[Oct-2026] 312-38 Braindumps – 312-38 Questions to Get Better Grades [Q116-Q138]

admin October 7, 2026 0 Comments

4/5 - (2 votes)

[Oct-2026] 312-38 Braindumps – 312-38 Questions to Get Better Grades

312-38 Exam Dumps – Try Best 312-38 Exam Questions – VCEDumps

EC-COUNCIL 312-38 Exam Syllabus Topics:

Section	Weight	Objectives
Computer Network and Defense Fundamentals	5%	– IP addressing and protocols – Network defense concepts and processes – Network types, topologies, and components – OSI and TCP/IP models
Endpoint Protection	20%	– Mobile and IoT device security – Endpoint detection and response – Endpoint security controls and software – Operating system hardening (Windows, Linux)
Network Threats, Attacks, and Vulnerabilities	12%	– Vulnerability assessment and classification – Types of threats and attack vectors – Attack methodologies and defense strategies
Network Perimeter Protection	10%	– Firewall deployment and configuration – Network segmentation and isolation – Perimeter security architecture – DMZ, VPN, and secure gateway implementation
Incident Detection, Response, and Recovery	14%	– Incident handling and response procedures – Log management and correlation – Network traffic monitoring and analysis – Business continuity and disaster recovery
Network Security Controls, Protocols, and Devices	8%	– Encryption and PKI – Security protocols and devices (firewalls, IDS/IPS) – Access control mechanisms – Authentication, Authorization, and Accounting (AAA)
Virtual, Cloud, and Wireless Network Protection	15%	– Cloud security models (IaaS, PaaS, SaaS) – Software-defined networking security – Virtualization and container security – Wireless network security protocols and hardening
Security Policies, Standards, and Compliance	6%	– Industry standards, laws, and regulations – Compliance requirements and audits – Design and implementation of security policies
Application and Data Protection	10%	– Data security, encryption, and integrity – Database security and protection – Secure application development and deployment – Web and cloud application security

Q116. Which of the following provides the target for designing DR and BC solutions?

RCO

RTO

RPO

RGO

Q117. What should an administrator do while installing a sniffer on a system to listen to all data transmitted over the network?

Set the system’s NIC to master mode

Set the system’s NIC to ad-hoc mode

Set the system’s NIC to managed mode

Set the system’s NIC to promiscuous mode

Q118. Hacktivists are threat actors, who can be described as ——————-

People motivated by religious beliefs

Disgruntled/terminated employees

People motivated by monetary gams

People having political or social agenda

Q119. In Public Key Infrastructure (PKI), which authority is responsible for issuing and verifying the certificates?

Registration authority

Certificate authority

Digital Certificate authority

Digital signature authority

Q120. Identity the method involved in purging technique of data destruction.

Incineration

Overwriting

Degaussing

Wiping

Q121. Which of the following is a device that receives a digital signal on an electromagnetic or optical transmission medium and regenerates the signal along the next leg of the medium?

Gateway

Repeater

Network adapter

Transceiver

Q122. John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.
Original cookie values: ItemID1=2 ItemPrice1=900 ItemID2=1 ItemPrice2=200 Modified cookie values: ItemID1=2 ItemPrice1=1 ItemID2=1 ItemPrice2=1 Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.
Which of the following hacking techniques is John performing?

Computer-based social engineering

Man-in-the-middle attack

Cookie poisoning

Cross site scripting

Q123. What should a network administrator perform to execute/test the untrusted or untested programs or code from untrusted or unverified third-parties without risking the host system or OS?

Application Whitelisting

Application Blacklisting

Deployment of WAFs

Application Sandboxing

Q124. Match the following NIST security life cycle components with their activities:

1-ii, 2-i, 3-v, 4-iv

1-iii, 2-iv, 3-v, 4-i

1-iv, 2-iii, 3-v, 4-i

1-i, 2-v, 3-iii, 4-ii

Q125. Which of the following statements is not true about the FAT16 file system? Each correct answer represents a complete solution. Choose all that apply.

It supports task compression files.

It works well with large disk, because the cluster size increases as the disk partition size increases.

It does not support file protection.

It supports the Linux operating system.

Q126. Ivan needs to pick an encryption method that is scalable even though it might be slower. He has settled on a method that works where one key is public and the other is private. What encryption method did Ivan settle on?

Ivan settled on the private encryption method.

Ivan settled on the symmetric encryption method.

Ivan settled on the asymmetric encryption method

Ivan settled on the hashing encryption method

Q127. Which among the following is used to limit the number of cmdlets or administrative privileges of administrator, user, or service accounts?

Just Enough Administration (EA)

User Account Control (UAC)

Windows Security Identifier (SID)

Credential Guard

Q128. Henry needs to design a backup strategy for the organization with no service level downtime.
Which backup method will he select?

Normal backup

Warm backup

Hot backup

Cold backup

Q129. The agency Jacob works for stores and transmits vast amounts of sensitive government data that cannot be compromised. Jacob has implemented Encapsulating Security Payload (ESP) to encrypt IP traffic. Jacob wants to encrypt the IP traffic by inserting the ESP header in the IP datagram before the transport layer protocol header. What mode of ESP does Jacob need to use to encrypt the IP traffic?

He should use ESP in transport mode.

Jacob should utilize ESP in tunnel mode.

Jacob should use ESP in pass-through mode.

He should use ESP in gateway mode

Q130. Nancy is working as a network administrator for a small company. Management wants to implement a RAID storage for their organization. They want to use the appropriate RAID level for their backup plan that will satisfy the following requirements: 1. It has a parity check to store all the information about the data in multiple drives 2. Help reconstruct the data during downtime. 3. Process the data at a good speed. 4. Should not be expensive. The management team asks Nancy to research and suggest the appropriate RAID level that best suits their requirements. What RAID level will she suggest?

RAID 0

RAID 10

RAID 3

RAID 1

Q131. Which of the following are provided by digital signatures?

Identification and validation

Authentication and identification

Integrity and validation

Security and integrity

Q132. Which of the following steps will NOT make a server fault tolerant? Each correct answer represents a complete solution. Choose two.

Adding a second power supply unit

Performing regular backup of the server

Adding one more same sized disk as mirror on the server

Implementing cluster servers facility

Encrypting confidential data stored on the server

Q133. Which of the following connects the SDN application layer and SDN controller and allows communication between the network services and business applications?

Eastbound API

Westbound API

Northbound API

Southbound API

Q134. Which of the following type of UPS is used to supply power above 10kVA and provides an ideal electric output presentation, and its constant wear on the power components reduces the dependability?

Stand by On-line hybrid

Line Interactive

Double conversion on-line

Stand by Ferro

Q135. Which of the following protocols is used for exchanging routing information between two gateways in a network of autonomous systems?

IGMP

ICMP

EGP

OSPF

Q136. Which of the following plans is documented and organized for emergency response, backup operations, and
recovery maintained by an activity as part of its security program that will ensure the availability of critical
resources and facilitates the continuity of operations in an emergency situation?

Contingency Plan

Disaster Recovery Plan

Business Continuity Plan

Continuity Of Operations Plan

Contingency plan is prepared and documented for emergency response, backup operations, and recovery
maintained by an activity as the element of its security program that will ensure the availability of critical
resources and facilitates the continuity of operations in an emergency situation.
A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans are
often devised by governments or businesses who want to be prepared for anything that could happen.
Contingency plans include specific strategies and actions to deal with
specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also
include a monitoring process and “triggers” for initiating planned actions. They are required to help
governments, businesses, or individuals to recover from serious incidents in
the minimum time with minimum cost and disruption.
Answer option B is incorrect. A disaster recovery plan should contain data, hardware, and software that can be
critical for a business. It should also include the plan for sudden loss such as hard disc crash. The business
should use backup and data recovery utilities to limit the loss of data.
Answer option D is incorrect. The Continuity Of Operation Plan (COOP) refers to the preparations and
institutions maintained by the United States government, providing survival of federal government operations in
the case of catastrophic events. It provides procedures and capabilities to sustain an organization’s essential.
COOP is the procedure documented to ensure persistent critical operations throughout any period where
normal operations are unattainable.
Answer option C is incorrect. Business Continuity Planning (BCP) is the creation and validation of a practiced
logistical plan for how an organization will recover and restore partially or completely interrupted critical (urgent)
functions within a predetermined time after a disaster or extended disruption. The logistical plan is called a
business continuity plan.

Q137. CORRECT TEXT
Fill in the blank with the appropriate file system. Alternate Data Streams (ADS) is a feature of the______________ file system, allowing more than one data stream to be associated with a filename.

Q138. Consider a scenario consisting of a tree network. The root Node N is connected to two man nodes N1 and N2.
N1 is connected to N11 and N12. N2 is connected to N21 and N22. What will happen if any one of the main nodes fail?

Failure of the main node affects all other child nodes at the same level irrespective of the main node.

Does not cause any disturbance to the child nodes or its tranmission

Failure of the main node will affect all related child nodes connected to the main node

Affects the root node only

Verified 312-38 exam dumps Q&As with Correct 830 Questions and Answers: https://www.vcedumps.com/312-38-examcollection.html

[Oct-2026] 312-38 Braindumps – 312-38 Questions to Get Better Grades [Q116-Q138]

EC-COUNCIL 312-38 Exam Syllabus Topics:

Leave a Reply Cancel reply

312-38 Practice Tests

Related Certifications

Recent Posts

Categories

Archives