EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 41:

  The process of restarting a computer that is already turned on through the operating system is called?

  A. Warm boot
  B. Ice boot
  C. Hot Boot
  D. Cold boot
  A. Warm boot

• Question 42:

  Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where "x" represents the ___________________.

  A. Drive name
  B. Original file name's extension
  C. Sequential number
  D. Original file name
  A. Drive name

• Question 43:

  The newer Macintosh Operating System (MacOS X) is based on:

  A. Microsoft Windows
  B. OS/2
  C. BSD Unix
  D. Linux
  C. BSD Unix

• Question 44:

  Before you are called to testify as an expert, what must an attorney do first?

  A. engage in damage control
  B. prove that the tools you used to conduct your examination are perfect
  C. read your curriculum vitae to the jury
  D. qualify you as an expert witness
  D. qualify you as an expert witness

• Question 45:

  Your organization is implementing a new database system and has chosen MySQL due to its pluggable storage engine capability and ability to handle parallel write operations securely.

  You are responsible for selecting the best-suited storage engine for your company's needs, which predominantly involves transactional processing, crash recovery, and high data consistency requirements.

  What would be the most appropriatechoice?

  A. InnoDB storage engine, because it supports traditional ACID and crash recovery, and is used in online transaction processing systems
  B. Memory storage engine, because it offers in-memory tables and implements a hashing mechanism for faster data retrieval
  C. MyISAM storage engine, because it offers unlimited data storage and high-speed data loads
  D. BDB storage engine, because it provides an alternative to InnoDB and supports additional transaction methods such as COMMIT and ROLLBACK
  A. InnoDB storage engine, because it supports traditional ACID and crash recovery, and is used in online transaction processing systems

• Question 46:

  Andie, a network administrator, suspects unusual network services running on a windows system. Which of the following commands should he use to verify unusual network services started on a Windows system?

  A. net serv
  B. netmgr
  C. lusrmgr
  D. net start
  D. net start

• Question 47:

  Assume there is a file named myfile.txt in C: drive that contains hidden data streams. Which of the following commands would you issue to display the contents of a data stream?

  A. echo text > program:source_file
  B. C:\>ECHO text_message > myfile.txt:stream1
  C. C:\MORE < myfile.txt:stream1
  D. myfile.dat:stream1
  C. C:\MORE < myfile.txt:stream1

• Question 48:

  File deletion is a way of removing a file from a computer's file system. What happens when a file is deleted in windows7?

  A. The last letter of a file name is replaced by a hex byte code E5h
  B. The operating system marks the file's name in the MFT with a special character that indicates that the file has been deleted
  C. Corresponding clusters in FAT are marked as used
  D. The computer looks at the clusters occupied by that file and does not avails space to store a new file
  B. The operating system marks the file's name in the MFT with a special character that indicates that the file has been deleted

• Question 49:

  In forensics ____________ are used to view stored or deleted data from both files and disk sectors.

  A. Hex editors
  B. SIEM tools
  C. Hash algorithms
  D. Host interfaces
  A. Hex editors

• Question 50:

  Why is it still possible to recover files that have been emptied from the Recycle Bin on a Windows computer?

  A. The data is still present until the original location of the file is used
  B. The data is moved to the Restore directory and is kept there indefinitely
  C. The data will reside in the L2 cache on a Windows computer until it is manually deleted
  D. It is not possible to recover data that has been emptied from the Recycle Bin
  A. The data is still present until the original location of the file is used