EC-COUNCIL EC-COUNCIL Certifications 312-49 Questions & Answers

• Question 221:

  Which of the following tool captures and allows you to interactively browse the traffic on a network?

  A. Security Task Manager

  B. Wireshark

  C. ThumbsDisplay

  D. RegScanner

  Correct Answer: B

• Question 222:

  Which of the following standard represents a legal precedent sent in 1993 by the Supreme Court of the United States regarding the admissibility of expert witnesses' testimony during federal legal proceedings?

  A. IOCE

  B. SWGDE and SWGIT

  C. Frye

  D. Daubert

  Correct Answer: D

• Question 223:

  Which US law does the interstate or international transportation and receiving of child pornography fall under?

  A. - 8. U.S.C. 1466A

  B. - 8. U.S.C 252

  C. - 8. U.S.C 146A

  D. - 8. U.S.C 2252

  Correct Answer: D

• Question 224:

  Which network attack is described by the following statement?

  "At least five Russian major banks came under a continuous hacker attack, although online client services

  were not disrupted. The attack came from a wide-scale botnet involving at least 24,000 computers, located

  in 30 countries."

  A. DDoS

  B. Sniffer Attack

  C. Buffer Overflow

  D. Man-in-the-Middle Attack

  Correct Answer: A

• Question 225:

  Which of the following is a list of recently used programs or opened files?

  A. Most Recently Used (MRU)

  B. Recently Used Programs (RUP)

  C. Master File Table (MFT)

  D. GUID Partition Table (GPT)

  Correct Answer: A

• Question 226:

  Which of the following tasks DOES NOT come under the investigation phase of a cybercrime forensics investigation case?

  A. Data collection

  B. Secure the evidence

  C. First response

  D. Data analysis

  Correct Answer: C

• Question 227:

  Which of the following file contains the traces of the applications installed, run, or uninstalled from a system?

  A. Shortcut Files

  B. Virtual files

  C. Prefetch Files

  D. Image Files

  Correct Answer: A

• Question 228:

  Which password cracking technique uses details such as length of password, character sets used to construct the password, etc.?

  A. Dictionary attack

  B. Brute force attack

  C. Rule-based attack

  D. Man in the middle attack

  Correct Answer: A

• Question 229:

  What type of attack sends spoofed UDP packets (instead of ping packets) with a fake source address to the IP broadcast address of a large network?

  A. Fraggle

  B. Smurf scan

  C. SYN flood

  D. Teardrop

  Correct Answer: A

• Question 230:

  When reviewing web logs, you see an entry for resource not found in the HTTP status code field. What is the actual error code that you would see in the log for resource not found?

  A. 202

  B. 404

  C. 606

  D. 999

  Correct Answer: B