EC-COUNCIL 312-49V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V9 Online Questions & Answers

• Question 141:

  You are assisting in the investigation of a possible Web Server hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a pornographic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?

  A. ARP Poisoning
  B. DNS Poisoning
  C. HTTP redirect attack
  D. IP Spoofing
  B. DNS Poisoning

• Question 142:

  Jack Smith is a forensics investigator who works for Mason Computer Investigation Services. He is investigating a computer that was infected by Ramen Virus.

  

  He runs the netstat command on the machine to see its current connections. In the following screenshot, what do the 0.0.0.0 IP addresses signify?

  A. Those connections are established
  B. Those connections are in listening mode
  C. Those connections are in closed/waiting mode
  D. Those connections are in timed out/waiting mode
  B. Those connections are in listening mode

• Question 143:

  An image is an artifact that reproduces the likeness of some subject. These are produced by optical devices (i.e. cameras, mirrors, lenses, telescopes, and microscopes). Which property of the image shows you the number of colors available for each pixel in an image?

  A. Pixel
  B. Bit Depth
  C. File Formats
  D. Image File Size
  B. Bit Depth

• Question 144:

  An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are _________ media used to store large amounts of data and are not affected by the magnet.

  A. Magnetic
  B. Optical
  C. Anti-Magnetic
  D. Logical
  B. Optical

• Question 145:

  When cataloging digital evidence, the primary goal is to

  A. Make bit-stream images of all hard drives
  B. Preserve evidence integrity
  C. Not remove the evidence from the scene
  D. Not allow the computer to be turned off
  B. Preserve evidence integrity

• Question 146:

  Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer. Where should Harold navigate on the computer to find the file?

  A. %systemroot%\LSA
  B. %systemroot%\system32\drivers\etc
  C. %systemroot%\repair
  D. %systemroot%\system32\LSA
  C. %systemroot%\repair

• Question 147:

  A steganographic file system is a method to store the files in a way that encrypts and hides the data without the knowledge of others A. True

  B. False
  A

• Question 148:

  If an attacker's computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?

  A. 31402
  B. The zombie will not send a response
  C. 31401
  D. 31399
  C. 31401

• Question 149:

  Syslog is a client/server protocol standard for forwarding log messages across an IP network. Syslog uses ___________to transfer log messages in a clear text format.

  A. TCP
  B. FTP
  C. SMTP
  D. POP
  A. TCP

• Question 150:

  The Electronic Serial Number (ESN) is a unique __________ recorded on a secure chip in a mobile phone by the manufacturer.

  A. 16-bit identifier
  B. 24-bit identifier
  C. 32-bit identifier
  D. 64-bit identifier
  C. 32-bit identifier