EC-COUNCIL 312-49 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49 Online Questions & Answers

• Question 101:

  Which of the following statements is incorrect when preserving digital evidence?

  A. Verify if the monitor is in on, off, or in sleep mode
  B. Turn on the computer and extract Windows event viewer log files
  C. Remove the plug from the power router or modem
  D. Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals
  B. Turn on the computer and extract Windows event viewer log files

• Question 102:

  Davidson Trucking is a small transportation company that has three local offices in Detroit Michigan. Ten female employees that work for the company have gone to an attorney reporting that male employees repeatedly harassed them and that management did nothing to stop the problem. Davidson has employee policies that outline all company guidelines, including awareness on harassment and how it will not be tolerated. When the case is brought to court, whom should the prosecuting attorney call upon for not upholding company policy?

  A. IT personnel
  B. Employees themselves
  C. Supervisors
  D. Administrative assistant in charge of writing policies
  C. Supervisors

• Question 103:

  You are employed directly by an attorney to help investigate an alleged sexual harassment case at a large pharmaceutical manufacture. While at the corporate office of the company, the CEO demands to know the status of the investigation. What prevents you from discussing the case with the CEO?

  A. the attorney-work-product rule
  B. Good manners
  C. Trade secrets
  D. ISO 17799
  A. the attorney-work-product rule

• Question 104:

  What encryption technology is used on Blackberry devices Password Keeper?

  A. 3DES
  B. AES
  C. Blowfish
  D. RC5
  B. AES

• Question 105:

  When conducting computer forensic analysis, you must guard against ______________ So that you remain focused on the primary job and insure that the level of work does not increase beyond what was originally expected.

  A. Hard Drive Failure
  B. Scope Creep
  C. Unauthorized expenses
  D. Overzealous marketing
  B. Scope Creep

• Question 106:

  When examining a file with a Hex Editor, what space does the file header occupy?

  A. the last several bytes of the file
  B. the first several bytes of the file
  C. none, file headers are contained in the FAT
  D. one byte at the beginning of the file
  D. one byte at the beginning of the file

• Question 107:

  Which of the following is a tool to reset Windows admin password?

  A. R-Studio
  B. Windows Password Recovery Bootdisk
  C. Windows Data Recovery Software
  D. TestDisk for Windows
  B. Windows Password Recovery Bootdisk

• Question 108:

  This organization maintains a database of hash signatures for known software.

  A. International Standards Organization
  B. Institute of Electrical and Electronics Engineers
  C. National Software Reference Library
  D. American National standards Institute
  C. National Software Reference Library

• Question 109:

  The newer Macintosh Operating System is based on:

  A. OS/2
  B. BSD Unix
  C. Linux
  D. Microsoft Windows
  B. BSD Unix

• Question 110:

  Who is responsible for the following tasks?

  Secure the scene and ensure that is maintained in a secure state until the Forensic Team advises Make notes about the scene that will eventually be handed over to the Forensic Team

  A. Non-forensics staff
  B. Lawyers
  C. System administrators
  D. Local managers or other non-forensic staff
  A. Non-forensics staff