EC-COUNCIL EC-COUNCIL Certifications 312-49 Questions & Answers

• Question 171:

  Which among the following files provides email header information in the Microsoft Exchange server?

  A. gwcheck.db

  B. PRIV.EDB

  C. PUB.EDB

  D. PRIV.STM

  Correct Answer: B

• Question 172:

  Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

  A. Parameter/form tampering

  B. Unvalidated input

  C. Directory traversal

  D. Security misconfiguration

  Correct Answer: C

• Question 173:

  Jason discovered a file named $RIYG6VR.doc in the C:\$Recycle.Bin\\ while analyzing a

  hard disk image for the deleted data. What inferences can he make from the file name?

  A. It is a doc file deleted in seventh sequential order

  B. RIYG6VR.doc is the name of the doc file deleted from the system

  C. It is file deleted from R drive

  D. It is a deleted doc file

  Correct Answer: D

• Question 174:

  Which file is a sequence of bytes organized into blocks understandable by the system's linker?

  A. executable file

  B. source file

  C. Object file

  D. None of these

  Correct Answer: C

• Question 175:

  Smith, a forensic examiner, was analyzing a hard disk image to find and acquire deleted sensitive files. He stumbled upon a $Recycle.Bin folder in the root directory of the disk. Identify the operating system in use.

  A. Windows 98

  B. Linux

  C. Windows 8.1

  D. Windows XP

  Correct Answer: D

• Question 176:

  Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

  A. Xplico

  B. Colasoft's Capsa

  C. FileSalvage

  D. DriveSpy

  Correct Answer: C

• Question 177:

  What is the default IIS log location?

  A. SystemDrive\inetpub\LogFiles

  B. %SystemDrive%\inetpub\logs\LogFiles

  C. %SystemDrive\logs\LogFiles

  D. SystemDrive\logs\LogFiles

  Correct Answer: B

• Question 178:

  Which of the following is an iOS Jailbreaking tool?

  A. Kingo Android ROOT

  B. Towelroot

  C. One Click Root

  D. Redsn0w

  Correct Answer: D

• Question 179:

  Which of the following Registry components include offsets to other cells as well as the LastWrite time for the key?

  A. Value list cell

  B. Value cell

  C. Key cell

  D. Security descriptor cell

  Correct Answer: C

• Question 180:

  What does the part of the log, "% SEC-6-IPACCESSLOGP", extracted from a Cisco router represent?

  A. The system was not able to process the packet because there was not enough room for all of the desired IP header options

  B. Immediate action required messages

  C. Some packet-matching logs were missed because the access list log messages were rate limited, or no access list log buffers were available

  D. A packet matching the log criteria for the given access list has been detected (TCP or UDP)

  Correct Answer: D