EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 441:

  Law enforcement officers are conducting a legal search for which a valid warrant was obtained. While conducting the search, officers observe an item of evidence for an unrelated crime that was not included in the warrant. The item was clearly visible to the officers and immediately identified as evidence.

  What is the term used to describe how this evidence is admissible?

  A. Plain view doctrine
  B. Corpus delicti
  C. Locard Exchange Principle
  D. Ex Parte Order
  A. Plain view doctrine

• Question 442:

  Billy, a computer forensics expert, has recovered a large number of DBX files during the forensic investigation of a laptop. Which of the following email clients can he use to analyze the DBX files?

  A. Microsoft Outlook
  B. Eudora
  C. Mozilla Thunderbird
  D. Microsoft Outlook Express
  D. Microsoft Outlook Express

• Question 443:

  Steven has been given the task of designing a computer forensics lab for the company he works for. He has found documentation on all aspects of how to design a lab except the number of exits needed. How many exits should Steven include in his design for the computer forensics lab?

  A. Three
  B. One
  C. Two
  D. Four
  B. One

• Question 444:

  If you are concerned about a high level of compression but not concerned about any possible data loss, what type of compression would you use?

  A. Lossful compression
  B. Lossy compression
  C. Lossless compression
  D. Time-loss compression
  B. Lossy compression

• Question 445:

  At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

  A. True
  B. False
  A. True

• Question 446:

  What is a first sector ("sector zero") of a hard disk?

  A. Master boot record
  B. System boot record
  C. Secondary boot record
  D. Hard disk boot record
  A. Master boot record

• Question 447:

  Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to allow only FTP-PUT. Which firewall would be most appropriate for Harold’s needs?

  A. Packet filtering firewall
  B. Circuit-level proxy firewall
  C. Application-level proxy firewall
  D. Data link layer firewall
  C. Application-level proxy firewall

• Question 448:

  Bob works as information security analyst for a big finance company. One day, the anomaly-based intrusion detection system alerted that a volumetric DDOS targeting the main IP of the main web server was occurring. What kind of attack is it?

  A. IDS attack
  B. APT
  C. Web application attack
  D. Network attack
  D. Network attack

• Question 449:

  As part of extracting the system data, Jenifer has used the netstat command. What does this tool reveal?

  A. Status of users connected to the internet
  B. Net status of computer usage
  C. Information about network connections
  D. Status of network hardware
  C. Information about network connections

• Question 450:

  Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

  A. Parameter/form tampering
  B. Unvalidated input
  C. Directory traversal
  D. Security misconfiguration
  C. Directory traversal