EC-COUNCIL 412-79 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79 Online Questions & Answers

• Question 191:

  To test your website for vulnerabilities, you type in a quotation mark (? for the username field. After you click Ok, you receive the following error message window:

  What can you infer from this error window? Exhibit:

  

  A. SQL injection is not possible
  B. SQL injection is possible
  C. The user for line 3306 in the SQL database has a weak password
  D. The quotation mark (? is a valid username
  B. SQL injection is possible

• Question 192:

  You have completed a forensic investigation case. You would like to destroy the data contained in various disks at the forensics lab due to sensitivity of the case. How would you permanently erase the data on the hard disk?

  A. Throw the hard disk into the fire
  B. Run the powerful magnets over the hard disk
  C. Format the hard disk multiple times using a low level disk utility
  D. Overwrite the contents of the hard disk with Junk data
  A. Throw the hard disk into the fire

• Question 193:

  You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive.org and view the

  HTML code of news.com. You then navigate to the current news.com website and copy over the source code. While searching through the code, you come across something abnormal:

  

  What have you found?

  A. Trojan.downloader
  B. Blind bug
  C. Web bug
  D. CGI code
  C. Web bug

• Question 194:

  What binary coding is used most often for e-mail purposes?

  A. MIME
  B. Uuencode
  C. IMAP
  D. SMTP
  A. MIME

• Question 195:

  Before you are called to testify as an expert, what must an attorney do first?

  A. engage in damage control
  B. prove that the tools you used to conduct your examination are perfect
  C. read your curriculum vitae to the jury
  D. qualify you as an expert witness
  D. qualify you as an expert witness

• Question 196:

  The use of warning banners helps a company avoid litigation by overcoming an employees assumed ____________ When connecting to the company s intranet, network or Virtual Private Network(VPN) and will allow the company s investigators to monitor, search and retrieve information stored within the network.

  A. Right to work
  B. Right of free speech
  C. Right to Internet Access
  D. Right of Privacy
  D. Right of Privacy

• Question 197:

  If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?

  A. The system files have been copied by a remote attacker
  B. The system administrator has created an incremental backup
  C. The system has been compromised using a t0rnrootkit
  D. Nothing in particular as these can be operational files
  D. Nothing in particular as these can be operational files

• Question 198:

  When you carve an image, recovering the image depends on which of the following skills?

  A. Recognizing the pattern of the header content
  B. Recovering the image from a tape backup
  C. Recognizing the pattern of a corrupt file
  D. Recovering the image from the tape backup
  A. Recognizing the pattern of the header content

• Question 199:

  What will the following command accomplish?

  

  A. Test ability of a router to handle over-sized packets
  B. Test the ability of a router to handle fragmented packets
  C. Test the ability of a WLAN to handle fragmented packets
  D. Test the ability of a router to handle under-sized packets
  A. Test ability of a router to handle over-sized packets

• Question 200:

  James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

  A. Fraggle
  B. SYN flood
  C. Trinoo
  D. Smurf
  D. Smurf