[Free] Download New Updated (October 2016) ECCouncil 312-38 Real Exam 1-10

Ensurepass

QUESTION 1

John works as a C programmer. He develops the following C program:

 

#include <stdlib.h>

 

#include <stdio.h>

 

#include <string.h>

 

int buffer(char *str) {

 

char buffer1[10];

 

strcpy(buffer1, str);

 

return 1;

 

}

 

int main(int argc, char *argv[]) {

 

buffer (argv[1]);

 

printf(“Executedn”);

 

return 1;

 

}

 

His program is vulnerable to a __________ attack.

 

A.

SQL injection

B.

Denial-of-Service

C.

Buffer overflow

D.

Cross site scripting

 

Correct Answer: C

Explanation:

This program takes a user-supplied string and copies it into ‘buffer1’, which can hold up to 10 bytes of data. If a user sends more than 10 bytes, it would result in a buffer overflow.

 

 

QUESTION 2

Fill in the blank with the appropriate term. ——————————- is the complete network configuration and information toolkit that uses multi-threaded and multi-connection technologies in order to be very fast and efficient.

 

Correct Answer: NetRanger

Explanation:

NetRanger is the complete network configuration and information toolkit that includes the following tools: a Ping tool, Trace Route tool, Host Lookup tool, Internet time synchronizer, Whois tool, Finger Unix hosts tool, Host and port scanning tool, check multiple POP3 mail accounts tool, manage dialup connections tool, Quote of the day tool, and monitor Network Settings tool. These tools are integrated in order to use an application interface with full online help. NetRanger is designed for both new and experienced users. This tool is used to help diagnose network problems and to get information about users, hosts, and networks on the Internet or on a user computer network. NetRanger uses multi-threaded and multi-connection technologies in order to be very fast and efficient.

 

 

QUESTION 3

DRAG DROP

Drag and drop the terms to match with their descriptions.

 

clip_image002

 

Correct Answer:

clip_image004

 

 

QUESTION 4

Fill in the blank with the appropriate term. A _______________device is used for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits.

 

Correct Answer: biometric

Explanation:

A biometric device is used for uniquely recognizing humans based upon one or more intrinsic, physical, or behavioral traits.

Biometrics is used as a form of identity access management and access control. It is also used to identify individuals in groups that are under surveillance. Biometric characteristics can be divided into two main classes:

1. Physiological: These devices are related to the shape of the body. These are not limited to the fingerprint, face recognition, DNA, hand and palm geometry, and iris recognition, which has largely replaced the retina and odor/scent.

2. Behavioral: These are related to the behavior of a person. They are not limited to the typing rhythm, gait, and voice.

 

 

 

QUESTION 5

Which of the following analyzes network traffic to trace specific transactions and can intercept and log traffic passing over a digital network? Each correct answer represents a complete solution. Choose all that apply.

 

< font style="font-size: 10pt" color="#000000">A.

Wireless sniffer

B.

Spectrum analyzer

C.

Protocol analyzer

D.

Performance Monitor

 

Correct Answer: AC

Explanation:

Protocol analyzer (also known as a network analyzer, packet analyzer or sniffer, or for particular types of networks, an Ethernet sniffer or wireless sniffer) is computer software or computer hardware that can intercept and log traffic passing over a digital network. As data streams flow across the network, the sniffer captures each packet and, if needed, decodes and analyzes its content according to the appropriate RFC or other specifications.

Answer option D is incorrect. Performance Monitor is used to get statistical information about the hardware and software components of a server.

Answer option B is incorrect. A spectrum analyzer, or spectral analyzer, is a device that is used to examine the spectral composition of an electrical, acoustic, or optical waveform. It may also measure the power spectrum.

 

 

QUESTION 6

In which of the following conditions does the system enter ROM monitor mode? Each correct answer represents a complete solution. Choose all that apply.

 

A.

The router does not have a configuration file.

B.

There is a need to set operating parameters.

C.

The user interrupts the boot sequence.

D.

The router does not find a valid operating system image.

 

Correct Answer: CD

Explanation:

The system enters ROM monitor mode if the router does not find a valid operating system image, or if a user interrupts the boot sequence. From ROM monitor mode, a user can boot the device or perform diagnostic tests.

Answer option A is incorrect. If the router does not have a configuration file, it will automatically enter Setup mode when the user switches it on. Setup mode creates an initial configuration. Answer option B is incorrect. Privileged EXEC is used for setting operating parameters.

 

 

QUESTION 7

Which of the following protocols is used for exchanging routing information between two gateways in a network of autonomous systems?

 

A.

IGMP

B.

ICMP

C.

EGP

D.

OSPF

 

Correct Answer: C

Explanation:

EGP stands for Exterior Gateway Protocol. It is used for exchan
ging routing information between two gateways in a network of autonomous systems. This protocol depends upon periodic polling with proper acknowledgements to confirm that network connections are up and running, and to request for routing updates. Each router requests its neighbor at an interval of 120 to 480 seconds, for sending the routing table updates. The neighbor host then responds by sending its routing table. EGP-2 is the latest version of EGP.

Answer option B is incorrect. Internet Control Message Protocol (ICMP) is a maintenance protocol that allows routers and host computers to swap basic control information when data is sent from one computer to another. It is generally considered a part of the IP layer. It allows the computers on a network to share error and status information. An ICMP message, which is encapsulated within an IP datagram, is very useful to troubleshoot the network connectivity and can be routed throughout the Internet.

Answer option A is incorrect. Internet Group Management Protocol (IGMP) is a communication protocol that multicasts messages and information among all member devices in an IP multicast group. However, multicast traffic is sent to a single MAC address but is processed by multiple hosts. It can be effectively used for gaming and showing online videos. IGMP is vulnerable to network attacks.

Answer option D is incorrect. Open Shortest Path First (OSPF) is a routing protocol that is used in large networks. Internet Engineering Task Force (IETF) designates OSPF as one of the Interior Gateway Protocols. A host uses OSPF to obtain a change in the routing table and to immediately multicast updated information to all the other hosts in the network.

 

 

QUESTION 8

Which of the following is a 16-bit field that identifies the source port number of the application program in the host that is sending the segment?

 

A.

Sequence Number

B.

Header Length

C.

Acknowledgment Number

D.

Source Port Address

 

Correct Answer: D

Explanation:

Source Port Address is a 16-bit field that identifies the source port number of the application program in the host that is sending the segment.

Answer option C is incorrect. This is a 32-bit field that identifies the byte number that the sender of the segment is expecting to receive from the receiver.

Answer option B is incorrect. This is a 4-bit field that defines the 4-byte words in the TCP header. The header length can be between 20 and 60 bytes. Therefore, the value of this field can be between 5 and 15.

Answer option A is incorrect. This is a 32-bit field that identifies the number assigned to the first byte of data contained in the segment.

 

 

QUESTION 9

Fill in the blank with the appropriate term. ______________________ is typically carried out by a remote attacker attempting to gain information or access to a network on which it is not authorized or allowed.

 

Correct Answer: Network reconnaissance

Explanation:

Network reconnaissance is typically carried out by a remote attacker attempting to gain information or access to a network on which it is not authorized or allowed. Network reconnaissance is increasingly used to exploit network standards and automated communication methods. The aim is to determine what types of computers are present, along with additional information about those computers such as the type and version of the operating system. This information can be analyzed for known or recently discovered vulnerabilities that can be exploited to gain access to secure networks and computers. Network reconnaissance is possibly one of the most common applications of passive data analysis. Early generation techniques, such as TC
P/IP passive fingerprinting, have accuracy issues that tended to make it ineffective. Today, numerous tools exist to make reconnaissance easier and more effective.

 

 

QUESTION 10

Fill in the blank with the appropriate term. The _____________is an application layer protocol that is used between workstations and routers for transporting SNA/NetBIOS traffic over TCP sessions.

 

Correct Answer: DCAP

Explanation:

The Data Link Switching Client Access Protocol (DCAP) is an application layer protocol that is used between workstations and routers for transporting SNA/NetBIOS traffic over TCP sessions. It was introduced in order to address a few deficiencies by the Data Link Switching Protocol (DLSw). The DLSw raises the important issues of scalability and efficiency, and since DLSw is a switch-to- switch protocol, it is not efficient when implemented on workstations. DCAP was introduced in order to address these issues.

 

Free VCE & PDF File for ECCouncil 312-38 Real Exam

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

This entry was posted in 312-38 Actual Test (October 2016) and tagged , , , , , , , . Bookmark the permalink.