EC-COUNCIL EC-COUNCIL Certifications 312-49V9 Questions & Answers

• Question 461:

  WPA2 provides enterprise and Wi-Fi users with stronger data protection and network access control which of the following encryption algorithm is used DVWPA2?

  A. RC4-CCMP

  B. RC4-TKIP

  C. AES-CCMP

  D. AES-TKIP

  Correct Answer: C

• Question 462:

  JPEG is a commonly used method of compressing photographic Images. It uses a compression algorithm to minimize the size of the natural image, without affecting the quality of the image. The JPEG lossy algorithm divides the image in separate blocks of____________.

  A. 4x4 pixels

  B. 8x8 pixels

  C. 16x16 pixels

  D. 32x32 pixels

  Correct Answer: B

• Question 463:

  SIM is a removable component that contains essential information about the subscriber. It has both volatile and non-volatile memory. The file system of a SIM resides in _____________ memory.

  A. Volatile

  B. Non-volatile

  Correct Answer: B

• Question 464:

  You should always work with original evidence

  A. True

  B. False

  Correct Answer: B

• Question 465:

  When the operating system marks cluster as used, but does not allocate them to any file, such clusters are known as ___________.

  A. Lost clusters

  B. Bad clusters

  C. Empty clusters

  D. Unused clusters

  Correct Answer: A

• Question 466:

  You can interact with the Registry through intermediate programs. Graphical user interface (GUI) Registry editors such as Regedit.exe or Regedt32 exe are commonly used as intermediate programs in Windows 7. Which of the following is a root folder of the registry editor?

  A. HKEY_USERS

  B. HKEY_LOCAL_ADMIN

  C. HKEY_CLASSES_ADMIN

  D. HKEY_CLASSES_SYSTEM

  Correct Answer: A

• Question 467:

  Which is not a part of environmental conditions of a forensics lab?

  A. Large dimensions of the room

  B. Good cooling system to overcome excess heat generated by the work station

  C. Allocation of workstations as per the room dimensions

  D. Open windows facing the public road

  Correct Answer: D

• Question 468:

  Digital photography helps in correcting the perspective of the Image which Is used In taking the measurements of the evidence. Snapshots of the evidence and incident-prone areas need to be taken to help in the forensic process. Is digital photography accepted as evidence in the court of law?

  A. Yes

  B. No

  Correct Answer: A

• Question 469:

  Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?

  A. Sample banners are used to record the system activities when used by the unauthorized user

  B. In warning banners, organizations give clear and unequivocal notice to intruders that by signing onto the system they are expressly consenting to such monitoring

  C. The equipment is seized which is connected to the case, knowing the role of the computer which will indicate what should be taken

  D. At the time of seizing process, you need to shut down the computer immediately

  Correct Answer: D

• Question 470:

  What document does the screenshot represent?

  

  A. Chain of custody form

  B. Search warrant form

  C. Evidence collection form

  D. Expert witness form

  Correct Answer: A