312-38 Exam Questions and Answers | Exam-Dumps (Page: 20)

QUESTION: 96

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

Contingency plan
Disaster recovery plan
Business continuity plan
Continuity of Operations Plan

Answer(s): A

Explanation:

A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans are often devised by governments or businesses who want to be prepared for anything that could happen. Contingency plans include specific strategies and actions to deal with specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also include a monitoring process and "triggers" for initiating planned actions. They are required to help governments, businesses, or individuals to recover from serious incidents in the minimum time with minimum cost and disruption.
Answer option D is incorrect. It includes the plans and procedures documented that ensure the continuity of critical operations during any period where normal operations are impossible.
Answer option B is incorrect. Disaster recovery planning is a subset of a larger process known as business continuity planning and should include planning for resumption of applications, data, hardware, communications (such as networking), and other IT infrastructure. A business continuity plan (BCP) includes planning for non-IT related aspects such as key personnel, facilities, crisis communication, and reputation protection, and should refer to the disaster recovery plan (DRP) for IT-related infrastructure recovery/continuity.
Answer option C is incorrect. Business continuity planning (BCP) is the creation and validation of a practiced logistical plan for how an organization will recover and restore partially or completely interrupted critical (urgent) functions within a predetermined time after a disaster or extended disruption. The logistical plan is called a business continuity plan. The BCP lifecycle is as follows:

Reveal Solution Next Question

QUESTION: 97

Which of the following examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware, and policy violations?

Network Behavior Analysis
Network-based Intrusion Prevention
Wireless Intrusion Prevention System
Host-based Intrusion Prevention

Answer(s): A

Explanation:

Network Behavior Analysis examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware, and policy violations.
Answer option B is incorrect. Network-based Intrusion Prevention (NIPS) monitors the entire network for suspicious traffic by analyzing protocol activity.
Answer option C is incorrect. Wireless Intrusion Prevention System (WIPS) monitors a wireless network for suspicious traffic by analyzing wireless networking protocols.
Answer option D is incorrect. Host-based Intrusion Prevention (HIPS) is an installed software package that monitors a single host for suspicious activity by analyzing events occurring within that host.

Reveal Solution Next Question

QUESTION: 98

Which of the following routing metrics refers to the length of time that is required to move a packet from source to destination through the internetwork?

Routing delay
Bandwidth
Load
Path length

Answer(s): A

Explanation:

Routing delay refers to the length of time that is required to move a packet from source to destination through the internetwork. Delay depends on many factors, including the following:
Bandwidth of intermediate network links Port queues at each router along the way
Network congestion on all intermediate network links Physical distance to be traveled
Since delay is a conglomeration of several important variables, it is a common and useful metric.
Answer option D is incorrect. Path length is defined as the sum of the costs associated with each link traversed. Answer option B is incorrect. Bandwidth refers to the available traffic capacity of a link.
Answer option C is incorrect. Load refers to the degree to which a network resource, such as a router, is busy.

Reveal Solution Next Question

QUESTION: 99

FILL BLANK
Fill in the blank with the appropriate term. The______________ model is a description framework for computer network protocols and is sometimes called the Internet Model or the DoD Model.

TCP/IP

Answer(s): A

Explanation:

The TCP/IP model is a description framework for computer network protocols. It describes a set of general design guidelines and implementations of specific networking protocols to enable computers to communicate over a network. TCP/IP provides end-to-end connectivity specifying how data should be formatted, addressed, transmitted, routed and received at the destination. Protocols exist for a variety of different types of communication services between computers. The TCP/IP Model is sometimes called the Internet Model or the DoD Model. The TCP/IP model has four unique layers as shown in the image. This layer architecture is often compared with the seven-layer OSI Reference Model. The TCP/IP model and related protocols are maintained by the Internet Engineering Task Force (IETF).

Reveal Solution Next Question

QUESTION: 100

FILL BLANK
Fill in the blank with the appropriate term. A____________ is a block of data that a Web server stores on the client computer.

cookie

Answer(s): A

Explanation:

Cookie is a block of data, which a Web server stores on the client computer. If no expiration date is set for the cookie, it expires when the browser closes. If the expiration date is set for a future date, the cookie will be stored on the client's disk after the session ends. If the expiration date is set for a past date, the cookie is deleted.

Reveal Solution Next Question

EC-Council 312-38 Exam (page: 20) EC-Council Certified Network Defender Updated on: 09-Feb-2026

QUESTION: 96

Explanation:

QUESTION: 97

Explanation:

QUESTION: 98

Explanation:

QUESTION: 99

Explanation:

QUESTION: 100

Explanation:

EC-Council 312-38 Exam (page: 20)
EC-Council Certified Network Defender
Updated on: 09-Feb-2026