EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 131:

  Madison is on trial for allegedly breaking into her university's internal network. The police raided her dorm room and seized all of her computer equipment. Madison's lawyer is trying to convince the judge that the seizure was unfounded and baseless. Under which US Amendment is Madison's lawyer trying to prove the police violated?

  A. The 4th Amendment

  B. The 1st Amendment

  C. The 10th Amendment

  D. The 5th Amendment

  Correct Answer: A

• Question 132:

  Which among the following search warrants allows the first responder to get the victim's computer information such as service records, billing records, and subscriber information from the service provider?

  A. Citizen Informant Search Warrant

  B. Electronic Storage Device Search Warrant

  C. John Doe Search Warrant

  D. Service Provider Search Warrant

  Correct Answer: D

• Question 133:

  In Windows Security Event Log, what does an event id of 530 imply?

  A. Logon Failure – Unknown user name or bad password

  B. Logon Failure – User not allowed to logon at this computer

  C. Logon Failure – Account logon time restriction violation

  D. Logon Failure – Account currently disabled

  Correct Answer: C

• Question 134:

  Which of the following technique creates a replica of an evidence media?

  A. Data Extraction

  B. Backup

  C. Bit Stream Imaging

  D. Data Deduplication

  Correct Answer: C

• Question 135:

  Which of the following commands shows you the names of all open shared files on a server and the number of file locks on each file?

  A. Net config

  B. Net file

  C. Net share

  D. Net sessions

  Correct Answer: B

• Question 136:

  The surface of a hard disk consists of several concentric rings known as tracks; each of these tracks has smaller partitions called disk blocks. What is the size of each block?

  A. 512 bits

  B. 512 bytes

  C. 256 bits

  D. 256 bytes

  Correct Answer: B

• Question 137:

  Pagefile.sys is a virtual memory file used to expand the physical memory of a computer. Select the registry path for the page file:

  A. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management

  B. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\System Management

  C. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Device Management

  D. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory

  Management\PrefetchParameters

  Correct Answer: A

• Question 138:

  Which of the following commands shows you all of the network services running on Windows-based servers?

  A. Netstart

  B. Net Session

  C. Net use

  D. Net config

  Correct Answer: A

• Question 139:

  Which of the following are small pieces of data sent from a website and stored on the user's computer by the user's web browser to track, validate, and maintain specific user information?

  A. Temporary Files

  B. Open files

  C. Cookies

  D. Web Browser Cache

  Correct Answer: C

• Question 140:

  Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

  A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

  B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProfileList

  C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegList

  D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Regedit

  Correct Answer: A