EC-COUNCIL 312-49V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V9 Online Questions & Answers

• Question 11:

  Email spoofing refers to:

  A. The forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source
  B. The criminal act of sending an illegitimate email, falsely claiming to be from a legitimate site in an attempt to acquire the user's personal or account information
  C. Sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address Is hosted to cause a denial-of-service attack
  D. A sudden spike of "Reply All" messages on an email distribution list, caused by one misdirected message
  A. The forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source

• Question 12:

  When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?

  A. RIM Messaging center
  B. Blackberry Enterprise server
  C. Microsoft Exchange server
  D. Blackberry desktop redirector
  C. Microsoft Exchange server

• Question 13:

  Which of the following commands shows you the NetBIOS name table each?

  A. nbtstat -n
  B. nbtstat -c
  C. nbtstat -r
  D. nbtstat -s
  A. nbtstat -n

• Question 14:

  Jonathan is a network administrator who is currently testing the internal security of his network. He is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will Jonathan not succeed?

  A. Only FTP traffic can be hijacked
  B. Only an HTTPS session can be hijacked
  C. HTTP protocol does not maintain session
  D. Only DNS traffic can be hijacked
  C. HTTP protocol does not maintain session

• Question 15:

  A mobile operating system is the operating system that operates a mobile device like a mobile phone, smartphone, PDA, etc. It determines the functions and features available on mobile devices such as keyboards, applications, email, text messaging, etc. Which of the following mobile operating systems is free and open source?

  A. Web OS
  B. Android
  C. Apple IOS
  D. Symbian OS
  B. Android

• Question 16:

  It takes _____________ mismanaged case/s to ruin your professional reputation as a computer forensics examiner?

  A. by law, three
  B. quite a few
  C. only one
  D. at least two
  C. only one

• Question 17:

  Data is striped at a byte level across multiple drives and parity information is distributed among all member drives.

  

  What RAID level is represented here?

  A. RAID Level0
  B. RAID Level 1
  C. RAID Level 3
  D. RAID Level 5
  D. RAID Level 5

• Question 18:

  You should make at least how many bit-stream copies of a suspect drive?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 19:

  TCP/IP (Transmission Control Protocol/Internet Protocol) is a communication protocol used to connect different hosts in the Internet. It contains four layers, namely the network interface layer. Internet layer, transport layer, and application layer.

  Which of the following protocols works under the transport layer of TCP/IP?

  A. UDP
  B. HTTP
  C. FTP
  D. SNMP
  A. UDP

• Question 20:

  An expert witness is a witness, who by virtue of education, profession, or experience, is believed to have special knowledge of his/her subject beyond that of the average person, sufficient that others legally depend upon his/her opinion.

  A. True
  B. False
  A. True