EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 271:

  In your role as a Computer Hacking Forensics Investigator, you're delving into a global cybercrime incident concerning unauthorized entry into a computer system. Your investigative findings indicate that a system operator from Italy orchestrated the crime. This individual took advantage of their role to improperly access the computer system of a business based in Germany.

  Both countries have laws related to data espionage and unauthorized system access. The accused could be held liable under which laws?

  A. Section 303b (Computer Sabotage) of the German Penal Code and The Computer Misuse Act of Singapore
  B. Section 303a (Alteration of Data) of the German Penal Code and Section 342. 1 of the Canadian Criminal Code
  C. Article 550(b) of the Criminal Code - Computer Hacking of Belgium and Unauthorized Modification or Alteration of the information system of Brazil's Criminal Code
  D. Section 202a (Data Espionage) of the German Penal Code and Article 615 of the Italian Penal Code
  D. Section 202a (Data Espionage) of the German Penal Code and Article 615 of the Italian Penal Code

• Question 272:

  Diskcopy is:

  A. a utility by AccessData
  B. a standard MS-DOS command
  C. Digital Intelligence utility
  D. dd copying tool
  B. a standard MS-DOS command

• Question 273:

  In Windows 7 system files, which file reads the Boot.ini file and loads Ntoskrnl.exe. Bootvid.dll. Hal.dll, and boot-start device drivers?

  A. Ntldr
  B. Gdi32. dll
  C. Kernel32. dll
  D. Boot.in
  A. Ntldr

• Question 274:

  What malware analysis operation can the investigator perform using the jv16 tool?

  A. Files and Folder Monitor
  B. Installation Monitor
  C. Network Traffic Monitoring/Analysis
  D. Registry Analysis/Monitoring
  D. Registry Analysis/Monitoring

• Question 275:

  Which of the following is the certifying body of forensics labs that investigate criminal cases by analyzing evidence?

  A. The American Society of Crime Laboratory Directors (ASCLD)
  B. International Society of Forensics Laboratory (ISFL)
  C. The American Forensics Laboratory Society (AFLS)
  D. The American Forensics Laboratory for Computer Forensics (AFLCF)
  A. The American Society of Crime Laboratory Directors (ASCLD)

• Question 276:

  Robert needs to copy an OS disk snapshot of a compromised VM to a storage account in different region for further investigation. Which of the following should he use in this scenario?

  A. Azure Active Directory
  B. Azure Portal
  C. Azure CLI
  D. Azure Monitor
  C. Azure CLI

• Question 277:

  Which among the following laws emphasizes the need for each Federal agency to develop, document, and implement an organization-wide program to provide information security for the information systems that support its operations and assets?

  A. FISMA
  B. HIPAA
  C. GLBA
  D. SOX
  A. FISMA

• Question 278:

  How often must a company keep log files for them to be admissible in a court of law?

  A. All log files are admissible in court no matter their frequency
  B. Weekly
  C. Monthly
  D. Continuously
  D. Continuously

• Question 279:

  A forensic investigator is analyzing a Windows system for possible malicious activity. The investigator is specifically interested in the recent actions of a suspect on the system, including any deleted directories or files, mounted drives, and actions taken.

  Which of the following approaches and tools would be the most effective for obtaining this information?

  A. Analyzing LNK files using ShellBags Explorer
  B. Investigating Jump Usts using ShellBagsView
  C. Parsing the BagMRU and Bags registry keys using SBag
  D. Examining the MRUListEx key and NodeSlot value in Windows Explorer
  A. Analyzing LNK files using ShellBags Explorer

• Question 280:

  Which among the following search warrants allows the first responder to get the victim's computer information such as service records, billing records, and subscriber information from the service provider?

  A. Citizen Informant Search Warrant
  B. Electronic Storage Device Search Warrant
  C. John Doe Search Warrant
  D. Service Provider Search Warrant
  D. Service Provider Search Warrant