EC-Council 312-38 Practice Exams
Last updated on Oct 21,2026- Exam Code: 312-38
- Exam Name: Certified Network Defender
- Certification Provider: EC-Council
- Latest update: Oct 21,2026
Question #50
David, a network and system admin, encrypted all the files in a Windows system that supports NTFS file system using Encrypted File Systems (EFS). He then backed up the same files into another Windows system that supports FAT file system. Later, he found that the backup files were not encrypted.
What could be the reason for this?
- A . EFS could only encrypt the files that follow NTFS
- B . FAT files cannot be encrypted
- C . EFS is not the encryption system used in Windows
- D . Copied files loses their encryption
Correct Answer: A
A
Explanation:
The Encrypting File System (EFS) is a feature of the NTFS file system that provides encryption at the file system level. It is designed to work specifically with NTFS and does not support the FAT file system. When files encrypted with EFS are copied or backed up to a volume that uses the FAT file system, the encryption is lost because FAT does not support EFS encryption. This is why David found that the backup files were not encrypted after transferring them to a system that supports the FAT file system.
Reference: The explanation is based on the operational characteristics of EFS and its compatibility with different file systems as described in the Certified Network Defender (CND) course materials and further supported by information from reliable sources on EFS and file system encryption1234.
A
Explanation:
The Encrypting File System (EFS) is a feature of the NTFS file system that provides encryption at the file system level. It is designed to work specifically with NTFS and does not support the FAT file system. When files encrypted with EFS are copied or backed up to a volume that uses the FAT file system, the encryption is lost because FAT does not support EFS encryption. This is why David found that the backup files were not encrypted after transferring them to a system that supports the FAT file system.
Reference: The explanation is based on the operational characteristics of EFS and its compatibility with different file systems as described in the Certified Network Defender (CND) course materials and further supported by information from reliable sources on EFS and file system encryption1234.
Question #52
In Public Key Infrastructure (PKI), which authority is responsible for issuing and verifying the certificates?
- A . Registration authority
- B . Certificate authority
- C . Digital Certificate authority
- D . Digital signature authority
Correct Answer: B
B
Explanation:
In Public Key Infrastructure (PKI), the Certificate Authority (CA) is responsible for issuing digital certificates. The CA validates entities and binds their public keys with their respective identities through a process of registration and issuance of certificates. This process can be automated or carried out under human supervision. The Registration Authority (RA) often assists the CA by handling the vetting of certificate requests and authenticating the entity making the request, but it does not issue certificates. The CA maintains the integrity of the binding by ensuring that the certificates are issued according to industry norms and best practices, and it also manages the revocation of certificates when necessary.
Reference: The explanation is based on the standard roles and responsibilities defined within a PKI as outlined in various sources, including the Internet Engineering Task Force’s RFC 36471, which details the functions of an RA and clarifies that only a CA has the authority to issue certificates2345.
B
Explanation:
In Public Key Infrastructure (PKI), the Certificate Authority (CA) is responsible for issuing digital certificates. The CA validates entities and binds their public keys with their respective identities through a process of registration and issuance of certificates. This process can be automated or carried out under human supervision. The Registration Authority (RA) often assists the CA by handling the vetting of certificate requests and authenticating the entity making the request, but it does not issue certificates. The CA maintains the integrity of the binding by ensuring that the certificates are issued according to industry norms and best practices, and it also manages the revocation of certificates when necessary.
Reference: The explanation is based on the standard roles and responsibilities defined within a PKI as outlined in various sources, including the Internet Engineering Task Force’s RFC 36471, which details the functions of an RA and clarifies that only a CA has the authority to issue certificates2345.
Question #53
Which IEEE standard does wireless network use?
- A . 802.11
- B . 802.18
- C . 802.9
- D . 802.10
Correct Answer: A
A
Explanation:
The IEEE 802.11 standard is the set of protocols that defines the implementation of wireless local area network (WLAN) communication in the medium access control (MAC) and physical layer (PHY) specifications. It is the foundational standard for wireless networking technologies, commonly known as Wi-Fi. This standard allows for wireless communication between devices by establishing common frequencies and methods of data transmission.
Reference: The information aligns with the IEEE 802.11-2020 standard, which specifies technical corrections, clarifications, and enhancements to the existing MAC and PHY functions for WLANs1. Additional details about the IEEE 802 wireless standards can be found in resources provided by the IEEE Standards Association and other technical documentation23.
A
Explanation:
The IEEE 802.11 standard is the set of protocols that defines the implementation of wireless local area network (WLAN) communication in the medium access control (MAC) and physical layer (PHY) specifications. It is the foundational standard for wireless networking technologies, commonly known as Wi-Fi. This standard allows for wireless communication between devices by establishing common frequencies and methods of data transmission.
Reference: The information aligns with the IEEE 802.11-2020 standard, which specifies technical corrections, clarifications, and enhancements to the existing MAC and PHY functions for WLANs1. Additional details about the IEEE 802 wireless standards can be found in resources provided by the IEEE Standards Association and other technical documentation23.
Question #54
Which of the following provides enhanced password protection, secured loT connections, and encompasses stronger encryption techniques?
- A . WPA3
- B . WEP
- C . WPA
- D . WPA2
Correct Answer: A
A
Explanation:
WPA3, or Wi-Fi Protected Access 3, is the latest security certification program developed by the Wi-Fi Alliance that provides enhanced password protection, secured IoT connections, and encompasses stronger encryption techniques.
WPA3 introduces several enhancements over its predecessor, WPA2, including:
Better protection for simple passwords: WPA3-Personal uses the Simultaneous Authentication of Equals (SAE) which provides protection against password guessing attacks even when users choose simpler passwords.
Enhanced encryption for personal networks: It employs individualized data encryption to protect against eavesdropping on Wi-Fi networks, and it uses a more secure encryption algorithm, Galois/Counter Mode Protocol (GCMP-256), compared to the Advanced Encryption Standard (AES) used in WPA2.
Improved security protocols for enterprise networks: WPA3-Enterprise offers the equivalent of 192-bit cryptographic strength, providing additional layers of authentication and data protection for enterprise networks.
Wi-Fi Enhanced Open for open networks: This feature encrypts traffic on open networks without requiring a password, increasing the privacy and security of users connecting to public Wi-Fi hotspots.
Reference: These details are based on the latest information available on WPA3’s impact on IoT device security and its comparison to WPA2123.
A
Explanation:
WPA3, or Wi-Fi Protected Access 3, is the latest security certification program developed by the Wi-Fi Alliance that provides enhanced password protection, secured IoT connections, and encompasses stronger encryption techniques.
WPA3 introduces several enhancements over its predecessor, WPA2, including:
Better protection for simple passwords: WPA3-Personal uses the Simultaneous Authentication of Equals (SAE) which provides protection against password guessing attacks even when users choose simpler passwords.
Enhanced encryption for personal networks: It employs individualized data encryption to protect against eavesdropping on Wi-Fi networks, and it uses a more secure encryption algorithm, Galois/Counter Mode Protocol (GCMP-256), compared to the Advanced Encryption Standard (AES) used in WPA2.
Improved security protocols for enterprise networks: WPA3-Enterprise offers the equivalent of 192-bit cryptographic strength, providing additional layers of authentication and data protection for enterprise networks.
Wi-Fi Enhanced Open for open networks: This feature encrypts traffic on open networks without requiring a password, increasing the privacy and security of users connecting to public Wi-Fi hotspots.
Reference: These details are based on the latest information available on WPA3’s impact on IoT device security and its comparison to WPA2123.
Question #55
Which of the following network monitoring techniques requires extra monitoring software or hardware?
- A . Non-router based
- B . Switch based
- C . Hub based
- D . Router based
Correct Answer: B
B
Explanation:
Switch-based network monitoring requires additional monitoring software or hardware because switches operate at the data link layer of the OSI model and do not inherently provide monitoring capabilities. To monitor traffic through a switch, network administrators must use port mirroring or a network tap, which involves configuring the switch to send a copy of the network packets to a monitoring device. This allows the monitoring device to analyze the traffic passing through the switch without interfering with the network’s normal operation. This technique is essential for deep packet inspection, intrusion detection systems, and for gaining visibility into the traffic between devices in a switched network.
Reference: The need for extra monitoring software or hardware in switch-based network monitoring is consistent with the Certified Network Defender (CND) curriculum, which emphasizes the importance of implementing robust network monitoring practices to detect and respond to security threats12. Additionally, the use of port mirroring and network taps as methods to monitor switch-based networks is a standard practice in network security, aligning with the CND’s focus on technical network security measures34.
B
Explanation:
Switch-based network monitoring requires additional monitoring software or hardware because switches operate at the data link layer of the OSI model and do not inherently provide monitoring capabilities. To monitor traffic through a switch, network administrators must use port mirroring or a network tap, which involves configuring the switch to send a copy of the network packets to a monitoring device. This allows the monitoring device to analyze the traffic passing through the switch without interfering with the network’s normal operation. This technique is essential for deep packet inspection, intrusion detection systems, and for gaining visibility into the traffic between devices in a switched network.
Reference: The need for extra monitoring software or hardware in switch-based network monitoring is consistent with the Certified Network Defender (CND) curriculum, which emphasizes the importance of implementing robust network monitoring practices to detect and respond to security threats12. Additionally, the use of port mirroring and network taps as methods to monitor switch-based networks is a standard practice in network security, aligning with the CND’s focus on technical network security measures34.
Question #56
Management asked Adam to implement a system allowing employees to use the same credentials to access multiple applications. Adam should implement the————————–authentication technique to satisfy the management request.
- A . Two-factor Authentication
- B . Smart Card Authentication
- C . Single-sign-on
- D . Biometric
Correct Answer: C
C
Explanation:
Single-sign-on (SSO) is an authentication process that allows a user to access multiple applications with one set of login credentials. This is particularly useful in an environment where employees need to access a variety of systems and applications, as it simplifies the user experience and reduces the need for multiple passwords. SSO is designed to alleviate the administrative burden of managing multiple sets of credentials and to improve security by reducing the likelihood of password fatigue, which can lead to weak password practices.
Reference: The concept of SSO is covered in the Certified Network Defender (CND) course, which includes understanding various types of authentication methods. SSO is mentioned as a type of authentication that allows users to be authenticated once and gain access to multiple systems without being prompted to log in again for each system1.
C
Explanation:
Single-sign-on (SSO) is an authentication process that allows a user to access multiple applications with one set of login credentials. This is particularly useful in an environment where employees need to access a variety of systems and applications, as it simplifies the user experience and reduces the need for multiple passwords. SSO is designed to alleviate the administrative burden of managing multiple sets of credentials and to improve security by reducing the likelihood of password fatigue, which can lead to weak password practices.
Reference: The concept of SSO is covered in the Certified Network Defender (CND) course, which includes understanding various types of authentication methods. SSO is mentioned as a type of authentication that allows users to be authenticated once and gain access to multiple systems without being prompted to log in again for each system1.
Question #57
Who is responsible for executing the policies and plans required for supporting the information technology and computer systems of an organization?
- A . Senior management
- B . IT security practitioners
- C . Business and functional managers
- D . Chief Information Officer (CIO)
Correct Answer: D
D
Explanation:
The Chief Information Officer (CIO) is typically responsible for the implementation and management of policies and plans that support an organization’s IT and computer systems. The CIO’s role involves overseeing the IT department, aligning IT goals with business strategies, and ensuring that the IT infrastructure is capable of supporting the organization’s operations and objectives. They play a crucial role in decision-making processes related to technology investments and are instrumental in executing the organization’s IT policies and strategic plans.
Reference: This information is consistent with the roles and responsibilities outlined for IT management in the EC-Council’s Certified Network Defender (CND) program, which emphasizes the importance of leadership and strategic direction in network security12.
D
Explanation:
The Chief Information Officer (CIO) is typically responsible for the implementation and management of policies and plans that support an organization’s IT and computer systems. The CIO’s role involves overseeing the IT department, aligning IT goals with business strategies, and ensuring that the IT infrastructure is capable of supporting the organization’s operations and objectives. They play a crucial role in decision-making processes related to technology investments and are instrumental in executing the organization’s IT policies and strategic plans.
Reference: This information is consistent with the roles and responsibilities outlined for IT management in the EC-Council’s Certified Network Defender (CND) program, which emphasizes the importance of leadership and strategic direction in network security12.
Question #58
Jeanne is working as a network administrator in an IT company. She wants to control/limit container access to CPU, memory, swap, block IO (rates), network.
Which Linux kernel feature allows Jeanne to manage, restrict, and audit groups of the process?
- A . Cgroups
- B . LSMs
- C . Seccomp
- D . Userns
Correct Answer: C
C
Explanation:
Cgroups, or control groups, are a feature of the Linux kernel that allows system administrators to allocate, limit, and monitor the resources used by sets of processes. Jeanne can use cgroups to manage and restrict access to CPU, memory, swap, block IO rates, and network resources for containers. This feature also enables the auditing of process groups, making it possible to track the resource usage and ensure that each container only uses its allocated share, preventing any single process from monopolizing system resources.
Reference: The functionality of cgroups is well-documented in the Linux kernel documentation and is a fundamental topic in system administration, which is relevant to the objectives of the EC-Council’s Certified Network Defender (CND) program. The use of cgroups for managing system resources is also a standard practice in Linux-based environments12.
C
Explanation:
Cgroups, or control groups, are a feature of the Linux kernel that allows system administrators to allocate, limit, and monitor the resources used by sets of processes. Jeanne can use cgroups to manage and restrict access to CPU, memory, swap, block IO rates, and network resources for containers. This feature also enables the auditing of process groups, making it possible to track the resource usage and ensure that each container only uses its allocated share, preventing any single process from monopolizing system resources.
Reference: The functionality of cgroups is well-documented in the Linux kernel documentation and is a fundamental topic in system administration, which is relevant to the objectives of the EC-Council’s Certified Network Defender (CND) program. The use of cgroups for managing system resources is also a standard practice in Linux-based environments12.
Question #59
Which of the following wireless encryption provides enhanced password protection, secured IoT connections, and encompasses stronger encryption techniques?
- A . WEP
- B . WPA
- C . WPA2
- D . WPA3
Correct Answer: D
D
Explanation:
WPA3 is the latest wireless encryption standard that provides enhanced password protection, secured IoT connections, and encompasses stronger encryption techniques. It is designed to replace WPA2 and offers improved security features. WPA3 provides robust protections even when users choose weak passwords, and simplifies the process of securing access to Wi-Fi networks. It also offers individualized data encryption to protect data on public networks and a more secure handshake process that prevents offline dictionary attacks. For IoT devices, WPA3 supports Easy Connect, which simplifies the process of connecting devices without a display.
Reference: The information provided is based on the evolution of wireless security protocols and their features as outlined in various authoritative sources on network security12. For the most accurate and detailed reference, it is recommended to consult the official documents and study guides from the Certified Network Defender (CND) course by the EC-Council.
D
Explanation:
WPA3 is the latest wireless encryption standard that provides enhanced password protection, secured IoT connections, and encompasses stronger encryption techniques. It is designed to replace WPA2 and offers improved security features. WPA3 provides robust protections even when users choose weak passwords, and simplifies the process of securing access to Wi-Fi networks. It also offers individualized data encryption to protect data on public networks and a more secure handshake process that prevents offline dictionary attacks. For IoT devices, WPA3 supports Easy Connect, which simplifies the process of connecting devices without a display.
Reference: The information provided is based on the evolution of wireless security protocols and their features as outlined in various authoritative sources on network security12. For the most accurate and detailed reference, it is recommended to consult the official documents and study guides from the Certified Network Defender (CND) course by the EC-Council.
Question #60
A local bank wants to protect their card holder data. The bank should comply with the________standard to ensure the security of card holder data.
- A . HIPAA
- B . ISEC
- C . PCI DSS
- D . SOAX
Correct Answer: C
C
Explanation:
The Payment Card Industry Data Security Standard (PCI DSS) is the global data security standard adopted by the payment card brands for all entities that process, store, or transmit cardholder data. It consists of steps that mirror security best practices, including protecting stored cardholder data, maintaining a vulnerability management program, and implementing strong access control measures. For a local bank that wants to protect cardholder data, compliance with PCI DSS is essential to ensure the security of this sensitive information.
Reference: The PCI DSS Quick Reference Guide and other official documents from the PCI Security Standards Council provide comprehensive information on the requirements and best practices for securing cardholder data. These documents are used as references in the EC-Council’s Certified Network Defender (CND) course to educate network defenders on the importance of PCI DSS compliance12.
C
Explanation:
The Payment Card Industry Data Security Standard (PCI DSS) is the global data security standard adopted by the payment card brands for all entities that process, store, or transmit cardholder data. It consists of steps that mirror security best practices, including protecting stored cardholder data, maintaining a vulnerability management program, and implementing strong access control measures. For a local bank that wants to protect cardholder data, compliance with PCI DSS is essential to ensure the security of this sensitive information.
Reference: The PCI DSS Quick Reference Guide and other official documents from the PCI Security Standards Council provide comprehensive information on the requirements and best practices for securing cardholder data. These documents are used as references in the EC-Council’s Certified Network Defender (CND) course to educate network defenders on the importance of PCI DSS compliance12.