EC-COUNCIL 312-49V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V9 Online Questions & Answers

• Question 201:

  Subscriber Identity Module (SIM) is a removable component that contains essential information about the subscriber. Its main function entails authenticating the user of the cell phone to the network to gain access to subscribed services. SIM contains a 20-digit long Integrated Circuit Card identification (ICCID) number, identify the issuer identifier Number from the ICCID below.

  

  A. 89
  B. 44
  C. 245252
  D. 001451548
  C. 245252

• Question 202:

  Wireless access control attacks aim to penetrate a network by evading WLAN access control measures, such as AP MAC filters and Wi-Fi port access controls.

  Which of the following wireless access control attacks allows the attacker to set up a rogue access point outside the corporate perimeter, and then lure the employees of the organization to connect to it?

  A. War driving
  B. Rogue access points
  C. MAC spoofing
  D. Client mis-association
  D. Client mis-association

• Question 203:

  In the context of file deletion process, which of the following statement holds true?

  A. When files are deleted, the data is overwritten and the cluster marked as available
  B. The longer a disk is in use, the less likely it is that deleted files will be overwritten
  C. While booting, the machine may create temporary files that can delete evidence
  D. Secure delete programs work by completely overwriting the file in one go
  C. While booting, the machine may create temporary files that can delete evidence

• Question 204:

  If you are concerned about a high level of compression but not concerned about any possible data loss, what type of compression would you use?

  A. Lossful compression
  B. Lossy compression
  C. Lossless compression
  D. Time-loss compression
  B. Lossy compression

• Question 205:

  What technique used by Encase makes it virtually impossible to tamper with evidence once it has been acquired?

  A. Every byte of the file(s) is given an MD5 hash to match against a master file
  B. Every byte of the file(s) is verified using 32-bit CRC
  C. Every byte of the file(s) is copied to three different hard drives
  D. Every byte of the file(s) is encrypted using three different methods
  B. Every byte of the file(s) is verified using 32-bit CRC

• Question 206:

  What will the following Linux command accomplish? dd if=/dev/mem of=/home/sam/mem.bin bs=1024

  A. Copy the master boot record to a file
  B. Copy the contents of the system folder em?to a fileCopy the contents of the system folder ?em?to a file
  C. Copy the running memory to a file
  D. Copy the memory dump file to an image file
  C. Copy the running memory to a file

• Question 207:

  Which is a standard procedure to perform during all computer forensics investigations?

  A. With the hard drive in the suspect PC, check the date and time in the system CMOSWith the hard drive in the suspect PC, check the date and time in the system? CMOS
  B. With the hard drive removed from the suspect PC, check the date and time in the system CMOSWith the hard drive removed from the suspect PC, check the date and time in the system? CMOS
  C. With the hard drive in the suspect PC, check the date and time in the File Allocation Table
  D. With the hard drive removed from the suspect PC, check the date and time in the system RAMWith the hard drive removed from the suspect PC, check the date and time in the system? RAM
  B. With the hard drive removed from the suspect PC, check the date and time in the system CMOSWith the hard drive removed from the suspect PC, check the date and time in the system? CMOS

• Question 208:

  If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire 32 K will be allocated, resulting In 22 K of___________.

  A. Slack space
  B. Deleted space
  C. Cluster space
  D. Sector space
  A. Slack space

• Question 209:

  When conducting computer forensic analysis, you must guard against ______________ So that you remain focused on the primary job and insure that the level of work does not increase beyond what was originally expected.

  A. Hard Drive Failure
  B. Scope Creep
  C. Unauthorized expenses
  D. Overzealous marketing
  B. Scope Creep

• Question 210:

  International Mobile Equipment Identifier (IMEI) is a 15-dlgit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:

  A. Type Allocation Code (TAC)
  B. Device Origin Code (DOC)
  C. Manufacturer identification Code (MIC)
  D. Integrated Circuit Code (ICC)
  A. Type Allocation Code (TAC)