312-38 practice test

1. Question 1 · 1

   John works as a C programmer. He develops the following C program: His program is vulnerable to a __________ attack.

   Choose one answer.

   

   • SQL injection
   • Denial-of-Service
   • Buffer overflow
   • Cross site scripting

   Read explanation

   This program takes a user-supplied string and copies it into 'buffer1', which can hold up to 10 bytes of data. If a user sends more than 10 bytes, it would result in a buffer overflow.

2. Question 2 · 1

   Which of the following fields in the IPv6 header is decremented by 1 for each router that forwards the packet?

   Choose one answer.

   • Flow label
   • Next header
   • Traffic class
   • Hop limit

   Read explanation

   The hop limit field in the IPv6 header is decremented by 1 for each router that forwards a packet. The packet is discarded when the hop limit field reaches zero. Answer option B is incorrect. Next header is an 8-bit field that specifies the next encapsulated protocol. Answer option A is incorrect. Flow label is a 20-bit field that is used for specifying special router handling from source to destination for a sequence of packets. Answer option C is incorrect. Traffic class is an 8-bit field that specifies the Internet traffic priority delivery value.

3. Question 3 · 1

   Which of the following statements are true about a wireless network? Each correct answer represents a complete solution. Choose all that apply.

   Choose all answers that apply.

   • Data can be shared easily between wireless devices.
   • It provides mobility to users to access a network.
   • Data can be transmitted in different ways by using Cellular Networks, Mobitex, DataTAC, etc.
   • It is easy to connect.

4. Question 4 · 1

   Which of the following steps will NOT make a server fault tolerant? Each correct answer represents a complete solution. (Choose two.)

   Choose all answers that apply.

   • Adding a second power supply unit
   • Performing regular backup of the server
   • Adding one more same sized disk as mirror on the server
   • Implementing cluster servers' facility
   • Encrypting confidential data stored on the server

   Read explanation

   Encrypting confidential data stored on the server and performing regular backup will not make the server fault tolerant. Fault tolerance is the ability to continue work when a hardware failure occurs on a system. A fault-tolerant system is designed from the ground up for reliability by building multiples of all critical components, such as CPUs, memories, disks and power supplies into the same computer. In the event one component fails, another takes over without skipping a beat. Answer options A, C, and D are incorrect. The following steps will make the server fault tolerant: Adding a second power supply unit Adding one more same sized disk as a mirror on the server implementing cluster servers facility

5. Question 5 · 1

   Which of the following steps of the OPSEC process examines each aspect of the planned operation to identify OPSEC indicators that could reveal critical information and then compare those indicators with the adversary's intelligence collection capabilities identified in the previous action?

   Choose one answer.

   • Analysis of Threats
   • Application of Appropriate OPSEC Measures
   • Identification of Critical Information
   • Analysis of Vulnerabilities
   • Assessment of Risk

   Read explanation

   OPSEC is a 5-step process that helps in developing protection mechanisms in order to safeguard sensitive information and preserve essential secrecy. The OPSEC process has five steps, which are as follows: 1.Identification of Critical Information: This step includes identifying information vitally needed by an adversary, which focuses the remainder of the OPSEC process on protecting vital information, rather than attempting to protect all classified or sensitive unclassified information. 2.Analysis of Threats: This step includes the research and analysis of intelligence, counter-intelligence, and open source information to identify likely adversaries to a planned operation. 3.Analysis of Vulnerabilities: It includes examining each aspect of the planned operation to identify OPSEC indicators that could reveal critical information and then comparing those indicators with the adversary's intelligence collection capabilities identified in the previous action. 4.Assessment of Risk: Firstly, planners analyze the vulnerabilities identified in the previous action and identify possible OPSEC measures for each vulnerability. Secondly, specific OPSEC measures are selected for execution based upon a risk assessment done by the commander and staff. 5.Application of Appropriate OPSEC Measures: The command implements the OPSEC measures selected in the assessment of risk action or, in the case of planned future operations and activities, includes the measures in specific OPSEC plans.

6. Question 6 · 1

   Which of the following IP class addresses are not allotted to hosts? Each correct answer represents a complete solution. Choose all that apply.

   Choose all answers that apply.

   • Class C
   • Class D
   • Class A
   • Class B
   • Class E

   Read explanation

   Class addresses D and E are not allotted to hosts. Class D addresses are reserved for multicasting, and their address range can extend from 224 to 239. Class E addresses are reserved for experimental purposes. Their addresses range from 240 to 254. Answer option C is incorrect. Class A addresses are specified for large networks. It consists of up to 16,777,214 client devices (hosts), and their address range can extend from 1 to 126. Answer option D is incorrect. Class B addresses are specified for medium size networks. It consists of up to 65,534 client devices, and their address range can extend from 128 to 191. Answer option A is incorrect. Class C addresses are specified for small local area networks (LANs). It consists of up to 245 client devices, and their address range can extend from 192 to 223.

7. Question 7 · 1

   Which of the following is a tool that runs on the Windows OS and analyzes iptables log messages to detect port scans and other suspicious traffic?

   Choose one answer.

   • PSAD
   • Hping
   • NetRanger
   • Nmap

   Read explanation

   PSAD is a tool that runs on the Windows OS and analyzes iptables log messages to detect port scans and other suspicious traffic. It includes many signatures from the IDS to detect probes for various backdoor programs such as EvilFTP, GirlFriend, SubSeven, DDoS tools (mstream, shaft), and advanced port scans (FIN, NULL, XMAS). If it is combined with fwsnort and the Netfilter string match extension, it detects most of the attacks described in the Snort rule set that involve application layer data. Answer option C is incorrect. NetRanger is the complete network configuration and information toolkit that includes the following tools: Ping tool, Trace Route tool, Host Lookup tool, Internet time synchronizer, Whois tool, Finger Unix hosts tool, Host and port scanning tool, check multiple POP3 mail accounts tool, manage dialup connections tool, Quote of the day tool, and monitor Network Settings tool. These tools are integrated in order to use an application interface with full online help. NetRanger is designed for both new and experienced users. This tool is used to help diagnose network problems and to get information about users, hosts, and networks on the Internet or on a user computer network. NetRanger uses multi-threaded and multi-connection technologies in order to be very fast and efficient. Answer option D is incorrect. Nmap is a free open-source utility for network exploration and security auditing. It is used to discover computers and services on a computer network, thus creating a "map" of the network. Just like many simple port scanners, Nmap is capable of discovering passive services. In addition, Nmap may be able to determine various details about the remote computers. These include operating system, device type, uptime, software product used to run a service, exact version number of that product, presence of some firewall techniques and, on a local area network, even vendor of the remote network card. Nmap runs on Linux, Microsoft Windows, etc.

8. Question 8 · 1

   DRAG DROP - Drag and drop the terms to match with their descriptions. Select and Place:

   Match each destination with an option.

   

   It is malicious software program that contains hidden code and masquerades itself as a normal program.

   • • Backdoor
   • • Spamware
   • • Ping sweep
   • • Trojan horse

   It is a technique used to determine which of a range of IP addresses map to live hosts.

   • • Backdoor
   • • Spamware
   • • Ping sweep
   • • Trojan horse

   It is software designed by or for spammers to send out automated spam e-mail.

   • • Backdoor
   • • Spamware
   • • Ping sweep
   • • Trojan horse

   It is any program that allows a hacker to connect to a computer without going through the normal authentication process.

   • • Backdoor
   • • Spamware
   • • Ping sweep
   • • Trojan horse

   Read explanation

   Following are the terms with their descriptions: A Trojan horse is a malicious software program that contains hidden code and masquerades itself as a normal program. When a Trojan horse program is run, its hidden code runs to destroy or scramble data on the hard disk. An example of a Trojan horse is a program that masquerades as a computer logon to retrieve user names and password information. The developer of a Trojan horse can use this information later to gain unauthorized access to computers. Trojan horses are normally spread by e-mail attachments. Ping sweep is a technique used to determine which of a range of IP addresses map to live hosts. It consists of ICMP ECHO requests sent to multiple hosts. If a given address is live, it will return an ICMP ECHO reply. A ping is often used to check that a network device is functioning. To disable ping sweeps on a network, administrators can block ICMP ECHO requests from outside sources. However, ICMP TIMESTAMP and ICMP INFO can be used in a similar manner. Spamware is software designed by or for spammers to send out automated spam e-mail. Spamware is used to search for e-mail addresses to build lists of e-mail addresses to be used either for spamming directly or to be sold to spammers. The spamware package also includes an e- mail harvesting tool. A backdoor is any program that allows a hacker to connect to a computer without going through the normal authentication process. The main advantage of this type of attack is that the network traffic moves from inside a network to the hacker's computer. The traffic moving from inside a network to the outside world is typically the least restrictive, as companies are more concerned about what comes into a network, rather than what leaves it. It, therefore, becomes hard to detect backdoors.

9. Question 9 · 1

   Which of the following is a tool that runs on the Windows OS and analyzes iptables log messages to detect port scans and other suspicious traffic?

   Choose one answer.

   • Nmap
   • Hping
   • NetRanger
   • PSAD

10. Question 10 · 1

    What is the range for registered ports?

    Choose one answer.

    • 1024 through 49151
    • 0 through 1023
    • Above 65535
    • 49152 through 65535

11. Question 11 · 1

    How many layers are present in the TCP/IP model?

    Choose one answer.

    • 10
    • 5
    • 4
    • 7

12. Question 12 · 1

    CSMA/CD is specified in which of the following IEEE standards?

    Choose one answer.

    • 802.3
    • 802.2
    • 802.1
    • 802.15

13. Question 13 · 1

    Which of the following IEEE standards defines a physical bus topology?

    Choose one answer.

    • 802.4
    • 802.5
    • 802.6
    • 802.3

14. Question 14 · 1

    Which of the following protocols is used for inter-domain multicast routing?

    Choose one answer.

    • BGP
    • RPC
    • VoIP
    • RADIUS

15. Question 15 · 1

    How many layers are present in the OSI layer model?

    Choose one answer.

    • 5
    • 4
    • 7
    • 9

Paid access to all 161 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.