EC-Council 312-38 Practice Exams
Last updated on Oct 24,2026- Exam Code: 312-38
- Exam Name: Certified Network Defender
- Certification Provider: EC-Council
- Latest update: Oct 24,2026
Question #351
Who offers formal experienced testimony in court?
- A . Incident analyzer
- B . Evidence documenter
- C . Expert witness
- D . Attorney
Correct Answer: C
C
Explanation:
The individual who offers formal experienced testimony in court is known as an Expert Witness. This person is typically engaged due to their specialized knowledge, skills, or experience in a particular field, which is relevant to the case at hand. They provide informed opinions and insights to help the court understand complex matters that are beyond the general knowledge of the layperson. Unlike other witnesses, an expert witness is allowed to offer opinions and draw conclusions based on the facts presented in the case.
Reference: The role and qualifications of an expert witness are well-documented within legal frameworks and align with the Certified Network Defender (CND) program’s objectives, which include understanding the legal and ethical implications of network security.
C
Explanation:
The individual who offers formal experienced testimony in court is known as an Expert Witness. This person is typically engaged due to their specialized knowledge, skills, or experience in a particular field, which is relevant to the case at hand. They provide informed opinions and insights to help the court understand complex matters that are beyond the general knowledge of the layperson. Unlike other witnesses, an expert witness is allowed to offer opinions and draw conclusions based on the facts presented in the case.
Reference: The role and qualifications of an expert witness are well-documented within legal frameworks and align with the Certified Network Defender (CND) program’s objectives, which include understanding the legal and ethical implications of network security.
Question #352
Which RAID level does not provide data redundancy?
- A . RAID level 0
- B . RAID level 1
- C . RAID level 50
- D . RAID level 10
Correct Answer: A
A
Explanation:
RAID level 0, also known as striping, involves splitting data evenly across two or more disks without parity information, redundancy, or fault tolerance. This means that if one drive fails, the entire array fails, resulting in total data loss. RAID 0 is typically used to increase performance, as it allows for faster read and write operations by using multiple disks simultaneously. However, because it does not duplicate data across the disks, it does not provide any form of data redundancy1.
Reference: The explanation aligns with the standard definitions and functionalities of RAID levels as described in various authoritative sources on computer storage and network security, including materials from the EC-Council’s Certified Network Defender (CND) course. For the most accurate and detailed information, please refer to the latest CND study materials and documents available through the EC-Council and other reputable sources on RAID technology.
A
Explanation:
RAID level 0, also known as striping, involves splitting data evenly across two or more disks without parity information, redundancy, or fault tolerance. This means that if one drive fails, the entire array fails, resulting in total data loss. RAID 0 is typically used to increase performance, as it allows for faster read and write operations by using multiple disks simultaneously. However, because it does not duplicate data across the disks, it does not provide any form of data redundancy1.
Reference: The explanation aligns with the standard definitions and functionalities of RAID levels as described in various authoritative sources on computer storage and network security, including materials from the EC-Council’s Certified Network Defender (CND) course. For the most accurate and detailed information, please refer to the latest CND study materials and documents available through the EC-Council and other reputable sources on RAID technology.