EC-COUNCIL 312-49V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V9 Online Questions & Answers

• Question 341:

  In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?

  A. evidence must be handled in the same way regardless of the type of case
  B. evidence procedures are not important unless you work for a law enforcement agency
  C. evidence in a criminal case must be secured more tightly than in a civil case
  D. evidence in a civil case must be secured more tightly than in a criminal case
  C. evidence in a criminal case must be secured more tightly than in a civil case

• Question 342:

  Where are files temporarily written in Unix when printing?

  A. /usr/spool
  B. /var/print
  C. /spool
  D. /var/spool
  D. /var/spool

• Question 343:

  After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a DMZ, statefull firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken, none of the hosts on her

  network can reach the Internet.

  Why is that?

  A. IPSEC does not work with packet filtering firewalls
  B. Statefull firewalls do not work with packet filtering firewalls
  C. NAT does not work with IPSEC
  D. NAT does not work with statefull firewalls
  C. NAT does not work with IPSEC

• Question 344:

  In Microsoft file structures, sectors are grouped together to form:

  A. Clusters
  B. Drives
  C. Bitstreams
  D. Partitions
  A. Clusters

• Question 345:

  What information do you need to recover when searching a victim computer for a crime committed with specific e-mail message?What information do you need to recover when searching a victim? computer for a crime committed with specific e-mail message?

  A. Internet service provider information
  B. E-mail header
  C. Username and password
  D. Firewall log
  B. E-mail header

• Question 346:

  Buffer Overflow occurs when an application writes more data to a block of memory, or buffer, than the buffer is allocated to hold. Buffer overflow attacks allow an attacker to modify the _______________in order to control the process execution, crash the process and modify internal variables.

  A. Target process's address space
  B. Target remote access
  C. Target rainbow table
  D. Target SAM file
  A. Target process's address space

• Question 347:

  What is one method of bypassing a system BIOS password?

  A. Removing the processor
  B. Removing the CMOS battery
  C. Remove all the system memoryRemove all the system? memory
  D. Login to Windows and disable the BIOS password
  B. Removing the CMOS battery

• Question 348:

  This type of testimony is presented by someone who does the actual fieldwork and does not offer a view in court.

  A. Civil litigation testimony
  B. Expert testimony
  C. Victim advocate testimony
  D. Technical testimony
  D. Technical testimony

• Question 349:

  Which legal document allows law enforcement to search an office, place of business, or other locale for evidence relating to an alleged crime?

  A. Search warrant
  B. Subpoena
  C. Wire tap
  D. Bench warrant
  A. Search warrant

• Question 350:

  Cyber-crime is defined as any Illegal act involving a gun, ammunition, or its applications.

  A. True
  B. False
  B. False