EC-COUNCIL 412-79 Online Practice Questions and Exam Preparation

EC-COUNCIL 412-79 Online Questions & Answers

• Question 21:

  Windows identifies which application to open a file with by examining which of the following?

  A. The File extension
  B. The file attributes
  C. The file Signature at the end of the file
  D. The file signature at the beginning of the file
  A. The File extension

• Question 22:

  With the standard Linux second extended file system (Ext2fs), a file is deleted when the inode internal link count reaches ________.

  B. 10
  C. 100
  D. 1
  A

• Question 23:

  Kimberly is studying to be an IT security analyst at a vocational school in her town. The school offers many different programming as well as networking languages. What networking protocol language should she learn that routers utilize?

  A. OSPF
  B. BPG
  C. ATM
  D. UDP
  A. OSPF

• Question 24:

  While working for a prosecutor, What do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense ?

  A. Keep the information of file for later review
  B. Destroy the evidence
  C. Bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge
  D. Present the evidence to the defense attorney
  C. Bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge

• Question 25:

  The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

  A. Any data not yet flushed to the system will be lost
  B. All running processes will be lost
  C. The /tmp directory will be flushed
  D. Power interruption will corrupt the pagefile
  A. Any data not yet flushed to the system will be lost

• Question 26:

  When examining the log files from a Windows IIS Web Server, how often is a new log file created?

  A. the same log is used at all times
  B. a new log file is created everyday
  C. a new log file is created each week
  D. a new log is created each time the Web Server is started
  A. the same log is used at all times

• Question 27:

  It takes _____________ mismanaged case/s to ruin your professional reputation as a computer forensics examiner?

  A. by law, three
  B. quite a few
  C. only one
  D. at least two
  C. only one

• Question 28:

  George is a senior security analyst working for a state agency in Florida. His state's congress just passed a bill mandating every state agency to undergo a security audit annually. After learning what will be required, George needs to implement an IDS as soon as possible before the first audit occurs. The state bill requires that an IDS with a "time-based induction machine" be used. What IDS feature must George implement to meet this requirement?

  A. Pattern matching
  B. Statistical-based anomaly detection
  C. Real-time anomaly detection
  D. Signature-based anomaly detection
  C. Real-time anomaly detection

• Question 29:

  What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 sever the course of its lifetime?

  A. forensic duplication of hard drive
  B. analysis of volatile data
  C. comparison of MD5 checksums
  D. review of SIDs in the Registry
  D. review of SIDs in the Registry

• Question 30:

  You just passed your ECSA exam and are about to start your first consulting job running security audits for a financial institution in Los Angeles. The IT manager of the company you will be working for tries to see if you remember your ECSA

  class. He asks about the methodology you will be using to test the company's network.

  How would you answer?

  A. IBM Methodology
  B. LPT Methodology
  C. Google Methodology
  D. Microsoft Methodology
  B. LPT Methodology