EC-COUNCIL EC1-349 Online Practice Questions and Exam Preparation

EC-COUNCIL EC1-349 Online Questions & Answers

• Question 211:

  Which of the following steganography types hides the secret message in a specifically designed pattern on the document that is unclear to the average reader?

  A. Open code steganography
  B. Visual semagrams steganography
  C. Text semagrams steganography
  D. Technical steganography
  A. Open code steganography

• Question 212:

  Why should you never power on a computer that you need to acquire digital evidence from?

  A. When the computer boots up, files are written to the computer rendering the data nclean?When the computer boots up, files are written to the computer rendering the data ?nclean
  B. When the computer boots up, the system cache is cleared which could destroy evidence
  C. When the computer boots up, data in the memory buffer is cleared which could destroy evidenceWhen the computer boots up, data in the memory? buffer is cleared which could destroy evidence
  D. Powering on a computer has no affect when needing to acquire digital evidence from it
  A. When the computer boots up, files are written to the computer rendering the data nclean?When the computer boots up, files are written to the computer rendering the data ?nclean

• Question 213:

  Operating System logs are most beneficial for Identifying or Investigating suspicious activities involving a particular host. Which of the following Operating System logs contains information about operational actions performed by OS components?

  A. Event logs
  B. Audit logs
  C. Firewall logs
  D. IDS logs
  A. Event logs

• Question 214:

  Computer security logs contain information about the events occurring within an organization's systems and networks. Which of the following security logs contains Logs of network and host- based security software?

  A. Operating System (OS) logs
  B. Application logs
  C. Security software logs
  D. Audit logs
  C. Security software logs

• Question 215:

  International Mobile Equipment Identifier (IMEI) is a 15-dlgit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:

  A. Type Allocation Code (TAC)
  B. Device Origin Code (DOC)
  C. Manufacturer identification Code (MIC)
  D. Integrated Circuit Code (ICC)
  A. Type Allocation Code (TAC)

• Question 216:

  In Windows 7 system files, which file reads the Boot.ini file and loads Ntoskrnl.exe. Bootvid.dll. Hal.dll, and boot-start device drivers?

  A. Ntldr
  B. Gdi32.dll
  C. Kernel32.dll
  D. Boot.in
  A. Ntldr

• Question 217:

  TCP/IP (Transmission Control Protocol/Internet Protocol) is a communication protocol used to connect different hosts in the Internet. It contains four layers, namely the network interface layer. Internet layer, transport layer, and application layer.

  Which of the following protocols works under the transport layer of TCP/IP?

  A. UDP
  B. HTTP
  C. FTP
  D. SNMP
  A. UDP

• Question 218:

  In Microsoft file structures, sectors are grouped together to form:

  A. Clusters
  B. Drives
  C. Bitstreams
  D. Partitions
  A. Clusters

• Question 219:

  What does the superblock in Linux define?

  A. file synames
  B. disk geometr
  C. location of the first inode
  D. available space
  C. location of the first inode

• Question 220:

  Data compression involves encoding the data to take up less storage space and less bandwidth for transmission. It helps in saving cost and high data manipulation in many business applications. Which data compression technique maintains data integrity?

  A. Lossless compression
  B. Lossy compression
  C. Speech encoding compression
  D. Lossy video compression
  A. Lossless compression