. It is used for handling packages and is utilized to install, update, and remove software on Debian systems. The apt-get command is the recommended tool for doing upgrades from one Debian GNU/Linux release to another, as it effectively manages dependencies and ensures that all necessary changes are made during an upgrade.
質問 # 168
......
最新312-38日本語試験問題集には高得点で一発合格：https://jp.fast2test.com/312-38_JPN-premium-file.html