EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 451:

  Which program is the bootloader when Windows XP starts up?

  A. KERNEL.EXE
  B. NTLDR
  C. LOADER
  D. LILO
  B. NTLDR

• Question 452:

  Which of the following tool is used to locate IP addresses?

  A. SmartWhois
  B. Deep Log Analyzer
  C. Towelroot
  D. XRY LOGICAL
  A. SmartWhois

• Question 453:

  Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

  A. Xplico
  B. Colasoft's Capsa
  C. FileSalvage
  D. DriveSpy
  C. FileSalvage

• Question 454:

  During an investigation, the first responders stored mobile devices in specific containers to provide network isolation. All the following are examples of such pieces of equipment, except for:

  A. Faraday bag
  B. VirtualBox
  C. Wireless StrongHold bag
  D. RF shield box
  B. VirtualBox

• Question 455:

  You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web

  security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities:

  When you type this and click on search, you receive a pop-up window that says: "This is a test."

  What is the result of this test?

  A. Your website is vulnerable to SQL injection
  B. Your website is vulnerable to CSS
  C. Your website is vulnerable to web bugs
  D. Your website is not vulnerable
  B. Your website is vulnerable to CSS

• Question 456:

  What hashing method is used to password protect Blackberry devices?

  A. AES
  B. RC5
  C. MD5
  D. SHA-1
  D. SHA-1

• Question 457:

  When searching through file headers for picture file formats, what should be searched to find a JPEG file in hexadecimal format?

  A. FF D8 FF E0 00 10
  B. FF FF FF FF FF FF
  C. FF 00 FF 00 FF 00
  D. EF 00 EF 00 EF 00
  A. FF D8 FF E0 00 10

• Question 458:

  Which of the following does Microsoft Exchange E-mail Server use for collaboration of various e-mail applications?

  A. Simple Mail Transfer Protocol (SMTP)
  B. Messaging Application Programming Interface (MAPI)
  C. Internet Message Access Protocol (IMAP)
  D. Post Office Protocol version 3 (POP3)
  B. Messaging Application Programming Interface (MAPI)

• Question 459:

  The system administrator of a large financial corporation detects an unauthorized attempt to access the company's database.

  In order to supportthe investigation and maintain the chain of custody, which of the following actions should be taken immediately by the administrator?

  A. Independently analyze the compromised systems for evidence of a security breach without notifying the incident/duty manager
  B. Isolate the compromised computing systems from further use or tampering, document every detail relevant to the incident, and transfer copies of system logs onto clean media
  C. Power down all computing systems to halt the unauthorized access attempt
  D. Begin attempting to trace the source of the attack and retaliate to prevent future incidents
  B. Isolate the compromised computing systems from further use or tampering, document every detail relevant to the incident, and transfer copies of system logs onto clean media

• Question 460:

  Before accessing digital evidence from victims, witnesses, or suspects, on their electronic devices, what should the investigator do first to respect legal privacy requirements?

  A. Protect the device against external communication
  B. Remove the battery or turn-off the device
  C. Notify the fact to the local authority or employer
  D. Obtain a formal written consent to search
  D. Obtain a formal written consent to search