EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 641:

  Hash injection attack allows attackers to inject a compromised hash into a local session and use the hash to validate network resources.

  A. True

  B. False

  Correct Answer: A

• Question 642:

  According to US federal rules, to present a testimony in a court of law, an expert witness needs to furnish certain information to prove his eligibility. Jason, a qualified computer forensic expert who has started practicing two years back, was denied an expert testimony in a computer crime case by the US Court of Appeals for the Fourth Circuit in Richmond, Virginia. Considering the US federal rules, what could be the most appropriate reason for the court to reject Jason's eligibility as an expert witness?

  A. Jason was unable to furnish documents showing four years of previous experience in the field

  B. Being a computer forensic expert, Jason is not eligible to present testimony in a computer crime case

  C. Jason was unable to furnish documents to prove that he is a computer forensic expert

  D. Jason was not aware of legal issues involved with computer crimes

  Correct Answer: A

• Question 643:

  Which of the following passwords are sent over the wire (and wireless) network, or stored on some media as it is typed without any alteration?

  A. Clear text passwords

  B. Obfuscated passwords

  C. Hashed passwords

  D. Hex passwords

  Correct Answer: A

• Question 644:

  Billy, a computer forensics expert, has recovered a large number of DBX files during forensic investigation of a laptop. Which of the following email clients he can use to analyze the DBX files?

  A. Microsoft Outlook

  B. Microsoft Outlook Express

  C. Mozilla Thunderoird

  D. Eudora

  Correct Answer: B

• Question 645:

  Recovery of the deleted partition is the process by which the investigator evaluates and extracts the deleted partitions.

  A. True

  B. False

  Correct Answer: A

• Question 646:

  Dumpster Diving refers to:

  A. Searching for sensitive information in the user's trash bins and printer trash bins, and searching the user's desk for sticky notes

  B. Looking at either the user's keyboard or screen while he/she is logging in

  C. Convincing people to reveal the confidential information

  D. Creating a set of dictionary words and names, and trying all the possible combinations to crack the password

  Correct Answer: A

• Question 647:

  Which of the following network attacks refers to sending huge volumes of email to an address in an attempt to overflow the mailbox, or overwhelm the server where the email address is hosted, to cause a denial-of-service attack?

  A. Email spamming

  B. Mail bombing

  C. Phishing

  D. Email spoofing

  Correct Answer: B

• Question 648:

  SMTP (Simple Mail Transfer protocol) receives outgoing mail from clients and validates source and destination addresses, and also sends and receives emails to and from other SMTP servers.

  A. True

  B. False

  Correct Answer: A

• Question 649:

  Raw data acquisition format creates ____________of a data set or suspect drive.

  A. Simple sequential flat files

  B. Segmented files

  C. Compressed image files

  D. Segmented image files

  Correct Answer: A

• Question 650:

  Which of the following statements is incorrect when preserving digital evidence?

  A. Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals

  B. Verily if the monitor is in on, off, or in sleep mode

  C. Remove the power cable depending on the power state of the computer i.e., in on. off, or in sleep mode

  D. Turn on the computer and extract Windows event viewer log files

  Correct Answer: D