EC-COUNCIL EC1-349 Online Practice Questions and Exam Preparation

EC-COUNCIL EC1-349 Online Questions & Answers

• Question 21:

  In a computer forensics investigation, what describes the route that evidence takes from the time you find it until the case is closed or goes to court?

  A. Policy of separation
  B. Chain of custody
  C. Rules of evidence
  D. Law of probability
  B. Chain of custody

• Question 22:

  A mobile operating system manages communication between the mobile device and other compatible devices like computers, televisions, or printers.

  

  Which mobile operating system architecture is represented here?

  A. webOS System Architecture
  B. Symbian OS Architecture
  C. Android OS Architecture
  D. Windows Phone 7 Architecture
  C. Android OS Architecture

• Question 23:

  Which of the following should a computer forensics lab used for investigations have?

  A. isolation
  B. restricted access
  C. open access
  D. an entry log
  B. restricted access

• Question 24:

  A rogue/unauthorized access point is one that Is not authorized for operation by a particular firm or network

  A. True
  B. False
  A. True

• Question 25:

  During the course of a corporate investigation, you find that an employee is committing a federal crime. Can the employer file a criminal complain with the police?

  A. Yes, and all evidence can be turned over to the police
  B. Yes, but only if you turn the evidence over to a district judge
  C. No, because the investigation was conducted without following standard police procedures
  D. No, because the investigation was conducted without a warrant
  A. Yes, and all evidence can be turned over to the police

• Question 26:

  What feature of Decryption Collection allows an investigator to crack a password as quickly as possible?

  A. Cracks every password in 10 minutes
  B. Distribute processing over 16 or fewer computers
  C. Support for Encrypted File System
  D. Support for MD5 hash verification
  B. Distribute processing over 16 or fewer computers

• Question 27:

  What is a bit-stream copy?

  A. Bit-Stream Copy is a bit-by-bit copy of the original storage medium and exact copy of the original disk
  B. A bit-stream image is the file that contains the NTFS files and folders of all the data on a disk or partition
  C. A bit-stream image is the file that contains the FAT32 files and folders of all the data on a disk or partition
  D. Creating a bit-stream image transfers only non-deleted files from the original disk to the image disk
  A. Bit-Stream Copy is a bit-by-bit copy of the original storage medium and exact copy of the original disk

• Question 28:

  In conducting a computer abuse investigation you become aware that the suspect of the investigation is using ABC Company as his Internet Service Provider (ISP). You contact the ISP and request that they provide you assistance with your investigation. What assistance can the ISP provide?

  A. The ISP can investigate anyone using their service and can provide you with assistance
  B. The ISP can investigate computer abuse committed by their employees, but must preserve the privacy of their customers and therefore cannot assist you without a warrant
  C. The ISP cannot conduct any type of investigations on anyone and therefore cannot assist you
  D. ISPs never maintain log files so they would be of no use to your investigation
  B. The ISP can investigate computer abuse committed by their employees, but must preserve the privacy of their customers and therefore cannot assist you without a warrant

• Question 29:

  Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

  A. Use a system that has a dynamic addressing on the network
  B. Use a system that is not directly interacing with the router
  C. Use it on a system in an external DMZ in front of the firewall
  D. It doesn't matter as all replies are faked
  D. It doesn't matter as all replies are faked

• Question 30:

  As a CHFI professional, which of the following is the most important to your professional reputation?

  A. Your Certifications
  B. The correct, successful management of each and every case
  C. The free that you charge
  D. The friendship of local law enforcement officers
  B. The correct, successful management of each and every case