EC-COUNCIL EC-COUNCIL Certifications 312-49V8 Questions & Answers

• Question 91:

  Which of the following is not a part of the technical specification of the laboratory-based imaging system?

  A. High performance workstation PC

  B. Remote preview and imaging pod

  C. Anti-repudiation techniques

  D. very low image capture rate

  Correct Answer: D

• Question 92:

  Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?

  A. Sample banners are used to record the system activities when used by the unauthorized user

  B. In warning banners, organizations give clear and unequivocal notice to intruders that by signing onto the system they are expressly consenting to such monitoring

  C. The equipment is seized which is connected to the case, knowing the role of the computer which will indicate what should be taken

  D. At the time of seizing process, you need to shut down the computer immediately

  Correct Answer: D

• Question 93:

  An image is an artifact that reproduces the likeness of some subject. These are produced by optical devices (i.e. cameras, mirrors, lenses, telescopes, and microscopes).

  Which property of the image shows you the number of colors available for each pixel in an image?

  A. Pixel

  B. Bit Depth

  C. File Formats

  D. Image File Size

  Correct Answer: B

• Question 94:

  Syslog is a client/server protocol standard for forwarding log messages across an IP network. Syslog uses ___________to transfer log messages in a clear text format.

  A. TCP

  B. FTP

  C. SMTP

  D. POP

  Correct Answer: A

• Question 95:

  Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.

  A. True

  B. False

  Correct Answer: A

• Question 96:

  Which of the following log injection attacks uses white space padding to create unusual log entries?

  A. Word wrap abuse attack

  B. HTML injection attack

  C. Terminal injection attack

  D. Timestamp injection attack

  Correct Answer: A

• Question 97:

  Which of the following is not correct when documenting an electronic crime scene?

  A. Document the physical scene, such as the position of the mouse and the location of components near the system

  B. Document related electronic components that are difficult to find

  C. Record the condition of the computer system, storage media, electronic devices and conventional evidence, including power status of the computer

  D. Write down the color of shirt and pant the suspect was wearing

  Correct Answer: D

• Question 98:

  Digital evidence is not fragile in nature.

  A. True

  B. False

  Correct Answer: B

• Question 99:

  When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to the audit policy are recorded as entries of Event ID____________.

  A. 4902

  B. 3902

  C. 4904

  D. 3904

  Correct Answer: A

• Question 100:

  Which of the following network attacks refers to sending huge volumes of email to an address in an attempt to overflow the mailbox, or overwhelm the server where the email address is hosted, to cause a denial-of-service attack?

  A. Email spamming

  B. Mail bombing

  C. Phishing

  D. Email spoofing

  Correct Answer: B