EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 401:

  Which Is a Linux journaling file system?

  A. Ext3
  B. HFS
  C. FAT
  D. BFS
  A. Ext3

• Question 402:

  Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.

  A. True
  B. False
  A. True

• Question 403:

  Which of the following web browser uses the Extensible Storage Engine (ESE) database format to store browsing records, including history, cache, and cookies?

  A. Safari
  B. Mozilla Firefox
  C. Microsoft Edge
  D. Google Chrome
  C. Microsoft Edge

• Question 404:

  First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?

  A. System administrators
  B. Local managers or other non-forensic staff
  C. Forensic laboratory staff
  D. Lawyers
  C. Forensic laboratory staff

• Question 405:

  A mid-sized enterprise recently suffered a security breach in their AWS-hosted application. The responsibility for identifying the source and cause of this breach falls under the purview of the internal security team. Based on the AWS shared responsibility model, which of the following would be the appropriate action for the team?

  A. Investigate AWS's underlying infrastructure including hardware and databases for security flaws
  B. Audit the application security and IAM configurations within the enterprise's AWS services
  C. Conduct a full review of AWS's global infrastructure including regions, availability zones, and edge locations
  D. Check for security vulnerabilities in AWS container services' OS and application platform
  B. Audit the application security and IAM configurations within the enterprise's AWS services

• Question 406:

  A major corporation has faced multiple SQL injection attacks on its web application. They have a ModSecurity WAF in place with default settings. However, attacks are still getting through. The forensic investigator recommends a measure to

  enhance security.

  What is the most likely recommendation?

  A. Customize ModSecurity rules according to their environment
  B. Replace ModSecurity with a next-generation rewall (NGFW)
  C. Install an additional conventional rewall for protection
  D. Implement real-time alerting and extensive logging capabilities
  A. Customize ModSecurity rules according to their environment

• Question 407:

  Which federal computer crime law specifically refers to fraud and related activity in connection with access devices like routers?

  A. 18 U.S.C. 1029
  B. 18 U.S.C. 1362
  C. 18 U.S.C. 2511
  D. 18 U.S.C. 2703
  A. 18 U.S.C. 1029

• Question 408:

  Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

  A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
  B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProfileList
  C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegList
  D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Regedit
  A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

• Question 409:

  Identify the file system that uses $BitMap file to keep track of all used and unused clusters on a volume.

  A. NTFS
  B. FAT
  C. EXT
  D. FAT32
  A. NTFS

• Question 410:

  An investigator has found certain details after analysis of a mobile device. What can reveal the manufacturer information?

  A. Equipment Identity Register (EIR)
  B. Electronic Serial Number (ESN)
  C. International mobile subscriber identity (IMSI)
  D. Integrated circuit card identifier (ICCID)
  B. Electronic Serial Number (ESN)