EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 131:

  Which of the following reports are delivered under oath to a board of directors/managers/panel of the jury?

  A. Written Formal Report
  B. Verbal Formal Report
  C. Verbal Informal Report
  D. Written Informal Report
  B. Verbal Formal Report

• Question 132:

  When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to _________

  A. Automate collection from image files
  B. Avoiding copying data from the boot partition
  C. Acquire data from the host-protected area on a disk
  D. Prevent contamination to the evidence drive
  D. Prevent contamination to the evidence drive

• Question 133:

  Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

  A. Filtered
  B. Closed
  C. Open
  D. Stealth
  C. Open

• Question 134:

  Tracks numbering on a hard disk begins at 0 from the outer edge and moves towards the center, typically reaching a value of ___________.

  A. 1023
  B. 1020
  C. 1024
  D. 2023
  A. 1023

• Question 135:

  In Windows Security Event Log, what does an event id of 530 imply?

  A. Logon Failure ?Unknown user name or bad password
  B. Logon Failure ?User not allowed to logon at this computer
  C. Logon Failure ?Account logon time restriction violation
  D. Logon Failure ?Account currently disabled
  C. Logon Failure ?Account logon time restriction violation

• Question 136:

  What encryption technology is used on Blackberry devices Password Keeper?

  A. 3DES
  B. AES
  C. Blowfish
  D. RC5
  B. AES

• Question 137:

  International Mobile Equipment Identifier (IMEI) is a 15-dlgit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:

  A. Type Allocation Code (TAC)
  B. Device Origin Code (DOC)
  C. Manufacturer identification Code (MIC)
  D. Integrated Circuit Code (ICC)
  A. Type Allocation Code (TAC)

• Question 138:

  What value of the "Boot Record Signature" is used to indicate that the boot-loader exists?

  A. AA55
  B. 00AA
  C. AA00
  D. A100
  A. AA55

• Question 139:

  Which of the following registry hive gives the configuration information about which application was used to open various files on the system?

  A. HKEY_CLASSES_ROOT
  B. HKEY_CURRENT_CONFIG
  C. HKEY_LOCAL_MACHINE
  D. HKEY_USERS
  A. HKEY_CLASSES_ROOT

• Question 140:

  When an investigator contacts by telephone the domain administrator or controller listed in a WHOIS lookup to request that all emails sent and received for a user account be preserved, what U.S.C. statute authorizes this phone call and obligates the ISP to preserve email records?

  A. Title 18, Section 1030
  B. Title 18, Section 2703(d)
  C. Title 18, Section Chapter 90
  D. Title 18, Section 2703(f)
  D. Title 18, Section 2703(f)