EC-COUNCIL EC1-349 Online Practice Questions and Exam Preparation

EC-COUNCIL EC1-349 Online Questions & Answers

• Question 421:

  In General, __________________ Involves the investigation of data that can be retrieved from the hard disk or other disks of a computer by applying scientific methods to retrieve the data.

  A. Network Forensics
  B. Data Recovery
  C. Disaster Recovery
  D. Computer Forensics
  D. Computer Forensics

• Question 422:

  Data acquisition system is a combination of tools or processes used to gather, analyze and record Information about some phenomenon. Different data acquisition system are used depends on the location, speed, cost. etc. Serial communication data acquisition system is used when the actual location of the data is at some distance from the computer. Which of the following communication standard is used in serial communication data acquisition system?

  A. RS422
  B. RS423
  C. RS232
  D. RS231
  C. RS232

• Question 423:

  Kimberly is studying to be an IT security analyst at a vocational school in her town. The school offers many different programming as well as networking languages. What networking protocol language should she learn that routers utilize?

  A. BPG
  B. ATM
  C. OSPF
  D. UDP
  C. OSPF

• Question 424:

  A steganographic file system is a method to store the files in a way that encrypts and hides the data without the knowledge of others

  A. True
  B. False
  A. True

• Question 425:

  Identify the attack from following sequence of actions? Step 1: A user logs in to a trusted site and creates a new session Step 2: The trusted site stores a session identifier for the session in a cookie in the web browser Step 3: The user is tricked to visit a malicious site Step 4: the malicious site sends a request from the user's browser using his session cookie

  A. Web Application Denial-of-Service (DoS) Attack
  B. Cross-Site Scripting (XSS) Attacks
  C. Cross-Site Request Forgery (CSRF) Attack
  D. Hidden Field Manipulation Attack
  C. Cross-Site Request Forgery (CSRF) Attack

• Question 426:

  Data Acquisition is the process of imaging or otherwise obtaining information from a digital device and its peripheral equipment and media

  A. True
  B. False
  A. True

• Question 427:

  The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

  A. HIPAA
  B. Sarbanes-Oxley 2002
  C. California SB 1386
  D. Gramm-Leach-Bliley Act
  D. Gramm-Leach-Bliley Act

• Question 428:

  How many times can data be written to a DVD+R disk?

  A. Twice
  B. Once
  C. Zero
  D. Infinite
  B. Once

• Question 429:

  Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

  A. True
  B. False
  A. True

• Question 430:

  While looking through the IIS log file of a web server, you find the following entries:

  

  What is evident from this log file?

  A. Web bugs
  B. Cross site scripting
  C. Hidden fields
  D. SQL injection is possible
  D. SQL injection is possible