EC-COUNCIL 312-49V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V8 Online Questions & Answers

• Question 101:

  SIM is a removable component that contains essential information about the subscriber. It has both volatile and non-volatile memory. The file system of a SIM resides in _____________ memory.

  A. Volatile
  B. Non-volatile
  B. Non-volatile

• Question 102:

  What is static executable file analysis?

  A. It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances
  B. It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances
  C. It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment
  D. It is a process that consists of collecting information about and from an executable file by launching an executable file in a controlled and monitored environment
  A. It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances

• Question 103:

  A computer forensic report is a report which provides detailed information on the complete forensics investigation process.

  A. True
  B. False
  A. True

• Question 104:

  Hard disk data addressing is a method of allotting addresses to each ___________of data on a hard disk

  A. Physical block
  B. Logical block
  C. Operating system block
  D. Hard disk block
  A. Physical block

• Question 105:

  What is the first step that needs to be carried out to investigate wireless attacks?

  A. Obtain a search warrant
  B. Identify wireless devices at crime scene
  C. Document the scene and maintain a chain of custody
  D. Detect the wireless connections
  A. Obtain a search warrant

• Question 106:

  Which of the following email headers specifies an address for mailer-generated errors, like "no such user" bounce messages, to go to (instead of the sender's address)?

  A. Errors-To header
  B. Content-Transfer-Encoding header
  C. Mime-Version header
  D. Content-Type header
  A. Errors-To header

• Question 107:

  What document does the screenshot represent?

  

  A. Chain of custody form
  B. Search warrant form
  C. Evidence collection form
  D. Expert witness form
  A. Chain of custody form

• Question 108:

  Computer forensics report provides detailed information on complete computer forensics investigation process. It should explain how the incident occurred, provide technical details of the incident and should be clear to understand. Which of the following attributes of a forensics report can render it inadmissible in a court of law?

  A. It includes metadata about the incident
  B. It includes relevant extracts referred to In the report that support analysis or conclusions
  C. It is based on logical assumptions about the incident timeline
  D. It maintains a single document style throughout the text
  C. It is based on logical assumptions about the incident timeline

• Question 109:

  Which of the following standard is based on a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?

  A. Daubert Standard
  B. Schneiderman Standard
  C. Frye Standard
  D. FERPA standard
  C. Frye Standard

• Question 110:

  The evolution of web services and their increasing use in business offers new attack vectors in an application framework. Web services are based on XML protocols such as web Services Definition Language (WSDL) for describing the connection points, Universal Description, Discovery, and Integration (UDDI) for the description and discovery of Web services and Simple Object Access Protocol (SOAP) for communication between Web services that are vulnerable to various web application threats. Which of the following layer in web services stack is vulnerable to fault code leaks?

  A. Presentation Layer
  B. Security Layer
  C. Discovery Layer
  D. Access Layer
  C. Discovery Layer