EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 231:

  Which of the following information is displayed when Netstat is used with -ano switch?

  A. Ethernet statistics

  B. Contents of IP routing table

  C. Details of routing table

  D. Details of TCP and UDP connections

  Correct Answer: D

• Question 232:

  Steve, a forensic investigator, was asked to investigate an email incident in his organization. The organization has Microsoft Exchange Server deployed for email communications. Which among the following files will Steve check to analyze message headers, message text, and standard attachments?

  A. PUB.EDB

  B. PRIV.EDB

  C. PUB.STM

  D. PRIV.STM

  Correct Answer: B

• Question 233:

  Which of these Windows utility help you to repair logical file system errors?

  A. Resource Monitor

  B. Disk cleanup

  C. Disk defragmenter

  D. CHKDSK

  Correct Answer: D

  Reference: https://www.easeus.com/partition-manager-software/run-chkdsk-to-check-repair-drive.html

• Question 234:

  Identify the term that refers to individuals who, by virtue of their knowledge and expertise, express an independent opinion on a matter related to a case based on the information that is provided.

  A. Expert Witness

  B. Evidence Examiner

  C. Forensic Examiner

  D. Defense Witness

  Correct Answer: A

  Reference: https://academyofexperts.org/users-of-experts/what-is-an-expert-witness/

• Question 235:

  In which of these attacks will a steganalyst use a random message to generate a stego-object by using some steganography tool, to find the steganography algorithm used to hide the information?

  A. Chosen-message attack

  B. Known-cover attack

  C. Known-message attack

  D. Known-stego attack

  Correct Answer: A

  Reference: https://www.giac.org/paper/gsec/707/steganalysis-overview/101589 (3)

• Question 236:

  Which ISO Standard enables laboratories to demonstrate that they comply with quality assurance and provide valid results?

  A. ISO/IEC 16025

  B. ISO/IEC 18025

  C. ISO/IEC 19025

  D. ISO/IEC 17025

  Correct Answer: D

• Question 237:

  Which type of attack is possible when attackers know some credible information about the victim's password, such as the password length, algorithms involved, or the strings and characters used in its creation?

  A. Rule-Based Attack

  B. Brute-Forcing Attack

  C. Dictionary Attack

  D. Hybrid Password Guessing Attack

  Correct Answer: A

  Reference: https://info-savvy.com/password-cracking-techniques/#:~:text=Attackers%20use%20the% 20rule%2Dbased,characters%20used%20in%20its%20creation

• Question 238:

  Which of the following statements is true regarding SMTP Server?

  A. SMTP Server breaks the recipient's address into Recipient's name and his/her designation before passing it to the DNS Server

  B. SMTP Server breaks the recipient's address into Recipient's name and recipient's address before passing it to the DNS Server

  C. SMTP Server breaks the recipient's address into Recipient's name and domain name before passing it to the DNS Server

  D. SMTP Server breaks the recipient's address into Recipient's name and his/her initial before passing it to the DNS Server

  Correct Answer: C

  Reference: https://ds.cs.luc.edu/smtp/smtp.html#:~:text=SMTP%20Processandtext=The%20server%20takes %20the%20TO,the%20server%20at%20that%20domain

• Question 239:

  What is the role of Alloc.c in Apache core?

  A. It handles allocation of resource pools

  B. It is useful for reading and handling of the configuration files

  C. It takes care of all the data exchange and socket connections between the client and the server

  D. It handles server start-ups and timeouts

  Correct Answer: A

• Question 240:

  Robert, a cloud architect, received a huge bill from the cloud service provider, which usually doesn't happen. After analyzing the bill, he found that the cloud resource consumption was very high. He then examined the cloud server and discovered that a malicious code was running on the server, which was generating huge but harmless traffic from the server. This means that the server has been compromised by an attacker with the sole intention to hurt the cloud customer financially. Which attack is described in the above scenario?

  A. XSS Attack

  B. DDoS Attack (Distributed Denial of Service)

  C. Man-in-the-cloud Attack

  D. EDoS Attack (Economic Denial of Service)

  Correct Answer: B

  Reference: https://sucuri.net/guides/what-is-a-ddos-attack/