EC-COUNCIL CHFI EC1-349 Questions & Answers

• Question 11:

  What is a first sector ("sector zero") of a hard disk?

  A. Master boot record

  B. System boot record

  C. Secondary boot record

  D. Hard disk boot record

  Correct Answer: A

• Question 12:

  Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

  A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion \ProfileList

  B. HKEY_LOCAL_MACHlNE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \NetworkList

  C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentsVersion \setup

  D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule

  Correct Answer: A

• Question 13:

  JPEG is a commonly used method of compressing photographic Images. It uses a compression algorithm to minimize the size of the natural image, without affecting the quality of the image. The JPEG lossy algorithm divides the image in separate blocks of____________.

  A. 4x4 pixels

  B. 8x8 pixels

  C. 16x16 pixels

  D. 32x32 pixels

  Correct Answer: B

• Question 14:

  Which of the following attacks allows attacker to acquire access to the communication channels between the victim and server to extract the information?

  A. Man-in-the-middle (MITM) attack

  B. Replay attack

  C. Rainbow attack

  D. Distributed network attack

  Correct Answer: A

• Question 15:

  Injection flaws are web application vulnerabilities that allow untrusted data to be Interpreted and executed as part of a command or query. Attackers exploit injection flaws by constructing malicious commands or queries that result in data loss or corruption, lack of accountability, or denial of access. Which of the following injection flaws involves the injection of malicious code through a web application?

  A. SQL Injection

  B. Password brute force

  C. Nmap Scanning

  D. Footprinting

  Correct Answer: A

• Question 16:

  Which of the following standard is based on a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?

  A. Daubert Standard

  B. Schneiderman Standard

  C. Frye Standard

  D. FERPA standard

  Correct Answer: C

• Question 17:

  Wi-Fi Protected Access (WPA) is a data encryption method for WLANs based on 802.11 standards. Temporal Key Integrity Protocol (TKIP) enhances WEP by adding a rekeying mechanism to provide fresh encryption and integrity keys. Temporal keys are changed for every____________.

  A. 5,000 packets

  B. 10.000 packets

  C. 15,000 packets

  D. 20.000 packets

  Correct Answer: B

• Question 18:

  Billy, a computer forensics expert, has recovered a large number of DBX files during forensic investigation of a laptop. Which of the following email clients he can use to analyze the DBX files?

  A. Microsoft Outlook

  B. Microsoft Outlook Express

  C. Mozilla Thunderoird

  D. Eudora

  Correct Answer: B

• Question 19:

  Which of the following is the certifying body of forensics labs that investigate criminal cases by analyzing evidence?

  A. The American Society of Crime Laboratory Directors (ASCLD)

  B. International Society of Forensics Laboratory (ISFL)

  C. The American Forensics Laboratory Society (AFLS)

  D. The American Forensics Laboratory for Computer Forensics (AFLCF)

  Correct Answer: A

• Question 20:

  Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

  A. Unvalidated input

  B. Parameter/form tampering

  C. Directory traversal

  D. Security misconfiguration

  Correct Answer: C