EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 921:

  What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

  A. Key escrow
  B. Steganography
  C. Rootkit
  D. Offset
  B. Steganography

• Question 922:

  During an investigation, Noel found the following SIM card from the suspect's mobile. What does the code 89 44 represent?

  

  A. Issuer Identifier Number and TAC
  B. Industry Identifier and Country code
  C. Individual Account Identification Number and Country Code
  D. TAC and Industry Identifier
  B. Industry Identifier and Country code

• Question 923:

  Debbie has obtained a warrant to search a known pedophile's house. Debbie went to the house and executed the search warrant to seize digital devices that have been recorded as being used for downloading illicit images. She seized all digital devices except a digital camera.

  Why did she not collect the digital camera?

  A. The digital camera was not listed as one of the digital devices in the warrant
  B. Debbie overlooked the digital camera because it is not a computer system
  C. The digital camera was old, had a cracked screen, and did not have batteries. Therefore, it could not have been used in a crime.
  D. The vehicle Debbie was using to transport the evidence was already full and could not carry more items
  A. The digital camera was not listed as one of the digital devices in the warrant

• Question 924:

  Which of the following ISO standard defines file systems and protocol for exchanging data between optical disks?

  A. ISO 9660
  B. ISO/IEC 13940
  C. ISO 9060
  D. IEC 3490
  A. ISO 9660

• Question 925:

  Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy and integrity of the technical log files gathered in an investigation into computer fraud.

  What is the term used for Jacob's testimony in this case?

  A. Certification
  B. Justification
  C. Reiteration
  D. Authentication
  D. Authentication

• Question 926:

  When monitoring for both intrusion and security events between multiple computers, it is essential that the computers' clocks are synchronized. Synchronized time allows an administrator to reconstruct what took place during an attack against multiple computers. Without synchronized time, it is very difficult to determine exactly when specific events took place, and how events interlace.

  What is the name of the service used to synchronize time among multiple computers?

  A. Time-Sync Protocol
  B. SyncTime Service
  C. Network Time Protocol
  D. Universal Time Set
  C. Network Time Protocol

• Question 927:

  Jonathan is a network administrator who is currently testing the internal security of his network. He is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will Jonathan not succeed?

  A. Only FTP traffic can be hijacked
  B. Only an HTTPS session can be hijacked
  C. HTTP protocol does not maintain session
  D. Only DNS traffic can be hijacked
  C. HTTP protocol does not maintain session

• Question 928:

  After a big security incident at a global company, the cybersecurity unit pinpointed the cause as a cleverly designed phishing attempt coupled with an internal attack. The impact of this cybercrime has been detrimental, disrupting normal business operations and theft of sensitive information.The company needs to assess the most effective measure to minimize the recurrence of such incidents and safeguard its IT infrastructure.

  What should they prioritize?

  A. Introducing more robust user authentication methods
  B. Strengthening their IT security framework in compliance with relevant policies, standards, and regulations
  C. Enhancing firewall configuration to better filter incoming traffic
  D. Increasing the frequency of their existing routine security audits
  B. Strengthening their IT security framework in compliance with relevant policies, standards, and regulations

• Question 929:

  "In exceptional circumstances, where a person finds it necessary to access original data held on a computer or on storage media, that person must be competent to do so and be able to explain his/her actions and the impact of those actions on the evidence, in the court."

  Which ACPO principle states this?

  A. Principle 1
  B. Principle 2
  C. Principle 3
  D. Principle 4
  B. Principle 2

• Question 930:

  The efforts to obtain information before a trail by demanding documents, depositions, questioned and answers written under oath, written requests for admissions of fact and examination of the scene is a description of what legal term?

  A. Detection
  B. Hearsay
  C. Spoliation
  D. Discovery
  D. Discovery