EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 741:

  When should an MD5 hash check be performed when processing evidence?

  A. After the evidence examination has been completed
  B. On an hourly basis during the evidence examination
  C. Before and after evidence examination
  D. Before the evidence examination has been completed
  C. Before and after evidence examination

• Question 742:

  %3cscript%3ealert("XXXXXXXX")%3c/script%3e is a script obtained from a Cross-Site Scripting attack. What type of encoding has the attacker employed?

  A. Double encoding
  B. Hex encoding
  C. Unicode
  D. Base64
  B. Hex encoding

• Question 743:

  Which of the following Windows event logs record events related to device drives and hardware changes?

  A. Application log
  B. Security log
  C. Forwarded events log
  D. System log
  D. System log

• Question 744:

  Which of the following attacks allows attacker to acquire access to the communication channels between the victim and server to extract the information?

  A. Man-in-the-middle (MITM) attack
  B. Replay attack
  C. Rainbow attack
  D. Distributed network attack
  A. Man-in-the-middle (MITM) attack

• Question 745:

  What is the first step taken in an investigation for laboratory forensic staff members?

  A. Packaging the electronic evidence
  B. Securing and evaluating the electronic crime scene
  C. Conducting preliminary interviews
  D. Transporting the electronic evidence
  B. Securing and evaluating the electronic crime scene

• Question 746:

  Graphics Interchange Format (GIF) is a ____ RGB bitmap image format for images with up to 256 distinct colors per frame.

  A. 8-bit
  B. 32-bit
  C. 16-bit
  D. 24-bit
  A. 8-bit

• Question 747:

  Subscriber Identity Module (SIM) is a removable component that contains essential information about the subscriber. Its main function entails authenticating the user of the cell phone to the network to gain access to subscribed services. SIM contains a 20-digit long Integrated Circuit Card identification (ICCID) number, identify the issuer identifier Number from the ICCID below.

  

  A. 89
  B. 44
  C. 245252
  D. 001451548
  C. 245252

• Question 748:

  Which of the following passwords are sent over the wire (and wireless) network, or stored on some media as it is typed without any alteration?

  A. Clear text passwords
  B. Obfuscated passwords
  C. Hashed passwords
  D. Hex passwords
  A. Clear text passwords

• Question 749:

  Select the data that a virtual memory would store in a Windows-based system.

  A. Information or metadata of the files
  B. Documents and other files
  C. Application data
  D. Running processes
  D. Running processes

• Question 750:

  To check for POP3 traffic using Ethereal, what port should an investigator search by?

  A. 143
  B. 25
  C. 110
  D. 125
  C. 110