EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 331:

  Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer. Where should Harold navigate on the computer to find the file?

  A. %systemroot%\LSA

  B. %systemroot%\system32\drivers\etc

  C. %systemroot%\repair

  D. %systemroot%\system32\LSA

  Correct Answer: C

• Question 332:

  If a suspect computer is located in an area that may have toxic chemicals, you must:

  A. coordinate with the HAZMAT team

  B. determine a way to obtain the suspect computer

  C. assume the suspect machine is contaminated

  D. do not enter alone

  Correct Answer: A

• Question 333:

  Paul's company is in the process of undergoing a complete security audit including logical and physical security testing. After all logical tests were performed; it is now time for the physical round to begin. None of the employees are made aware of this round of testing. The security-auditing firm sends in a technician dressed as an electrician. He waits outside in the lobby for some employees to get to work and follows behind them when they access the restricted areas. After entering the main office, he is able to get into the server room telling the IT manager that there is a problem with the outlets in that room. What type of attack has the technician performed?

  A. Fuzzing

  B. Tailgating

  C. Backtrapping

  D. Man trap attack

  Correct Answer: B

• Question 334:

  Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and zombies? What type of Penetration Testing is Larry planning to carry out?

  A. Router Penetration Testing

  B. DoS Penetration Testing

  C. Internal Penetration Testing

  D. Firewall Penetration Testing

  Correct Answer: B

• Question 335:

  The use of warning banners helps a company avoid litigation by overcoming an employees assumed _________ when connecting to the company intranet, network, or virtual private network (VPN) and will allow the company investigators to monitor, search, and retrievecompany? intranet, network, or virtual private network (VPN) and will allow the company? investigators to monitor, search, and retrieve information stored within the network.

  A. Right to work

  B. Right of free speech

  C. Right to Internet access

  D. Right of privacy

  Correct Answer: D

• Question 336:

  What is considered a grant of a property right given to an individual who discovers or invents a new machine, process, useful composition of matter or manufacture?

  A. Copyright

  B. Design patent

  C. Trademark

  D. Utility patent

  Correct Answer: D

• Question 337:

  When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?

  A. Passive IDS

  B. Active IDS

  C. NIPS

  D. Progressive IDS

  Correct Answer: B

• Question 338:

  How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

  A. 16

  B. 32

  C. 64

  D. 48

  Correct Answer: B

• Question 339:

  Which part of the Windows Registry contains the user's password file?

  A. HKEY_LOCAL_MACHINE

  B. HKEY_CURRENT_CONFIGURATION

  C. HKEY_USER

  D. HKEY_CURRENT_USER

  Correct Answer: AD

• Question 340:

  Law enforcement officers are conducting a legal search for which a valid warrant was obtained. While conducting the search, officers observe an item of evidence for an unrelated crime that was not included in the warrant. The item was clearly visible to the officers and immediately identified as evidence. What is the term used to describe how this evidence is admissible?

  A. Plain view doctrine

  B. Corpus delicti

  C. Locard Exchange Principle

  D. Ex Parte Order

  Correct Answer: A