EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 821:

  As part of an ongoing cyber investigation in a rapidly expanding organization, the Computer Hacking Forensic Investigator (CHFI) has to choose the most effective Security Information and Event Management (SIEM) tool for the company's

  ever-growing IT infrastructure. This SIEM tool must efficiently collect, index, and alert real-time machine data and offer functionalities for rapid detection and response to both internal and externalthreats.

  Additionally, the tool should be capable of leveraging Al-powered machine learning for actionable insights.

  Based on these requirements,the investigator should consider the following:

  A. Splunk Enterprise Security (ES) only
  B. Both Splunk ES and IBM QRadar, but IBM QRadar has an edge due to prebuilt reports and templates
  C. Both Splunk ES and IBM QRadar, but Splunk ES has an edge due to Al-powered machine learning capabilities
  D. IBM QRadar only
  C. Both Splunk ES and IBM QRadar, but Splunk ES has an edge due to Al-powered machine learning capabilities

• Question 822:

  Which program uses different techniques to conceal a malware's code, thereby making it difficult for security mechanisms to detect or remove it?

  A. Dropper
  B. Packer
  C. Injector
  D. Obfuscator
  D. Obfuscator

• Question 823:

  Jason discovered a file named $RIYG6VR.doc in the C:\$Recycle.Bin\\ while analyzing a hard disk image for the deleted data. What inferences can he make from the file name?

  A. It is a doc file deleted in seventh sequential order
  B. RIYG6VR.doc is the name of the doc file deleted from the system
  C. It is file deleted from R drive
  D. It is a deleted doc file
  D. It is a deleted doc file

• Question 824:

  Which of the following log injection attacks uses white space padding to create unusual log entries?

  A. Word wrap abuse attack
  B. HTML injection attack
  C. Terminal injection attack
  D. Timestamp injection attack
  A. Word wrap abuse attack

• Question 825:

  Amelia has got an email from a well-reputed company stating in the subject line that she has won a prize money, whereas the email body says that she has to pay a certain amount for being eligible for the contest. Which of the following acts does the email breach?

  A. CAN-SPAM Act
  B. HIPAA
  C. GLBA
  D. SOX
  A. CAN-SPAM Act

• Question 826:

  Which of the following does not describe the type of data density on a hard disk?

  A. Volume density
  B. Track density
  C. Linear or recording density
  D. Areal density
  A. Volume density

• Question 827:

  JPEG is a commonly used method of compressing photographic Images. It uses a compression algorithm to minimize the size of the natural image, without affecting the quality of the image. The JPEG lossy algorithm divides the image in separate blocks of____________.

  A. 4x4 pixels
  B. 8x8 pixels
  C. 16x16 pixels
  D. 32x32 pixels
  B. 8x8 pixels

• Question 828:

  Harold is finishing up a report on a case of network intrusion, corporate spying, and embezzlement that he has been working on for over six months. He is trying to find the right term to use in his report to describe network-enabled spying. What term should Harold use?

  A. Spycrack
  B. Spynet
  C. Netspionage
  D. Hackspionage
  C. Netspionage

• Question 829:

  What does the acronym POST mean as it relates to a PC?

  A. Power On Self Test
  B. Pre Operational Situation Test
  C. Primary Operating System Test
  D. Primary Operations Short Test
  A. Power On Self Test

• Question 830:

  Using Internet logging software to investigate a case of malicious use of computers, the investigator comes across some entries that appear odd.

  

  From the log, the investigator can see where the person in question went on the Internet. From the log, it appears that the user was manually typing in different user ID numbers. What technique this user was trying?

  A. Parameter tampering
  B. Cross site scripting
  C. SQL injection
  D. Cookie Poisoning
  A. Parameter tampering