312-38 practice questions 81–90

1. Question 81 · 191 in bank

   Which of the following interfaces uses hot plugging technique to replace computer components without the need to shut down the system?

   • ASATA
   • BSCSI
   • CIDE
   • DSDRAM

   Show answer

   Answer: A

   Explanation

   correct is SATA SATA: Serial ATA deals with hot plugging and serial connectivity. The hot plugging technique may be used to replace computer components without shutting down the system. SATA enables only one connection per connector, and is not flexible for industrial purposes. SCSI: Small computer system interface (SCSI) allows multiple devices to be connected to a single port at the same time. SCSI uses a parallel cable for attaching internal and external devices.

   Source: Adapted from community discussion — alvaroestebancta

   Next question

2. Question 82 · 191 in bank

   Which of the following refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system?

   • ASpoofing
   • BSmurf
   • CSession hijacking
   • DPhishing

   Show answer

   Answer: C

   Explanation

   Session hijacking refers to the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system. In particular, it is used to refer to the theft of a magic cookie used to authenticate a user to a remote server. It has particular relevance to Web developers, as the HTTP cookies used to maintain a session on many Web sites can be easily stolen by an attacker using an intermediary computer or with access to the saved cookies on the victim's computer (see HTTP cookie theft). TCP session hijacking is when a hacker takes over a TCP session between two machines. Since most authentication only occurs at the start of a TCP session, this allows the hacker to gain access to a machine. Answer option A is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by using someone else's IP address to hide his identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the responses to be misdirected. Answer option B is incorrect. Smurf is an attack that generates significant computer network traffic on a victim network. This is a type of denial-of-service attack that floods a target system via spoofed broadcast ping messages. In such attacks, a perpetrator sends a large amount of ICMP echo request (ping) traffic to IP broadcast addresses, all of which have a spoofed source IP address of the intended victim. If the routing device delivering traffic to those broadcast addresses delivers the IP broadcast to all hosts, most hosts on that IP network will take the ICMP echo request and reply to it with an echo reply, which multiplies the traffic by the number of hosts responding. Answer option D is incorrect. Phishing is a type of scam that entices a user to disclose personal information such as social security number, bank account details, or credit card number. An example of phishing attack is a fraudulent e-mail that appears to come from a user's bank asking to change his online banking password. When the user clicks the link available on the e-mail, it directs him to a phishing site which replicates the original bank site. The phishing site lures the user to provide his personal information.

   Next question

3. Question 83 · 191 in bank

   Alex is administering the firewall in the organization's network. What command will he use to check all the remote addresses and ports in numerical form?

   • Anetstat -a
   • Bnetstat -ao
   • Cnetstat -o
   • Dnetstat -an

   Show answer

   Answer: D

   Next question

4. Question 84 · 191 in bank

   Management decides to implement a risk management system to reduce and maintain the organization's risk at an acceptable level. Which of the following is the correct order in the risk management phase?

   • ARisk Identification, Risk Assessment, Risk Treatment, Risk Monitoring & Review
   • BRisk Identification, Risk Assessment, Risk Monitoring & Review, Risk Treatment
   • CRisk Treatment, Risk Monitoring & Review, Risk Identification, Risk Assessment
   • DRisk Assessment, Risk Treatment, Risk Monitoring & Review, Risk Identification

   Show answer

   Answer: A

   Next question

5. Question 85 · 191 in bank

   You want to increase your network security implementing a technology that only allows certain MAC addresses in specific ports in the switches; which one of the above is the best choice?

   • APort Security
   • BPort Authorization
   • CPort Detection
   • DPort Knocking

   Show answer

   Answer: A

   Explanation

   Port security is a method used in preventing DHCP starvation attacks. It limits the number of MAC addresses that can access the port.

   Source: Adapted from community discussion — ui

   Next question

6. Question 86 · 191 in bank

   Which protocol could choose the network administrator for the wireless network design, if he need to satisfied the minimum requirement of 2.4 GHz, 22 MHz of bandwidth, 2 Mbits/s stream for data rate and use DSSS for modulation.

   • A802.11n
   • B802.11g
   • C802.11b
   • D802.11a

   Show answer

   Answer: C

   Next question

7. Question 87 · 191 in bank

   Physical access controls help organizations monitor, record, and control access to the information assets and facility. Identify the category of physical security controls which includes security labels and warning signs.

   • ATechnical control
   • BEnvironmental control
   • CPhysical control
   • DAdministrative control

   Show answer

   Answer: C

   Next question

8. Question 88 · 191 in bank

   Which Internet access policy starts with all services blocked and the administrator enables safe and necessary services individually, which provides maximum security and logs everything, such as system and network activities?

   • AInternet access policy
   • BParanoid policy
   • CPermissive policy
   • DPrudent policy

   Show answer

   Answer: D

   Explanation

   Prudent Policy: A prudent policy starts with all services blocked. The Network defender enables safe and necessary services individually. This provides maximum security and logs all activity such as system and network activities.

   Source: Adapted from community discussion — ui

   Next question

9. Question 89 · 191 in bank

   DRAG DROP - George works as a Network Administrator for Blue Soft Inc. The company uses Windows Vista operating system. The network of the company is continuously connected to the Internet. What will George use to protect the network of the company from intrusion? Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   A firewall is a set of related programs configured to protect private networks connected to the Internet from intrusion. It is used to regulate the network traffic between different computer networks. It permits or denies the transmission of a network packet to its destination based on a set of rules. A firewall is often installed on a separate computer so that an incoming packet does not get into the network directly.

   

   Next question

10. Question 90 · 191 in bank

    Daniel who works as a network administrator has just deployed an IDS in his organization's network. He wants to calculate the False Positive rate for his implementation. Which of the following formulas will he use, to calculate the False Positive rate?

    • AFalse Negative/True Negative+True Positive
    • BFalse Positive/False Positive+True Negative
    • CTrue Negative/False Negative+True Positive
    • DFalse Negative/False Negative+True Positive

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-38 practice, question 81. 191 questions available.