EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 471:

  The investigator wants to examine changes made to the system's registry by the suspect program. Which of the following tool can help the investigator?

  A. TRIPWIRE
  B. RAM Capturer
  C. Regshot
  D. What's Running
  C. Regshot

• Question 472:

  A digital forensics lab is working on a high-profile cybercrime case. The director has decided to include a new team member in the investigation team for his specialized expertise. Which of the following considerations should be considered in the context of maintaining the lab's integrity,based on the given information?

  A. The new team member should be directly handed the original hardware containing the evidence
  B. The new team member should be allowed to bring his own hardware and software tools to the lab for investigation
  C. The new team member should be given immediate access to the lab without maintaining a visitor's log register
  D. The new team member should be provided with an electronic sign-in pass, and his entry should be logged in the register
  D. The new team member should be provided with an electronic sign-in pass, and his entry should be logged in the register

• Question 473:

  You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe.

  What are you trying to accomplish here?

  A. Enumerate domain user accounts and built-in groups
  B. Enumerate MX and A records from DNS
  C. Establish a remote connection to the Domain Controller
  D. Poison the DNS records with false records
  A. Enumerate domain user accounts and built-in groups

• Question 474:

  A system with a simple logging mechanism has not been given much attention during development, this system is now being targeted by attackers, if the attacker wants to perform a new line injection attack, what will he/she inject into the log file?

  A. Plaintext
  B. Single pipe character
  C. Multiple pipe characters
  D. HTML tags
  A. Plaintext

• Question 475:

  A forensic investigator is analyzing a smartphone to gather crucial evidence. To fully understand the device's working and data flow, he needs to comprehend the various mobile architectural layers. While examining the device's frequency conversion, the investigator focuses on which of the following hardware components?

  A. Baseband part
  B. DAC/ADC
  C. Antenna
  D. RF part
  D. RF part

• Question 476:

  Tasklist command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer. Which of the following tasklist commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?

  A. tasklist /p
  B. tasklist /v
  C. tasklist /u
  D. tasklist /s
  B. tasklist /v

• Question 477:

  When examining a file with a Hex Editor, what space does the file header occupy?

  A. The first several bytes of the file
  B. One byte at the beginning of the file
  C. None, file headers are contained in the FAT
  D. The last several bytes of the file
  A. The first several bytes of the file

• Question 478:

  Which of the following would you consider an aspect of organizational security, especially focusing on IT security?

  A. Biometric information security
  B. Security from frauds
  C. Application security
  D. Information copyright security
  C. Application security

• Question 479:

  As a Certified Ethical Hacker, you were contracted by a private firm to conduct an external security assessment through penetration testing. What document describes the specifics of the testing, the associated violations, and essentially protects both the organization's interest and your liabilities as a tester?

  A. Project Scope
  B. Rules of Engagement
  C. Non-Disclosure Agreement
  D. Service Level Agreement
  B. Rules of Engagement

• Question 480:

  What do you call the process of studying the changes that have taken place across a system or a machine after a series of actions or incidents?

  A. Windows Services Monitoring
  B. System Baselining
  C. Start-up Programs Monitoring
  D. Host integrity Monitoring
  D. Host integrity Monitoring