EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 171:

  In which registry does the system store the Microsoft security IDs?

  A. HKEY_CLASSES_ROOT (HKCR)

  B. HKEY_CURRENT_CONFIG (HKCC)

  C. HKEY_CURRENT_USER (HKCU)

  D. HKEY_LOCAL_MACHINE (HKLM)

  Correct Answer: D

• Question 172:

  Which of the following is a device monitoring tool?

  A. Capsa

  B. Driver Detective

  C. Regshot

  D. RAM Capturer

  Correct Answer: A

• Question 173:

  What system details can an investigator obtain from the NetBIOS name table cache?

  A. List of files opened on other systems

  B. List of the system present on a router

  C. List of connections made to other systems

  D. List of files shared between the connected systems

  Correct Answer: C

• Question 174:

  %3cscript%3ealert(”XXXXXXXX”)%3c/script%3e is a script obtained from a Cross-Site Scripting attack. What type of encoding has the attacker employed?

  A. Double encoding

  B. Hex encoding

  C. Unicode

  D. Base64

  Correct Answer: B

• Question 175:

  As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

  A. DBCC LOG(Transfers, 1)

  B. DBCC LOG(Transfers, 3)

  C. DBCC LOG(Transfers, 0)

  D. DBCC LOG(Transfers, 2)

  Correct Answer: D

• Question 176:

  Which of the following file system uses Master File Table (MFT) database to store information about every file and directory on a volume?

  A. FAT File System

  B. ReFS

  C. exFAT

  D. NTFS File System

  Correct Answer: D

• Question 177:

  During an investigation, Noel found the following SIM card from the suspect's mobile. What does the code 89 44 represent?

  

  A. Issuer Identifier Number and TAC

  B. Industry Identifier and Country code

  C. Individual Account Identification Number and Country Code

  D. TAC and Industry Identifier

  Correct Answer: B

• Question 178:

  Which principle states that “anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave”?

  A. Locard's Exchange Principle

  B. Enterprise Theory of Investigation

  C. Locard's Evidence Principle

  D. Evidence Theory of Investigation

  Correct Answer: A

• Question 179:

  Which of the following does not describe the type of data density on a hard disk?

  A. Volume density

  B. Track density

  C. Linear or recording density

  D. Areal density

  Correct Answer: A

• Question 180:

  Amelia has got an email from a well-reputed company stating in the subject line that she has won a prize money, whereas the email body says that she has to pay a certain amount for being eligible for the contest. Which of the following acts does the email breach?

  A. CAN-SPAM Act

  B. HIPAA

  C. GLBA

  D. SOX

  Correct Answer: A