312-38 Exam Questions and Answers | Exam-Dumps (Page: 12)

QUESTION: 56

In which of the following types of port scans does the scanner attempt to connect to all 65535 ports?

UDP
Strobe
FTP bounce
Vanilla

Answer(s): D

Explanation:

In a vanilla port scan, the scanner attempts to connect to all 65,535 ports.
Answer option B is incorrect. The scanner attempts to connect to only selected ports.

Answer option A is incorrect. The scanner scans for open User Datagram Protocol ports.
Answer option C is incorrect. The scanner goes through a File Transfer Protocol server to disguise the cracker's location.

Reveal Solution Next Question

QUESTION: 57

Which of the following is a firewall that keeps track of the state of network connections traveling across it?

Stateful firewall
Stateless packet filter firewall
Circuit-level proxy firewall
Application gateway firewall

Answer(s): A

Explanation:

A stateful firewall is a firewall that keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known connection state will be allowed by the firewall; others will be rejected. Answer option B is incorrect. A stateless packet filter firewall allows direct connections from the external network to hosts on the internal network and is included with router configuration software or with Open Source operating systems.
Answer option C is incorrect. It applies security mechanisms when a TCP or UDP connection is established. Answer option D is incorrect. An application gateway firewall applies security mechanisms to specific applications, such as FTP and Telnet servers.

Reveal Solution Next Question

QUESTION: 58

FILL BLANK
Fill in the blank with the appropriate term. ________________encryption is a type of encryption that uses two keys, i.e., a public key and a private key pair for data encryption. It is also known as public key encryption.

Asymmetric

Answer(s): A

Explanation:

Asymmetric encryption is a type of encryption that uses two keys, i.e., a public key and a private key pair for data encryption. The public key is available to everyone, while the private or secret key is available only to the recipient of the message. For example, when a user sends a message or data to another user, the sender uses the public key to encrypt the data. The receiver uses his private key to decrypt the data.

Reveal Solution Next Question

QUESTION: 59

FILL BLANK
Fill in the blank with the appropriate term. ________________is a protocol used to synchronize the timekeeping among the number of distributed time servers and clients.

NTP

Answer(s): A

Explanation:

Network Time Protocol (NTP) is used to synchronize the timekeeping among the number of distributed time servers and clients. It is used for the time management in a large and diverse network that contains many interfaces. In this protocol, servers define the time, and clients have to be synchronized with the defined time. These clients can choose the most reliable source of time defined from the several NTP servers for their information transmission.

Reveal Solution Next Question

QUESTION: 60

FILL BLANK
Fill in the blank with the appropriate term. The _____________is a communication protocol that communicates information between the network routers and the multicast end stations.

IGMP

Answer(s): A

Explanation:

The Internet Group Management Protocol (IGMP) is a communication protocol that communicates information between the network routers and the multicast end stations. It allows the receivers to request a multicast data stream from a specific group address. However, multicast traffic is sent to a single MAC address but is processed by multiple hosts. The IGMP allows an end station to connect to a multicast group and leave it, while being connected to the group address. It can be effectively used for gaming and showing online videos.
Although it does not actually act as a transport protocol, it operates above the network layer. It is analogous to ICMP for unicast connections. It is susceptible to some attacks, so firewalls commonly allow the user to disable it if not needed.

Reveal Solution Next Question

EC-Council 312-38 Exam (page: 12) EC-Council Certified Network Defender Updated on: 09-Feb-2026

QUESTION: 56

Explanation:

QUESTION: 57

Explanation:

QUESTION: 58

Explanation:

QUESTION: 59

Explanation:

QUESTION: 60

Explanation:

EC-Council 312-38 Exam (page: 12)
EC-Council Certified Network Defender
Updated on: 09-Feb-2026