EC-COUNCIL EC-COUNCIL Certifications 312-49V9 Questions & Answers

• Question 231:

  The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

  A. HIPAA

  B. Sarbanes-Oxley 2002

  C. California SB 1386

  D. Gramm-Leach-Bliley Act

  Correct Answer: D

• Question 232:

  Under confession, an accused criminal admitted to encrypting child pornography pictures and then hiding them within other pictures. What technique did the accused criminal employ?

  A. Typography

  B. Steganalysis

  C. Picture encoding

  D. Steganography

  Correct Answer: D

• Question 233:

  Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive? 22,164 cylinders/disk 80 heads/cylinder 63 sectors/track

  A. 53.26 GB

  B. 57.19 GB

  C. 11.17 GB

  D. 10 GB

  Correct Answer: A

• Question 234:

  What type of equipment would a forensics investigator store in a StrongHold bag?

  A. PDAPDA?

  B. Backup tapes

  C. Hard drives

  D. Wireless cards

  Correct Answer: D

• Question 235:

  Which is a standard procedure to perform during all computer forensics investigations?

  A. With the hard drive in the suspect PC, check the date and time in the system CMOSWith the hard drive in the suspect PC, check the date and time in the system? CMOS

  B. With the hard drive removed from the suspect PC, check the date and time in the system CMOSWith the hard drive removed from the suspect PC, check the date and time in the system? CMOS

  C. With the hard drive in the suspect PC, check the date and time in the File Allocation Table

  D. With the hard drive removed from the suspect PC, check the date and time in the system RAMWith the hard drive removed from the suspect PC, check the date and time in the system? RAM

  Correct Answer: B

• Question 236:

  Paraben Lockdown device uses which operating system to write hard drive data?Paraben? Lockdown device uses which operating system to write hard drive data?

  A. Mac OS

  B. Red Hat

  C. Unix

  D. Windows

  Correct Answer: D

• Question 237:

  A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain information on their clientele. The law firm does not have any on-site IT employees, but wants to search for evidence of the breach themselves to prevent any possible media attention. Why would this not be recommended?

  A. Searching for evidence themselves would not have any ill effects

  B. Searching could possibly crash the machine or device

  C. Searching creates cache files, which would hinder the investigation

  D. Searching can change date/time stamps

  Correct Answer: D

• Question 238:

  A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything. What is the reason for this?

  A. He should search in C:\Windows\System32\RECYCLED folder

  B. The Recycle Bin does not exist on the hard drive

  C. The files are hidden and he must use switch to view themThe files are hidden and he must use ? switch to view them

  D. Only FAT system contains RECYCLED folder and not NTFS

  Correct Answer: C

• Question 239:

  Travis, a computer forensics investigator, is finishing up a case he has been working on for over a month involving copyright infringement and embezzlement. His last task is to prepare an investigative report for the president of the company he has been working for. Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?

  A. TIFF-8

  B. DOC

  C. WPD

  D. PDF

  Correct Answer: D

• Question 240:

  What hashing method is used to password protect Blackberry devices?

  A. AES

  B. RC5

  C. MD5

  D. SHA-1

  Correct Answer: D