EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 211:

  What is the location of a Protective MBR in a GPT disk layout?

  A. Logical Block Address (LBA) 2

  B. Logical Block Address (LBA) 0

  C. Logical Block Address (LBA) 1

  D. Logical Block Address (LBA) 3

  Correct Answer: C

  Reference: https://en.wikipedia.org/wiki/GUID_Partition_Table#:~:text=The%20protective%20MBR%20is% 20stored,a%20size%20of%20128%20bytes

• Question 212:

  Smith is an IT technician that has been appointed to his company's network vulnerability assessment team. He is the only IT employee on the team. The other team members include employees from Accounting, Management, Shipping, and Marketing. Smith and the team members are having their first meeting to discuss how they will proceed. What is the first step they should do to create the network vulnerability assessment plan?

  A. Their first step is to make a hypothesis of what their final findings will be.

  B. Their first step is to create an initial Executive report to show the management team.

  C. Their first step is to analyze the data they have currently gathered from the company or interviews.

  D. Their first step is the acquisition of required documents, reviewing of security policies and compliance.

  Correct Answer: D

• Question 213:

  Which among the following web application threats is resulted when developers expose various internal implementation objects, such as files, directories, database records, or key-through references?

  A. Remote File Inclusion

  B. Cross Site Scripting

  C. Insecure Direct Object References

  D. Cross Site Request Forgery

  Correct Answer: C

  Reference: https://www.pluralsight.com/guides/must-known-web-security-risks-for-developers

• Question 214:

  What does Locard's Exchange Principle state?

  A. Any information of probative value that is either stored or transmitted in a digital form

  B. Digital evidence must have some characteristics to be disclosed in the court of law

  C. Anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave

  D. Forensic investigators face many challenges during forensics investigation of a digital crime, such as extracting, preserving, and analyzing the digital evidence

  Correct Answer: C

• Question 215:

  Which of the following components within the android architecture stack take care of displaying windows owned by different applications?

  A. Media Framework

  B. Surface Manager

  C. Resource Manager

  D. Application Framework

  Correct Answer: D

  Reference: https://www.tutorialspoint.com/android/android_architecture.htm

• Question 216:

  James, a hacker, identifies a vulnerability in a website. To exploit the vulnerability, he visits the login page and notes down the session ID that is created. He appends this session ID to the login URL and shares the link with a victim. Once the victim logs into the website using the shared URL, James reloads the webpage (containing the URL with the session ID appended) and now, he can browse the active session

  of the victim. Which attack did James successfully execute?

  A. Cross Site Request Forgery

  B. Cookie Tampering

  C. Parameter Tampering

  D. Session Fixation Attack

  Correct Answer: D

  Reference: https://owasp.org/www-community/attacks/Session_fixation#:~:text=Session%20Fixation%20is %20an%20attack,specifically%20the%20vulnerable%20web%20application

• Question 217:

  POP3 is an Internet protocol, which is used to retrieve emails from a mail server. Through which port does an email client connect with a POP3 server?

  A. 110

  B. 143

  C. 25

  D. 993

  Correct Answer: A

  Reference: https://www.ionos.com/digitalguide/e-mail/technical-matters/imap-or-pop3-which-e-mail-protocol-to-choose/#:~:text=Each%20message%20can%20only%20be,connected%2C%20they% 20communicate%20via%20commands

• Question 218:

  Checkpoint Firewall logs can be viewed through a Check Point Log viewer that uses icons and colors in the log table to represent different security events and their severity. What does the icon in the checkpoint logs represent?

  A. The firewall rejected a connection

  B. A virus was detected in an email

  C. The firewall dropped a connection

  D. An email was marked as potential spam

  Correct Answer: C

• Question 219:

  In which cloud crime do attackers try to compromise the security of the cloud environment in order to steal data or inject a malware?

  A. Cloud as an Object

  B. Cloud as a Tool

  C. Cloud as an Application

  D. Cloud as a Subject

  Correct Answer: D

• Question 220:

  A section of your forensics lab houses several electrical and electronic equipment. Which type of fire extinguisher you must install in this area to contain any fire incident?

  A. Class B

  B. Class D

  C. Class C

  D. Class A

  Correct Answer: C