A Review Of Approved 312-38 Free Question

NEW QUESTION 1
Sam, a network administrator is using Wireshark to monitor the network traffic of the organization. He wants to detect TCP packets with no flag set to check for a specific attack attempt. Which filter will he use to view the traffic?

• A. Tcp.flags==0x000
• B. Tcp.flags==0000x
• C. Tcp.flags==000x0
• D. Tcp.flags==x0000

Answer: A

NEW QUESTION 2
James is a network administrator working at a student loan company in Minnesota. This company processes over 20,000 student loans a year from colleges all over the state. Most communication between the company schools, and lenders is carried out through emails. Much of the email communication used at his company contains sensitive information such as social security numbers. For this reason, James wants to utilize email encryption. Since a server-based PKI is not an option for him, he is looking for a low/no cost solution to encrypt emails. What should James use?

• A. James could use PGP as a free option for encrypting the company's emails.
• B. James should utilize the free OTP software package.
• C. James can use MD5 algorithm to encrypt all the emails
• D. James can enforce mandatory HTTPS in the email clients to encrypt emails

Answer: A

NEW QUESTION 3
Identify the minimum number of drives required to setup RAID level 5.

• A. Multiple
• B. 3
• C. 4
• D. 2

Answer: B

NEW QUESTION 4
Which IEEE standard does wireless network use?

• A. 802.11
• B. 802.18
• C. 802.9
• D. 802.10

Answer: A

NEW QUESTION 5
John has successfully remediated the vulnerability of an internal application that could have caused a threat to the network. He is scanning the application for the existence of a remediated vulnerability, this process is called a _______ and it has to adhere to the ________

• A. Verification, Security Policies
• B. Mitigation, Security policies
• C. Vulnerability scanning, Risk Analysis
• D. Risk analysis, Risk matrix

Answer: A

NEW QUESTION 6
The company has implemented a backup plan. James is working as a network administrator for the company and is taking full backups of the data every time a backup is initiated. Alex who is a senior security manager talks to him about using a differential backup instead and asks him to implement this once a full backup of the data is completed. What is/are the reason(s) Alex is suggesting that James use a differential backup? (Select all that apply)

• A. Less storage space is required
• B. Father restoration
• C. Slower than a full backup
• D. Faster than a full backup
• E. Less expensive than full backup

Answer: AD

NEW QUESTION 7
Which of the following VPN topologies establishes a persistent connection between an organization's main office and its branch offices using a third-party network or the Internet?

• A. Star
• B. Point-to-Point
• C. Full Mesh
• D. Hub-and-Spoke

Answer: D

NEW QUESTION 8
The bank where you work has 600 windows computers and 400 Red Hat computers which primarily serve as bank teller consoles. You have created a plan and deployed all the patches to the Windows computers and you are now working on updating the Red Hat computers. What command should you run on the network to update the Red Hat computers, download the security package, force the package installation, and update all currently installed packages?

• A. You should run the up2date -d -f -u command
• B. You should run the up2data -u command
• C. You should run the WSUS -d -f -u command.
• D. You should type the sysupdate -d command

Answer: A

NEW QUESTION 9
Smith is an IT technician that has been appointed to his company's network vulnerability assessment team. He is the only IT employee on the team. The other team members include employees from Accounting, Management, Shipping, and Marketing. Smith and the team members are having their first meeting to discuss how they will proceed. What is the first step they should do to create the network vulnerability assessment plan?

• A. Their first step is to analyze the data they have currently gathered from the company or interviews.
• B. Their first step is to make a hypothesis of what their final findings will be.
• C. Their first step is to create an initial Executive report to show the management team.
• D. Their first step is the acquisition of required documents, reviewing of security policies and compliance.

Answer: D

NEW QUESTION 10
Liza was told by her network administrator that they will be implementing IPsec VPN tunnels to connect the branch locations to the main office. What layer of the OSI model do IPsec tunnels function on?

• A. The data link layer
• B. The session layer
• C. The network layer
• D. The application and physical layers

Answer: C

NEW QUESTION 11
Frank installed Wireshark at all ingress points in the network. Looking at the logs he notices an odd packet source. The odd source has an address of 1080:0:FF:0:8:800:200C:4171 and is using port 21. What does this source address signify?

• A. This address means that the source is using an IPv6 address and is spoofed and signifies an IPv4 address of 127.0.0.1.
• B. This source address is IPv6 and translates as 13.1.68.3
• C. This source address signifies that the originator is using 802dot1x to try and penetrate into Frank's network
• D. This means that the source is using IPv4

Answer: D

NEW QUESTION 12
What command is used to terminate certain processes in an Ubuntu system?

• A. #grep Kill [Target Process}
• B. #kill-9[PID]
• C. #ps ax Kill
• D. # netstat Kill [Target Process]

Answer: C

NEW QUESTION 13
David is working in a mid-sized IT company. Management asks him to suggest a framework that can be used effectively to align the IT goals to the business goals of the company. David suggests the ________ framework, as it provides a set of controls over IT and consolidates them to form a framework.

• A. RMIS
• B. ITIL
• C. ISO 27007
• D. COBIT

Answer: D

NEW QUESTION 14
A network administrator is monitoring the network traffic with Wireshark. Which of the following filters will she use to view the packets moving without setting a flag to detect TCP Null Scan attempts?

• A. TCRflags==0x000
• B. Tcp.flags==0X029
• C. Tcp.dstport==7
• D. Tcp.flags==0x003

Answer: A

NEW QUESTION 15
A VPN Concentrator acts as a bidirectional tunnel endpoint among host machines. What are the other f unction(s) of the device? (Select all that apply)

• A. Provides access memory, achieving high efficiency
• B. Assigns user addresses
• C. Enables input/output (I/O) operations
• D. Manages security keys

Answer: BCD

NEW QUESTION 16
Mark is monitoring the network traffic on his organization's network. He wants to detect a TCP and UDP ping sweep on his network. Which type of filter will be used to detect this on the network?

• A. Tcp.srcport==7 and udp.srcport==7
• B. Tcp.srcport==7 and udp.dstport==7
• C. Tcp.dstport==7 and udp.srcport==7
• D. Tcp.dstport==7 and udp.dstport==7

Answer: D

NEW QUESTION 17
A company has the right to monitor the activities of their employees on different information systems according to the _______ policy.

• A. Information system
• B. User access control
• C. Internet usage
• D. Confidential data

Answer: B

NEW QUESTION 18
The risk assessment team in Southern California has estimated that the probability of an incident that has potential to impact almost 80% of the bank's business is very high. How should this risk be categorized in the risk matrix?

• A. High
• B. Medium
• C. Extreme
• D. Low

Answer: C

NEW QUESTION 19
Daniel is monitoring network traffic with the help of a network monitoring tool to detect any abnormalities. What type of network security approach is Daniel adopting?

• A. Preventative
• B. Reactive
• C. Retrospective
• D. Defense-in-depth

Answer: B

NEW QUESTION 20
During a security awareness program, management was explaining the various reasons which create threats to network security. Which could be a possible threat to network security?

• A. Configuring automatic OS updates
• B. Having a web server in the internal network
• C. Implementing VPN
• D. Patch management

Answer: B

NEW QUESTION 21
......