[2024年07月23日] 究極の312-38準備ガイド！無料最新のEC-COUNCIL練習テスト問題集
今すぐゲットせよ！高評価EC-COUNCIL 312-38試験問題集
質問 # 72
Which of the following is NOT a WEP authentication method?
- A. Kerberos authentication
- B. Shared key authentication
- C. Media access authentication
- D. Open system authentication
正解：A
質問 # 73
Which of the following honeypots provides an attacker access to the real operating system without any restriction and collects a vast amount of information about the attacker?
- A. High-interaction honeypot
- B. Honeyd
- C. Medium-interaction honeypot
- D. Low-interaction honeypot
正解：A
質問 # 74
Brendan wants to implement a hardware based RAID system in his network. He is thinking of choosing a suitable RAM type for the architectural setup in the system. The type he is interested in provides access times of up to 20 ns. Which type of RAM will he select for his RAID system?
- A. SRAM
- B. SDRAM
- C. NAND flash memory
- D. NVRAM
正解：A
質問 # 75
Which Internet access policy starts with all services blocked and the administrator enables safe and necessary services individually, which provides maximum security and logs everything, such as system and network activities?
- A. Paranoid policy
- B. Internet access policy
- C. Permissive policy
- D. Prudent policy
正解：A
解説：
The Paranoid policy is an Internet access policy that begins with the premise that all services are blocked by default. Under this policy, the administrator must explicitly enable each service that is deemed safe and necessary. This approach ensures maximum security as it minimizes the potential attack surface by not allowing any services unless they have been vetted and approved. Additionally, this policy typically involves extensive logging of all system and network activities, which can be crucial for monitoring, auditing, and forensic purposes.
質問 # 76
The SNMP contains various commands that reduce the burden on the network administrators.
Which of the following commands is used by SNMP agents to notify SNMP managers about an event occurring in the network?
- A. INFORM
- B. SET
- C. TRAPS
- D. RESPONSE
正解：C
質問 # 77
Which Internet access policy starts with all services blocked and the administrator enables safe and necessary services individually, which provides maximum security and logs everything, such as system and network activities?
- A. Internet access policy
- B. Prudent policy
- C. Permissive policy
- D. Paranoid policy
正解：B
質問 # 78
Which of the following is a firewall that keeps track of the state of network connections traveling across it?
- A. Stateful firewall
- B. Stateless packet filter firewall
- C. Circuit-level proxy firewall
- D. Application gateway firewall
正解：A
解説：
A stateful firewall is a firewall that keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known connection state will be allowed by the firewall; others will be rejected. Answer option B is incorrect. A stateless packet filter firewall allows direct connections from the external network to hosts on the internal network and is included with router configuration software or with Open Source operating systems.
Answer option C is incorrect. It applies security mechanisms when a TCP or UDP connection is established.
Answer option D is incorrect. An application gateway firewall applies security mechanisms to specific applications, such as FTP and Telnet servers.
質問 # 79
Which of the following layers provides communication session management between host computers?
- A. Internet layer
- B. Application layer
- C. Link layer
- D. Transport layer
正解：D
質問 # 80
Which of the following are the common security problems involved in communications and email? Each correct
answer represents a complete solution. Choose all that apply.
- A. Eavesdropping
- B. False message
- C. Identity theft
- D. Message digest
- E. Message repudiation
- F. Message replay
- G. Message modification
正解：A、B、C、E、F、G
解説：
Following are the common security problems involved in communications and email:
Eavesdropping: It is the act of secretly listening to private information through telephone lines, e-mail, instant
messaging, and any other method of communication considered private.
Identity theft: It is the act of obtaining someone's username and password to access his/her email servers for
reading email and sending false email messages. These credentials can be obtained by eavesdropping on
SMTP, POP, IMAP, or Webmail connections.
Message modification: The person who has system administrator permission on any of the SMTP servers can
visit anyone's message and can delete or change the message before it continues on to its destination. The
recipient has no way of telling that the email message has been altered.
False message: It the act of constructing messages that appear to be sent by someone else.
Message replay: In a message replay, messages are modified, saved, and re-sent later.
Message repudiation: In message repudiation, normal email messages can be forged. There is no way for the
receiver to prove that someone had sent him/her a particular message. This means that even if someone has
sent a message, he/she can successfully deny it.
Answer option B is incorrect. A message digest is a number that is created algorithmically from a file and
represents that file uniquely.
質問 # 81
Each of the following is a network layer protocol used for a particular (MAC) address to obtain an IP address?
- A. PIM
- B. ARP
- C. P.M
- D. RARP
- E. None
正解：D
質問 # 82
Which of the following layers of the OSI model provides physical addressing?
- A. Physical layer
- B. Application layer
- C. Data link layer
- D. Network layer
正解：C
質問 # 83
Which of the following protocols uses a control channel over TCP and a GRE tunnel operating to encapsulate PPP packets?
- A. LWAPP
- B. ESP
- C. PPTP
- D. SSTP
正解：C
質問 # 84
An administrator wants to monitor and inspect large amounts of traffic and detect unauthorized attempts from inside the organization, with the help of an IDS. They are not able to recognize the exact location to deploy the IDS sensor. Can you help him spot the location where the IDS sensor should be placed?
- A. Location 1
- B. Location 2
- C. Location 4
- D. Location 3
正解：B
質問 # 85
Fill in the blank with the appropriate word. The primary goal of _________________ risk analysis is to determine the proportion of effect and theoretical response.
正解：
解説：
qualitative
質問 # 86
Which RAID level system provides very good data performance but does not offer fault tolerance and data redundancy?
- A. RAID level 0
- B. PAID level 3
- C. RAID level 1
- D. RAID level 5
正解：A
質問 # 87
Which of the following policy to add additional information to public safety posture and aims to protect workers and the organizations of inefficiency or confusion?
- A. Group policy
- B. Subject-specific security
- C. None
- D. IT policy
- E. user policy
正解：B
質問 # 88
Which of the following features is used to generate spam on the Internet by spammers and worms?
- A. SMTP relay
- B. AutoComplete
- C. Server Message Block (SMB) signing
- D. AutoFill
正解：A
解説：
SMTP relay feature of e-mail servers allows them to forward e-mail to other e-mail servers. Unfortunately, this
feature is exploited by spammers and worms to generate spam on the Internet.
質問 # 89
......
EC-Council Certified Network Defender（CND）は、ネットワーク管理者およびセキュリティの専門家向けに設計された専門的な認定プログラムです。この認定は、ネットワーク攻撃を保護、検出、応答するために必要なスキルと知識に焦点を当てています。 ECカウンシルCNDプログラムは、侵入検知、パケット分析、インシデント対応など、ネットワークベースの攻撃から防御するために必要な本質的なスキルと知識をカバーしています。
合格率取得する秘訣は312-38認定試験エンジンPDF：https://jp.fast2test.com/312-38-premium-file.html
312-38試験問題集で合格できるには更新されたテスト問題集：https://drive.google.com/open?id=1EczvPbQUPGF8pzq2yvSqK47gUmhMHtgN