EC-COUNCIL EC-COUNCIL Certifications 212-89 Questions & Answers

• Question 31:

  Which of the following is NOT a digital forensic analysis tool:

  A. Access Data FTK

  B. EAR/ Pilar

  C. Guidance Software EnCase Forensic

  D. Helix

  Correct Answer: B

• Question 32:

  What command does a Digital Forensic Examiner use to display the list of all open ports and the associated IP addresses on a victim computer to identify the established connections on it:

  A. "arp" command

  B. "netstat 璦n" command

  C. "dd" command

  D. "ifconfig" command

  Correct Answer: B

• Question 33:

  The state of incident response preparedness that enables an organization to maximize its potential to use digital evidence while minimizing the cost of an investigation is called:

  A. Computer Forensics

  B. Digital Forensic Analysis

  C. Forensic Readiness

  D. Digital Forensic Policy

  Correct Answer: C

• Question 34:

  Lack of forensic readiness may result in:

  A. Loss of clients thereby damaging the organization's reputation

  B. System downtime

  C. Data manipulation, deletion, and theft

  D. All the above

  Correct Answer: D

• Question 35:

  Insiders may be:

  A. Ignorant employees

  B. Carless administrators

  C. Disgruntled staff members

  D. All the above

  Correct Answer: D

• Question 36:

  Which of the following may be considered as insider threat(s):

  A. An employee having no clashes with supervisors and coworkers

  B. Disgruntled system administrators

  C. An employee who gets an annual 7% salary raise

  D. An employee with an insignificant technical literacy and business process knowledge

  Correct Answer: B

• Question 37:

  Spyware tool used to record malicious user's computer activities and keyboard stokes is called:

  A. adware

  B. Keylogger

  C. Rootkit

  D. Firewall

  Correct Answer: B

• Question 38:

  Insiders understand corporate business functions. What is the correct sequence of activities performed by Insiders to damage company assets:

  A. Gain privileged access, install malware then activate

  B. Install malware, gain privileged access, then activate

  C. Gain privileged access, activate and install malware

  D. Activate malware, gain privileged access then install malware

  Correct Answer: A

• Question 39:

  The USB tool (depicted below) that is connected to male USB Keyboard cable and not detected by anti- spyware tools is most likely called:

  

  A. Software Key Grabber

  B. Hardware Keylogger

  C. USB adapter

  D. Anti-Keylogger

  Correct Answer: B

• Question 40:

  Which is the incorrect statement about Anti-keyloggers scanners: A. Detect already installed Keyloggers in victim machines

  B. Run in stealthy mode to record victims online activity

  C. Software tools

  Correct Answer: B