EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 431:

  Hard disk data addressing is a method of allotting addresses to each ___________of data on a hard disk

  A. Physical block
  B. Logical block
  C. Operating system block
  D. Hard disk block
  A. Physical block

• Question 432:

  A digital forensics investigator performs a browser history analysis after a suspected breach. The investigator deals with three web browsers: Mozilla Firefox, Coogle Chrome, and Microsoft Edge. The suspect was using Windows. The investigator must locate the cache, cookies, and history for all three browsers.

  What are the correct locations?

  A. Firefox: Cache - C:\UsersWAppData\Local\Mozilla\Firefox\Profiles\XXXXXXXX.default\cache2; Chrome: History - C:\Users\{user)\AppData\Local\Google\Crrome\User Data\Default; Edge: Cookies - C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_xxxxxxxxxx\AC\MicrosoftEdge\Cookies
  B. Firefox: Cookies - C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\XXXXXXXX.default\cookies.sqlite; Chrome: Cache - C:\Users\{user}\AppData\Local\Coogle\Chrome\User Data\Default\Cache; Edge: History - C:\Users\Admin\AppData\Local\Microsoft\Windows\History
  C. Firefox: Cache - C:\UsersWAppData\Roaming\Mozilla\Firefox\Profiles\XXXXXXXX.default\places.sqlite; Chrome: Cookies - C:\Users\{user}\AppData\Local\Google\Chrome\User Data\Default; Edge: History - C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache
  D. Firefox: History - C:\Users\\AppData\Local\Mozilla\Firefox\Profiles\XXXXXXXX.default\cookies.sqlite; Chrome: Cache - C:\Users\{user}\AppData\Local\Coogle\Chrome\User Data\Default\Cache; Edge: Cookies - C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_xxxxxxxxxx\AC\MicrosoftEdge\Cookies
  B. Firefox: Cookies - C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\XXXXXXXX.default\cookies.sqlite; Chrome: Cache - C:\Users\{user}\AppData\Local\Coogle\Chrome\User Data\Default\Cache; Edge: History - C:\Users\Admin\AppData\Local\Microsoft\Windows\History

• Question 433:

  What does the 56. 58.152. 114(445) denote in a Cisco router log?

  Jun 19 23:25:46. 125 EST: %SEC-4-IPACCESSLOGP: list internet-inbound denied udp 67. 124. 115. 35(8084) -> 56. 58.152. 114(445), 1 packet

  A. Source IP address
  B. None of the above
  C. Login IP address
  D. Destination IP address
  D. Destination IP address

• Question 434:

  Which of the following statements is incorrect when preserving digital evidence?

  A. Verify if the monitor is in on, off, or in sleep mode
  B. Turn on the computer and extract Windows event viewer log files
  C. Remove the plug from the power router or modem
  D. Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals
  B. Turn on the computer and extract Windows event viewer log files

• Question 435:

  Smith, an employee of a reputed forensic Investigation firm, has been hired by a private organization to investigate a laptop that is suspected to be involved in hacking of organization DC server. Smith wants to find all the values typed into the Run box in the Start menu.

  Which of the following registry key Smith will check to find the above information?

  A. UserAssist Key
  B. MountedDevices key
  C. RunMRU key
  D. TypedURLs key
  C. RunMRU key

• Question 436:

  Area density refers to:

  A. the amount of data per disk
  B. the amount of data per partition
  C. the amount of data per square inch
  D. the amount of data per platter
  A. the amount of data per disk
  C. the amount of data per square inch

• Question 437:

  Which of the following techniques delete the files permanently?

  A. Steganography
  B. Artifact Wiping
  C. Data Hiding
  D. Trail obfuscation
  B. Artifact Wiping

• Question 438:

  A law enforcement officer may only search for and seize criminal evidence with _______________________, which are facts or circumstances that would lead a reasonable person to believe a crime has been committed or is about to be committed, evidence of the specific crime exists and the evidence of the specific crime exists at the place to be searched.

  A. Mere Suspicion
  B. A preponderance of the evidence
  C. Probable cause
  D. Beyond a reasonable doubt
  C. Probable cause

• Question 439:

  Which of the following Steganography techniques allows you to encode information that ensures creation of cover for secret communication?

  A. Substitution techniques
  B. Transform domain techniques
  C. Cover generation techniques
  D. Spread spectrum techniques
  C. Cover generation techniques

• Question 440:

  What is considered a grant of a property right given to an individual who discovers or invents a new machine, process, useful composition of matter or manufacture?

  A. Copyright
  B. Design patent
  C. Trademark
  D. Utility patent
  D. Utility patent