EC-COUNCIL 312-49V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V9 Online Questions & Answers

• Question 241:

  You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

  A. Demonstrate that no system can be protected againstDoS attacks
  B. List weak points on their network
  C. Show outdatedeQuipment so it can be replaced
  D. Use attack as a launching point to penetrate deeper into the network
  B. List weak points on their network

• Question 242:

  When monitoring for both intrusion and security events between multiple computers, it is essential that the computers' clocks are synchronized. Synchronized time allows an administrator to reconstruct what took place during an attack against multiple computers. Without synchronized time, it is very difficult to determine exactly when specific events took place, and how events interlace. What is the name of the service used to synchronize time among multiple computers?

  A. Time-Sync Protocol
  B. SyncTime Service
  C. Network Time Protocol
  D. Universal Time Set
  C. Network Time Protocol

• Question 243:

  Event correlation is a procedure that is assigned with a new meaning for a set of events that occur in a predefined interval of time.

  Which type of correlation will you use if your organization wants to use different OS and network hardware platforms throughout the network?

  A. Same-platform correlation
  B. Cross-platform correlation
  C. Multiple-platform correlation
  D. Network-platform correlation
  B. Cross-platform correlation

• Question 244:

  Sectors in hard disks typically contain how many bytes?

  A. 256
  B. 512
  C. 1024
  D. 2048
  B. 512

• Question 245:

  Which of the following is the certifying body of forensics labs that investigate criminal cases by analyzing evidence?

  A. The American Society of Crime Laboratory Directors (ASCLD)
  B. International Society of Forensics Laboratory (ISFL)
  C. The American Forensics Laboratory Society (AFLS)
  D. The American Forensics Laboratory for Computer Forensics (AFLCF)
  A. The American Society of Crime Laboratory Directors (ASCLD)

• Question 246:

  You are conducting an investigation of fraudulent claims in an insurance company that involves complex text searches through large numbers of documents. Which of the following tools would allow you to quickly and efficiently search for a string within a file on the bitmap image of the target computer?

  A. Stringsearch
  B. grep
  C. dir
  D. vim
  B. grep

• Question 247:

  Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.

  A. True
  B. False
  A. True

• Question 248:

  With the standard Linux second extended file system (Ext2fs), a file is deleted when the inode internal link count reaches ______

  B. 1
  C. 10
  D. 100
  A

• Question 249:

  While looking through the IIS log file of a web server, you find the following entries:

  

  What is evident from this log file?

  A. Web bugs
  B. Cross site scripting
  C. Hidden fields
  D. SQL injection is possible
  D. SQL injection is possible

• Question 250:

  What does the acronym POST mean as it relates to a PC?

  A. Power On Self Test
  B. Pre Operational Situation Test
  C. Primary Operating System Test
  D. Primary Operations Short Test
  A. Power On Self Test