EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 611:

  First responder is a person who arrives first at the crime scene and accesses the victim's computer system after the incident. He or She is responsible for protecting, integrating, and preserving the evidence obtained from the crime scene.

  Which of the following is not a role of first responder?

  A. Identify and analyze the crime scene

  B. Protect and secure the crime scene

  C. Package and transport the electronic evidence to forensics lab

  D. Prosecute the suspect in court of law

  Correct Answer: D

• Question 612:

  An expert witness is a witness, who by virtue of education, profession, or experience, is believed to have special knowledge of his/her subject beyond that of the average person, sufficient that others legally depend upon his/her opinion.

  A. True

  B. False

  Correct Answer: A

• Question 613:

  Data Acquisition is the process of imaging or otherwise obtaining information from a digital device and its peripheral equipment and media

  A. True

  B. False

  Correct Answer: A

• Question 614:

  A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

  A. Take permission from all employees of the organization for investigation

  B. Harden organization network security

  C. Create an image backup of the original evidence without tampering with potential evidence

  D. Keep the evidence a highly confidential and hide the evidence from law enforcement agencies

  Correct Answer: C

• Question 615:

  Who is responsible for the following tasks?

  Secure the scene and ensure that it is maintained In a secure state until the Forensic Team advises Make notes about the scene that will eventually be handed over to the Forensic Team

  A. Non-Laboratory Staff

  B. System administrators

  C. Local managers or other non-forensic staff

  D. Lawyers

  Correct Answer: A

• Question 616:

  What is static executable file analysis?

  A. It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances

  B. It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances

  C. It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment

  D. It is a process that consists of collecting information about and from an executable file by launching an executable file in a controlled and monitored environment

  Correct Answer: A

• Question 617:

  Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.

  A. True

  B. False

  Correct Answer: A

• Question 618:

  Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

  A. Files or network shares

  B. Running application

  C. Application logs

  D. System logs

  Correct Answer: A

• Question 619:

  How do you define forensic computing?

  A. It is the science of capturing, processing, and investigating data security incidents and making it acceptable to a court of law.

  B. It is a methodology of guidelines that deals with the process of cyber investigation

  C. It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking

  D. It is the administrative and legal proceeding in the process of forensic investigation

  Correct Answer: A

• Question 620:

  Determine the message length from following hex viewer record:

  

  A. 6E2F

  B. 13

  C. 27

  D. 810D

  Correct Answer: D