Free EC-COUNCIL 312-38 Exam Dumps Questions & Answers

Which of the information below can be gained through network sniffing? (Select all that apply)

• A.  DNS traffic
• B.  Syslog traffic
• C.  Telnet Passwords
• D.  Programming errors

Which of the following systems monitors the operating system detecting inappropriate activity, writing to log files, and triggering alarms?

• A.  Network-based ID system
• B.  Host-based ID system
• C.  Behavior-based ID system
• D.  Signature-Based ID system

John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.
Original cookie values:
ItemID1=2
ItemPrice1=900
ItemID2=1
ItemPrice2=200
Modified cookie values:
ItemID1=2
ItemPrice1=1
ItemID2=1
ItemPrice2=1
Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.
Which of the following hacking techniques is John performing?

• A.  Cookie poisoning
• B.  Man-in-the-middle attack
• C.  Cross site scripting
• D.  Computer-based social engineering

What is the bit size of the Next Header field in the IPv6 header format?

• A.  8 bits
• B.  4 bits
• C.  20 bits
• D.  2 bits

Which of the following standards does a cloud service provider has to comply with, to protect the privacy of its customer's personal information?

• A.  ISO/IEC 27018
• B.  ISO/IEC 27020
• C.  ISO/IEC 27021
• D.  ISO/IEC 27019