EC-COUNCIL EC1-349 Online Practice Questions and Exam Preparation

EC-COUNCIL EC1-349 Online Questions & Answers

• Question 81:

  The MD5 program is used to:

  A. wipe magnetic media before recycling it
  B. make directories on a evidence disk
  C. view graphics files on an evidence drive
  D. verify that a disk is not altered when you examine it
  D. verify that a disk is not altered when you examine it

• Question 82:

  In which step of the computer forensics investigation methodology would you run MD5 checksum on the evidence?

  A. Obtain search warrant
  B. Evaluate and secure the scene
  C. Collect the evidence
  D. Acquire the data
  D. Acquire the data

• Question 83:

  You have been given the task to investigate web attacks on a Windows-based server.

  Which of the following commands will you use to look at which sessions the machine has opened with other systems?

  A. Net sessions
  B. Net use
  C. Net config
  D. Net share
  B. Net use

• Question 84:

  When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?

  A. On the individual computer ARP cacheOn the individual computer? ARP cache
  B. In the Web Server log files
  C. In the DHCP Server log files
  D. There is no way to determine the specific IP address
  C. In the DHCP Server log files

• Question 85:

  Harold is finishing up a report on a case of network intrusion, corporate spying, and embezzlement that he has been working on for over six months. He is trying to find the right term to use in his report to describe network-enabled spying. What term should Harold use?

  A. Spycrack
  B. Spynet
  C. Netspionage
  D. Hackspionage
  C. Netspionage

• Question 86:

  What hashing method is used to password protect Blackberry devices?

  A. AES
  B. RC5
  C. MD5
  D. SHA-1
  D. SHA-1

• Question 87:

  At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

  A. True
  B. False
  A. True

• Question 88:

  The need for computer forensics is highlighted by an exponential increase in the number of cybercrimes and litigations where large organizations were involved. Computer forensics plays an important role in tracking the cyber criminals. The main role of computer forensics is to:

  A. Maximize the investigative potential by maximizing the costs
  B. Harden organization perimeter security
  C. Document monitoring processes of employees of the organization
  D. Extract, process, and interpret the factual evidence so that it proves the attacker's actions in the court
  D. Extract, process, and interpret the factual evidence so that it proves the attacker's actions in the court

• Question 89:

  Cyber-crime is defined as any Illegal act involving a gun, ammunition, or its applications.

  A. True
  B. False
  B. False

• Question 90:

  When should an MD5 hash check be performed when processing evidence?

  A. After the evidence examination has been completed
  B. On an hourly basis during the evidence examination
  C. Before and after evidence examination
  D. Before the evidence examination has been completed
  C. Before and after evidence examination