EC-COUNCIL EC-COUNCIL Certifications 312-49V8 Questions & Answers

• Question 61:

  Identify the attack from following sequence of actions? Step 1: A user logs in to a trusted site and creates a new session Step 2: The trusted site stores a session identifier for the session in a cookie in the web browser Step 3: The user is tricked to visit a malicious site Step 4: the malicious site sends a request from the user's browser using his session cookie

  A. Web Application Denial-of-Service (DoS) Attack

  B. Cross-Site Scripting (XSS) Attacks

  C. Cross-Site Request Forgery (CSRF) Attack

  D. Hidden Field Manipulation Attack

  Correct Answer: C

• Question 62:

  Steganography is a technique of hiding a secret message within an ordinary message and extracting it at the destination to maintain the confidentiality of data.

  A. True

  B. False

  Correct Answer: A

• Question 63:

  Which of the following Wi-Fi chalking methods refers to drawing symbols in public places to advertise open Wi-Fi networks?

  A. WarWalking

  B. WarFlying

  C. WarChalking

  D. WarDhving

  Correct Answer: C

• Question 64:

  If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire 32 K will be allocated, resulting In 22 K of___________.

  A. Slack space

  B. Deleted space

  C. Cluster space

  D. Sector space

  Correct Answer: A

• Question 65:

  Dumpster Diving refers to:

  A. Searching for sensitive information in the user's trash bins and printer trash bins, and searching the user's desk for sticky notes

  B. Looking at either the user's keyboard or screen while he/she is logging in

  C. Convincing people to reveal the confidential information

  D. Creating a set of dictionary words and names, and trying all the possible combinations to crack the password

  Correct Answer: A

• Question 66:

  A swap file is a space on a hard disk used as the virtual memory extension of a computer's RAM. Where is the hidden swap file in Windows located?

  A. C:\pagefile.sys

  B. C:\hiberfil.sys

  C. C:\config.sys

  D. C:\ALCSetup.log

  Correct Answer: A

• Question 67:

  Which of the following reports are delivered under oath to a board of directors/managers/panel of jury?

  A. Written informal Report

  B. Verbal Formal Report

  C. Written Formal Report

  D. Verbal Informal Report

  Correct Answer: B

• Question 68:

  Centralized logging is defined as gathering the computer system logs for a group of systems in a centralized location. It is used to efficiently monitor computer system logs with the frequency required to detect security violations and unusual activity.

  A. True

  B. False

  Correct Answer: A

• Question 69:

  Smith, as a part his forensic investigation assignment, has seized a mobile device. He was asked to recover the Subscriber Identity Module (SIM card) data the mobile device. Smith found that the SIM was protected by a Personal identification Number (PIN) code but he was also aware that people generally leave the PIN numbers to the defaults or use easily guessable numbers such as 1234. He unsuccessfully tried three PIN numbers that blocked the SIM card. What Jason can do in this scenario to reset the PIN and access SIM data?

  A. He should contact the device manufacturer for a Temporary Unlock Code (TUK) to gain access to the SIM

  B. He cannot access the SIM data in this scenario as the network operators or device manufacturers have no idea about a device PIN

  C. He should again attempt PIN guesses after a time of 24 hours

  D. He should ask the network operator for Personal Unlock Number (PUK) to gain access to the SIM

  Correct Answer: D

• Question 70:

  First responder is a person who arrives first at the crime scene and accesses the victim's computer system after the incident. He or She is responsible for protecting, integrating, and preserving the evidence obtained from the crime scene.

  Which of the following is not a role of first responder?

  A. Identify and analyze the crime scene

  B. Protect and secure the crime scene

  C. Package and transport the electronic evidence to forensics lab

  D. Prosecute the suspect in court of law

  Correct Answer: D