01. On a Red Hat-family Linux system, which subdirectory of /var/log stores the Apache web server's access and error logs?
a) /var/log/lighttpd/
b) /var/log/apachelog/
c) /var/log/maillog
d) /var/log/httpd/
02. A technician is deploying virtual machines for several customers on one physical host to reduce power consumption in a data center.
Which of the following should be recommended to isolate each customer's VMs from the others?
a) Enable NIC teaming on the host
b) Virtual switches with VLANs
c) Develop a patch management guide
d) Install HIPS on each VM
03. A company has proprietary, mission-critical devices on its network that are configured remotely by both employees and approved customers. The administrator wants to monitor these devices for security events without changing their baseline configuration.
Which of the following should be implemented to secure the devices without risking availability?
a) IDS
b) Honeypot
c) IPS
d) Host-based firewall
04. Richard, a Linux system administrator, patches Ubuntu systems manually as part of patch management. He has already refreshed the package index.
Which command installs the newest available versions of the packages already installed, without removing any installed package or adding new ones?
a) sudo apt-get dist-upgrade
b) sudo apt-get autoremove
c) sudo apt-get upgrade
d) sudo apt-get update
05. An IT technician has been appointed to the company's network vulnerability assessment team. The other team members come from Accounting, Management, Shipping and Marketing, and the team is holding its first meeting to decide how to proceed.
What should the team do first to create the network vulnerability assessment plan?
a) Form a hypothesis of what the final findings will be, then test it.
b) Acquire the required documents and review security policies and compliance.
c) Create an initial executive report to show the management team.
d) Analyze the data already gathered from the company or from interviews.
06. A company's conference rooms have wired network jacks used by both employees and guests. Employees need access to internal resources; guests need only internet access.
Which combination BEST meets these requirements?
a) 802.1X and VLANs
b) Switches and a firewall
c) NAT and DMZ
d) VPN and IPsec
07. Matt, an administrator, notices a flood of fragmented packets and retransmissions coming from an email server. After he disables the TCP offload setting on the server's NIC, he sees normal traffic again, with packets flowing in sequence.
Which of the following utilities was he MOST likely using to view this issue?
a) Web application firewall
b) Load balancer
c) Protocol analyzer
d) Spam filter
08. Which of the following devices would be MOST useful to ensure availability when a website receives a large number of requests?
a) Web security gateway
b) Protocol analyzer
c) VPN concentrator
d) Load balancer
09. A security administrator moves all web-facing servers off the internal network and onto their own segment, connected to a dedicated interface on the firewall so that the firewall filters traffic between the internet, that segment, and the internal network.
Which term BEST describes the new segment?
a) VLAN
b) DMZ
c) Subnet
d) Bastion network
10. Brendan is choosing memory for the cache of a hardware RAID controller. He wants the RAM type with the shortest access time, which stores each bit in a flip-flop circuit and needs no periodic refresh while powered.
Which type of memory should he select?
a) NAND flash memory
b) EEPROM
c) SDRAM
d) SRAM
The purpose of this Sample Question Set is to provide you with information about the EC-Council Certified Network Defender exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the 312-38 certification test. To get familiar with real exam environment, we suggest you try our Sample EC-Council CND Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual EC-Council Certified Network Defender (CND) certification exam.
