EC-COUNCIL EC1-349 Online Practice Questions and Exam Preparation

EC-COUNCIL EC1-349 Online Questions & Answers

• Question 51:

  What will the following command accomplish? dd if=/dev/xxx of=mbr.backup bs=512 count=1

  A. Back up the master boot record
  B. Restore the master boot record
  C. Mount the master boot record on the first partition of the hard drive
  D. Restore the first 512 bytes of the first partition of the hard drive
  A. Back up the master boot record

• Question 52:

  Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

  A. Windows computers will not respond to idle scans
  B. Linux/Unix computers are easier to compromise
  C. Windows computers are constantly talking
  D. Linux/Unix computers are constantly talking
  C. Windows computers are constantly talking

• Question 53:

  The offset in a hexadecimal code is:

  A. The 0x at the beginning of the code
  B. The 0x at the end of the code
  C. The first byte after the colon
  D. The last byte after the colon
  A. The 0x at the beginning of the code

• Question 54:

  During the course of an investigation, you locate evidence that may prove the innocence of the suspect of the investigation. You must maintain an unbiased opinion and be objective in your entire fact finding process. Therefore you report this evidence. This type of evidence is known as:

  A. Inculpatory evidence
  B. mandatory evidence
  C. exculpatory evidence
  D. Terrible evidence
  C. exculpatory evidence

• Question 55:

  When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?

  A. Passive IDS
  B. Active IDS
  C. NIPS
  D. Progressive IDS
  B. Active IDS

• Question 56:

  Which of the following would you consider an aspect of organizational security, especially focusing on IT security?

  A. Biometric information security
  B. Security from frauds
  C. Application security
  D. Information copyright security
  C. Application security

• Question 57:

  Router log files provide detailed Information about the network traffic on the Internet. It gives information about the attacks to and from the networks. The router stores log files in the____________.

  A. Router cache
  B. Application logs
  C. IDS logs
  D. Audit logs
  A. Router cache

• Question 58:

  Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

  A. The manufacturer of the system compromised
  B. The logic, formatting and elegance of the code used in the attack
  C. The nature of the attack
  D. The vulnerability exploited in the incident
  B. The logic, formatting and elegance of the code used in the attack

• Question 59:

  An image is an artifact that reproduces the likeness of some subject. These are produced by optical devices (i.e. cameras, mirrors, lenses, telescopes, and microscopes). Which property of the image shows you the number of colors available for each pixel in an image?

  A. Pixel
  B. Bit Depth
  C. File Formats
  D. Image File Size
  B. Bit Depth

• Question 60:

  When investigating a potential e-mail crime, what is your first step in the investigation?

  A. Trace the IP address to its origin
  B. Write a report
  C. Determine whether a crime was actually committed
  D. Recover the evidence
  A. Trace the IP address to its origin