EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 941:

  Gary, a computer technician, is facing allegations of abusing children online by befriending them and sending them illicit adult images from his office computer. What type of investigation does this case require?

  A. Administrative Investigation
  B. Criminal Investigation
  C. Both Criminal and Administrative Investigation
  D. Civil Investigation
  B. Criminal Investigation

• Question 942:

  A digital forensic investigator examines a Windows system to identify suspicious activity related to a recent cyber incident. She has collected volatile and non-volatile registry hives for analysis. The investigator has noticed modifications in a user's profile settings, including changes indesktop wallpaper and screen colors.

  Which hive and component cells in the registry should she examine more closely for further evidence ofuser-specific activity?

  A. Examine HKEY_CLASSES_ROOT; focus on security descriptor cells and value cells
  B. Examine HKEY_LOCAI MACHINE; focus on value cells and subkey list cells
  C. Examine HKEY_CURRENT_CONFIG: focus on subkey list cells and value cells
  D. Examine HKEY_CURRENT_USER; focus on key cells and value list cells
  D. Examine HKEY_CURRENT_USER; focus on key cells and value list cells

• Question 943:

  George is performing security analysis for Hammond and Sons LLC. He is testing security vulnerabilities of their wireless network. He plans on remaining as "stealthy" as possible during the scan. Why would a scanner like Nessus is not recommended in this situation?

  A. Nessus cannot perform wireless testing
  B. Nessus is too loud
  C. There are no ways of performing a "stealthy" wireless scan
  D. Nessus is not a network scanner
  B. Nessus is too loud

• Question 944:

  A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file?

  A. Raster image
  B. Vector image
  C. Metafile image
  D. Catalog image
  B. Vector image

• Question 945:

  Data Files contain Multiple Data Pages, which are further divided into Page Header, Data Rows, and Offset Table. Which of the following is true for Data Rows?

  A. Data Rows store the actual data
  B. Data Rows present Page type. Page ID, and so on
  C. Data Rows point to the location of actual data
  D. Data Rows spreads data across multiple databases
  B. Data Rows present Page type. Page ID, and so on

• Question 946:

  In an ongoing investigation, a computer forensics investigator encounters a suspicious file believed to be packed using a password-protected program packer. The investigator possesses both the knowledge of the packing tool used and the necessary unpacking tool.

  What critical step should the investigator consider before analyzing the packed file?

  A. Conduct static analysis on the packed le immediately
  B. Reverse engineer the packed le to understand the hidden attack tools
  C. Attempt to decrypt the password prior to unpacking the le
  D. Run the packed le in a controlled environment for dynamic analysis
  C. Attempt to decrypt the password prior to unpacking the le

• Question 947:

  Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and zombies? What type of Penetration Testing is Larry planning to carry out?

  A. Router Penetration Testing
  B. DoS Penetration Testing
  C. Internal Penetration Testing
  D. Firewall Penetration Testing
  B. DoS Penetration Testing

• Question 948:

  Web applications provide an Interface between end users and web servers through a set of web pages that are generated at the server-end or contain script code to be executed dynamically within the client Web browser.

  A. True
  B. False
  A. True

• Question 949:

  Which tool allows dumping the contents of process memory without stopping the process?

  A. psdump.exe
  B. pmdump.exe
  C. processdump.exe
  D. pdump.exe
  B. pmdump.exe

• Question 950:

  Smith is an IT technician that has been appointed to his company's network vulnerability assessment team. He is the only IT employee on the team. The other team members include employees from Accounting, Management, Shipping, and Marketing. Smith and the team members are having their first meeting to discuss how they will proceed.

  What is the first step they should do to create the network vulnerability assessment plan?

  A. Their first step is to make a hypothesis of what their final findings will be.
  B. Their first step is to create an initial Executive report to show the management team.
  C. Their first step is to analyze the data they have currently gathered from the company or interviews.
  D. Their first step is the acquisition of required documents, reviewing of security policies and compliance.
  D. Their first step is the acquisition of required documents, reviewing of security policies and compliance.