EC-COUNCIL 312-49 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49 Online Questions & Answers

• Question 441:

  What should you do when approached by a reporter about a case that you are working on or have worked on?

  A. Refer the reporter to the attorney that retained you
  B. Say, "no comment"
  C. Answer all the reporter's questions as completely as possible
  D. Answer only the questions that help your case
  A. Refer the reporter to the attorney that retained you

• Question 442:

  Jason has set up a honeypot environment by creating a DMZ that has no physical or logical access to his production network. In this honeypot, he has placed a server running Windows Active Directory. He has also placed a Web server in the DMZ that services a number of web pages that offer visitors a chance to download sensitive information by clicking on a button. A week later, Jason finds in his network logs how an intruder accessed the honeypot and downloaded sensitive information. Jason uses the logs to try and prosecute the intruder for stealing sensitive corporate information. Why will this not be viable?

  A. Entrapment
  B. Enticement
  C. Intruding into a honeypot is not illegal
  D. Intruding into a DMZ is not illegal
  A. Entrapment

• Question 443:

  What is the framework used for application development for iOS-based mobile devices?

  A. Cocoa Touch
  B. Dalvik
  C. Zygote
  D. AirPlay
  A. Cocoa Touch

• Question 444:

  Which of the following Android libraries are used to render 2D (SGL) or 3D (OpenGL/ES) graphics content to the screen?

  A. OpenGL/ES and SGL
  B. Surface Manager
  C. Media framework
  D. WebKit
  A. OpenGL/ES and SGL

• Question 445:

  Law enforcement officers are conducting a legal search for which a valid warrant was obtained.

  While conducting the search, officers observe an item of evidence for an unrelated crime that was not included in the warrant. The item was clearly visible to the officers and immediately identified as evidence. What is the term used to

  describe how this evidence is admissible?

  A. Plain view doctrine
  B. Corpus delicti
  C. Locard Exchange Principle
  D. Ex Parte Order
  A. Plain view doctrine

• Question 446:

  Which among the following is an act passed by the U.S. Congress in 2002 to protect investors from the possibility of fraudulent accounting activities by corporations?

  A. HIPAA
  B. GLBA
  C. SOX
  D. FISMA
  C. SOX

• Question 447:

  Meyer Electronics Systems just recently had a number of laptops stolen out of their office. On these laptops contained sensitive corporate information regarding patents and company strategies. A month after the laptops were stolen, a competing company was found to have just developed products that almost exactly duplicated products that Meyer produces. What could have prevented this information from being stolen from the laptops?

  A. EFS Encryption
  B. DFS Encryption
  C. IPS Encryption
  D. SDW Encryption
  A. EFS Encryption

• Question 448:

  Adam, a forensic analyst, is preparing VMs for analyzing a malware. Which of the following is NOT a best practice?

  A. Isolating the host device
  B. Installing malware analysis tools
  C. Using network simulation tools
  D. Enabling shared folders
  D. Enabling shared folders

• Question 449:

  What type of attack sends SYN requests to a target system with spoofed IP addresses?

  A. SYN flood
  B. Ping of death
  C. Cross site scripting
  D. Land
  A. SYN flood

• Question 450:

  Under which Federal Statutes does FBI investigate for computer crimes involving e-mail scams and mail fraud?

  A. 18 U.S.C. 1029 Possession of Access Devices
  B. 18 U.S.C. 1030 Fraud and related activity in connection with computers
  C. 18 U.S.C. 1343 Fraud by wire, radio or television
  D. 18 U.S.C. 1361 Injury to Government Property
  E. 18 U.S.C. 1362 Government communication systems
  F. 18 U.S.C. 1831 Economic Espionage Act
  G. 18 U.S.C. 1832 Trade Secrets Act
  B. 18 U.S.C. 1030 Fraud and related activity in connection with computers