312-38無料問題集「EC-COUNCIL EC-Council Certified Network Defender CND」

質問 1

Harry has sued the company claiming they made his personal information public on a social networking site in the United States. The company denies the allegations and consulted a/an _______ for legal advice to defend them against this allegation.

（A）PR Specialist

（B）Evidence Manager

（C）Attorney

（D）Incident Handler

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which of the following Event Correlation Approach checks and compares all the fields systematically and intentionally for positive and negative correlation with each other to determine the correlation across one or multiple fields?

（A）Graph-Based Approach

（B）Automated Field Correlation

（C）Field-Based Approach

（D）Rule-Based Approach

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following attack signature analysis techniques are implemented to examine the header information and conclude that a packet has been altered?

（A）Content-based signature analysis

（B）Composite signature-based analysis

（C）Context-based signature analysis

（D）Atomic signature-based analysis

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

How is application whitelisting different from application blacklisting?

（A）It allows execution of trusted applications in a unified environment

（B）It allows execution of untrusted applications in an isolated environment

（C）It allows all applications other than the undesirable applications

（D）It rejects all applications other than the allowed applications

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

John is the Vice-President of a BPO. He wants to implement a policy allowing employees to use and manage devices purchased by the organization but restrict the use of the device for business use only. Which among the following policies does John want to implement?

（A）BYOD policy

（B）COBO policy

（C）COPE policy

（D）CYOD policy

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of the following creates passwords for individual administrator accounts and stores them in Windows AD?

（A）SAM

（B）LAPS

（C）LSASS

（D）SRM

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Stephanie is currently setting up email security so all company data is secured when passed through email.
Stephanie first sets up encryption to make sure that a specific user's email is protected. Next, she needs to ensure that the incoming and the outgoing mail has not been modified or altered using digital signatures. What is Stephanie working on?

（A）Availability

（B）Confidentiality

（C）Usability

（D）Data Integrity

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which among the following filter is used to detect a SYN/FIN attack?

（A）tcp.flags==0x004

（B）tcp.flags==0x002

（C）tcp.flags==0x001

（D）tcp.flags==0x003

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

If a network is at risk from unskilled individuals, what type of threat is this?

（A）External Threats

（B）Structured Threats

（C）Internal Threats

（D）Unstructured Threats

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

-----------is a group of broadband wireless communications standards for Metropolitan Area Networks (MANs)

（A）802.12

（B）802.15.4

（C）802.15

（D）802.16

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Which of the following is not part of the recommended first response steps for network defenders?

（A）Restrict yourself from doing the investigation

（B）Do not change the state of the suspected device

（C）Extract relevant data from the suspected devices as early as possible

（D）Disable virus protection

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Timothy works as a network administrator in a multinational organization. He decides to implement a dedicated network for sharing storage resources. He uses a_______as it seperates the storage units from the servers and the user network.

（A）NAS

（B）SAS

（C）SCSA

（D）SAN

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

Steven is a Linux system administrator at an IT company. He wants to disable unnecessary services in the system, which can be exploited by the attackers. Which among the following is the correct syntax for disabling a service?

（A）$ sudo systemctl disable [service]

（B）$ sudo system ctl disable [service]

（C）$ sudo system.ctl disable [service]

（D）$ sudo system-ctl disable [service]

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Which policies exist only on AWS IAM identity (user, group, or role)?

（A）Power-user AWS managed policies

（B）Full access AWS managed policie

（C）Customer-Managed Policies

（D）Inline Policies

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

Larry is responsible for the company's network consisting of 300 workstations and 25 servers. After using a hosted email service for a year, the company wants to control the email internally. Larry likes this idea because it will give him more control over the email. Larry wants to purchase a server for email but does not want the server to be on the internal network due to the potential to cause security risks. He decides to place the server outside of the company's internal firewall. There is another firewall connected directly to the Internet that will protect traffic from accessing the email server. The server will be placed between the two firewalls. What logical area is Larry putting the new email server into?

（A）He is going to place the server in a Demilitarized Zone (DMZ)

（B）Larry is going to put the email server in a hot-server zone.

（C）He will put the email server in an IPsec zone.

（D）For security reasons, Larry is going to place the email server in the company's Logical Buffer Zone (LBZ).

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

Which of the following DDoS attacks overloads a service by sending inundate packets?

（A）Web-centric attack

（B）System-centric attack

（C）Application-centric attack

（D）Network-centric attack

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

John, a network administrator, is configuring Amazon EC2 cloud service for his organization. Identify the type of cloud service modules his organization adopted.

（A）Platform-as-a-Service (PaaS)

（B）Software-as-a-Service (SaaS)

（C）Infrastructure-as-a-Service (IaaS)

（D）Storage-as-a-Service (SaaS)

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

Which of the following NIST incident category includes any activity that seeks to access or identify a federal agency computer, open ports, protocols, service or any combination for later exploit?

（A）Scans/Probes/Attempted Access

（B）Improper usage

（C）Malicious code

（D）Denial-of-Service

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

312-38 無料問題集「EC-COUNCIL EC-Council Certified Network Defender CND」

弊社を連絡する

関連リンク

トップ試験