EC-COUNCIL 312-49V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V9 Online Questions & Answers

• Question 1:

  A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything. What is the reason for this?

  A. He should search in C:\Windows\System32\RECYCLED folder
  B. The Recycle Bin does not exist on the hard drive
  C. The files are hidden and he must use switch to view themThe files are hidden and he must use ? switch to view them
  D. Only FAT system contains RECYCLED folder and not NTFS
  C. The files are hidden and he must use switch to view themThe files are hidden and he must use ? switch to view them

• Question 2:

  Which of the following Steganography techniques allows you to encode information that ensures creation of cover for secret communication?

  A. Substitution techniques
  B. Transform domain techniques
  C. Cover generation techniques
  D. Spread spectrum techniques
  C. Cover generation techniques

• Question 3:

  Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?

  A. Point-to-point
  B. End-to-end
  C. Thorough
  D. Complete event analysis
  B. End-to-end

• Question 4:

  Data compression involves encoding the data to take up less storage space and less bandwidth for transmission. It helps in saving cost and high data manipulation in many business applications. Which data compression technique maintains data integrity?

  A. Lossless compression
  B. Lossy compression
  C. Speech encoding compression
  D. Lossy video compression
  A. Lossless compression

• Question 5:

  SIM is a removable component that contains essential information about the subscriber. It has both volatile and non-volatile memory. The file system of a SIM resides in _____________ memory.

  A. Volatile
  B. Non-volatile
  B. Non-volatile

• Question 6:

  Which response organization tracks hoaxes as well as viruses?

  A. NIPC
  B. FEDCIRC
  C. CERT
  D. CIAC
  D. CIAC

• Question 7:

  The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin. Which of the following files contains records that correspond to each deleted file in the Recycle Bin?

  A. INFO2 file
  B. INFO1 file
  C. LOGINFO2 file
  D. LOGINFO1 file
  A. INFO2 file

• Question 8:

  Computer security logs contain information about the events occurring within an organization's systems and networks. Which of the following security logs contains Logs of network and host-based security software?

  A. Operating System (OS) logs
  B. Application logs
  C. Security software logs
  D. Audit logs
  C. Security software logs

• Question 9:

  To calculate the number of bytes on a disk, the formula is: CHS**

  A. number of circles x number of halves x number of sides x 512 bytes per sector
  B. number of cylinders x number of halves x number of shims x 512 bytes per sector
  C. number of cells x number of heads x number of sides x 512 bytes per sector
  D. number of cylinders x number of heads x number of sides x 512 bytes per sector
  D. number of cylinders x number of heads x number of sides x 512 bytes per sector

• Question 10:

  Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

  A. Windows computers will not respond to idle scans
  B. Linux/Unix computers are easier to compromise
  C. Windows computers are constantly talking
  D. Linux/Unix computers are constantly talking
  C. Windows computers are constantly talking