EC-COUNCIL 412-79 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79 Online Questions & Answers

• Question 161:

  What is the following command trying to accomplish?

  

  A. Verify that NETBIOS is running for the 192.168.0.0 network
  B. Verify that TCP port 445 is open for the 192.168.0.0 network
  C. Verify that UDP port 445 is open for the 192.168.0.0 network
  D. Verify that UDP port 445 is closed for the 192.168.0.0 network
  C. Verify that UDP port 445 is open for the 192.168.0.0 network

• Question 162:

  Jessica works as systems administrator for a large electronics firm. She wants to scan her network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

  A. Ping trace
  B. Tracert
  C. Smurf scan
  D. ICMP ping sweep
  D. ICMP ping sweep

• Question 163:

  Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposure the site has received so far. Harold

  navigates to google.com and types in the following search.

  link:www.ghttech.net

  What will this search produce?

  A. All sites that link to ghttech.net
  B. Sites that contain the code: link:www.ghttech.net
  C. All sites that ghttech.net links to
  D. All search engines that link to .net domains
  A. All sites that link to ghttech.net

• Question 164:

  You are the network administrator for a small bank in Dallas, Texas. To ensure network security, you enact a security policy that requires all users to have 14 character passwords. After giving your users 2 weeks notice, you change the Group Policy to force 14 character passwords. A week later you dump the SAM database from the standalone server and run a password-cracking tool against it. Over 99% of the passwords are broken within an hour. Why were these passwords cracked so quickly?

  A. Networks using Active Directory never use SAM databases so the SAM database pulled was empty
  B. Passwords of 14 characters or less are broken up into two 7-character hashes
  C. The passwords that were cracked are local accounts on the Domain Controller
  D. A password Group Policy change takes at least 3 weeks to completely replicate throughout a network
  B. Passwords of 14 characters or less are broken up into two 7-character hashes

• Question 165:

  How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

  A. 128
  B. 64
  C. 32
  D. 16
  C. 32

• Question 166:

  You have been asked to investigate after a user has reported a threatening e-mail they have received from an external source. Which of the following are you most interested in when trying to trace the source of the message?

  A. The X509 Address
  B. The SMTP reply Address
  C. The E-mail Header
  D. The Host Domain Name
  C. The E-mail Header

• Question 167:

  You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame. What ports should you open for SNMP to work through Firewalls (Select 2)

  A. 162
  B. 160
  C. 163
  D. 161
  A. 162
  D. 161

• Question 168:

  In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?

  A. one who has NTFS 4 or 5 partitions
  B. one who uses dynamic swap file capability
  C. one who uses hard disk writes on IRQ 13 and 21
  D. one who has lots of allocation units per block or cluster
  D. one who has lots of allocation units per block or cluster

• Question 169:

  Software firewalls work at which layer of the OSI model?

  A. Data Link
  B. Network
  C. Transport
  D. Application
  A. Data Link

• Question 170:

  Which is a standard procedure to perform during all computer forensics investigations?

  A. with the hard drive removed from the suspect PC, check the date and time in the system s CMOS
  B. with the hard drive in the suspect PC, check the date and time in the File Allocation Table
  C. with the hard drive removed from the suspect PC, check the date an d time in the system s RAM
  D. with the hard drive in the suspect PC, check the date and time in the system s CMOS
  C. with the hard drive removed from the suspect PC, check the date an d time in the system s RAM