2024年最新のEC0-349試験問題集で最近更新された490問題
EC-COUNCIL EC0-349リアル2024年最新のブレーン問題集で模擬試験問題集
質問 # 116
The Recycle Bin is located on the Windows desktop. When you delete an item from the hard disk, Windows sends that deleted item to the Recycle Bin and the icon changes to full from empty, but items deleted from removable media, such as a floppy disk or network drive, are not stored in the Recycle Bin.
What is the size limit for Recycle Bin in Vista and later versions of the Windows?
- A. Maximum of 3.99 GB
- B. No size limit
- C. Maximum of 4.99 GB
- D. Maximum of 5.99 GB
正解：B
質問 # 117
What will the following URL produce in an unpatched IIS Web Server?
http://www.thetargetsite.com/scripts/..% co%af../..%co%af../windows/system32/cmd.exe?/c+dir+c:\
- A. Directory listing of C: drive on the web server
- B. Insert a Trojan horse into the C: drive of the web server
- C. Directory listing of the C:\windows\system32 folder on the web server
- D. Execute a buffer flow in the C: drive of the web server
正解：A
質問 # 118
Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and zombies? What type of Penetration Testing is Larry planning to carry out?
- A. Router Penetration Testing
- B. Firewall Penetration Testing
- C. Internal Penetration Testing
- D. DoS Penetration Testing
正解：D
質問 # 119
Centralized logging is defined as gathering the computer system logs for a group of systems in a centralized location.
It is used to efficiently monitor computer system logs with the frequency required to detect security violations and unusual activity.
- A. True
- B. False
正解：A
質問 # 120
You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for an open position: 7+ years experience in Windows Server environment 5+ years experience in Exchange 2000/2003 environment Experience with Cisco Pix Firewall, Linksys 1376 router, Oracle 11i and MYOB v3.4 Accounting software are required MCSA desired, MCSE, CEH preferred No Unix/Linux Experience needed What is this information posted on the job website considered?
- A. Trade secret
- B. Social engineering exploit
- C. Information vulnerability
- D. Competitive exploit
正解：C
質問 # 121
Madison is on trial for allegedly breaking into her university internal network. The police raided her dorm room and seized all of her computerMadison is on trial for allegedly breaking into her university? internal network. The police raided her dorm room and seized all of her computer equipment. Madison lawyer is trying to convince the judge that the seizure was unfounded and baseless. Under which US Amendment isequipment.
Madison? lawyer is trying to convince the judge that the seizure was unfounded and baseless. Under which US Amendment is Madison lawyer trying to prove the police violated?Madison? lawyer trying to prove the police violated?
- A. The 4th Amendment
- B. The 10th Amendment
- C. The 5th Amendment
- D. The 1st Amendment
正解：A
質問 # 122
What feature of Windows is the following command trying to utilize?
- A. Slack file
- B. ADS
- C. AFS
- D. White space
正解：B
質問 # 123
Chris has been called upon to investigate a hacking incident reported by one of his clients.
The company suspects the involvement of an insider accomplice in the attack. Upon reaching the incident scene, Chris secures the physical area, records the scene using visual media. He shuts the system down by pulling the power plug so that he does not disturb the system in any way. He labels all cables and connectors prior to disconnecting any. What do you think would be the next sequence of events?
- A. Connect the target media; Delete the system for acquisition; Secure the evidence; Copy the media
- B. Prepare the system for acquisition; Connect the target media; Copy the media; Secure the evidence
- C. Secure the evidence; Prepare the system for acquisition; Connect the target media; Copy the media
- D. Connect the target media; Prepare the system for acquisition; Secure the evidence; Copy the media
正解：B
質問 # 124
After passively scanning the network of Department of Defense (DoD), you switch over to active scanning to identify live hosts on their network. DoD is a large organization and should respond to any number of scans.
You start an ICMP ping sweep by sending an IP packet to the broadcast address. Only five hosts respond to your ICMP pings; definitely not the number of hosts you were expecting. Why did this ping sweep only produce a few responses?
- A. Only Unix and Unix-like systems will reply to this scan
- B. Only IBM AS/400 will reply to this scan
- C. Only Windows systems will reply to this scan
- D. A switched network will not respond to packets sent to the broadcast address
正解：A
質問 # 125
The police believe that Mevin Matthew has been obtaining unauthorized access to computers belonging to numerous computer software and computer operating systems manufacturers, cellular telephone manufacturers, Internet Service Providers, and educational institutions. They also suspect that he has been stealing, copying, and misappropriating proprietary computer software belonging to the several victim companies. What is preventing the police from breaking down the suspect door and searching his home and seizing all of his computer equipment if they haveis preventing the police from breaking down the suspect? door and searching his home and seizing all of his computer equipment if they have not yet obtained a warrant?
- A. The Good Samaritan Laws
- B. The Fourth Amendment
- C. The Federal Rules of Evidence
- D. The USA Patriot Act
正解：B
質問 # 126
How often must a company keep log files for them to be admissible in a court of law?
- A. Weekly
- B. Monthly
- C. All log files are admissible in court no matter their frequency
- D. Continuously
正解：D
質問 # 127
A computer forensics investigator is inspecting the firewall logs for a large financial institution that has employees working 24 hours a day, 7 days a week.
What can the investigator infer from the screenshot seen below?
- A. A denial of service has been attempted
- B. Buffer overflow attempt on the firewall.
- C. Network intrusion has occurred
- D. A smurf attack has been attempted
正解：C
質問 # 128
What is the following command trying to accomplish?
- A. Verify that UDP port 445 is closed for the 192.168.0.0 network
- B. Verify that NETBIOS is running for the 192.168.0.0 network
- C. Verify that UDP port 445 is open for the 192.168.0.0 network
- D. Verify that TCP port 445 is open for the 192.168.0.0 network
正解：C
質問 # 129
The evolution of web services and their increasing use in business offers new attack vectors in an application framework. Web services are based on XML protocols such as web Services Definition Language (WSDL) for describing the connection points, Universal Description, Discovery, and Integration (UDDI) for the description and discovery of Web services and Simple Object Access Protocol (SOAP) for communication between Web services that are vulnerable to various web application threats. Which of the following layer in web services stack is vulnerable to fault code leaks?
- A. Presentation Layer
- B. Access Layer
- C. Security Layer
- D. Discovery Layer
正解：D
質問 # 130
The MD5 program is used to:
- A. wipe magnetic media before recycling it
- B. make directories on an evidence disk
- C. verify that a disk is not altered when you examine it
- D. view graphics files on an evidence drive
正解：C
質問 # 131
You are a computer forensics investigator working with local police department and you are called to assist in an investigation of threatening emails. The complainant has printer out 27 email messages from the suspect and gives the printouts to you. You inform her that you will need to examine her computer because you need access to the _________________________ in order to track the emails back to the suspect.
- A. Configuration files
- B. Routing Table
- C. Email Header
- D. Firewall log
正解：C
質問 # 132
Using Internet logging software to investigate a case of malicious use of computers, the investigator comes across some entries that appear odd.
From the log, the investigator can see where the person in question went on the Internet. From the log, it appears that the user was manually typing in different user ID numbers. What technique this user was trying?
- A. Cross site scripting
- B. Parameter tampering
- C. SQL injection
- D. Cookie Poisoning
正解：B
質問 # 133
When operating systems mark a cluster as used but not allocated, the cluster is considered as
_________
- A. Corrupt
- B. Lost
- C. Unallocated
- D. Bad
正解：B
質問 # 134
Preparing an image drive to copy files to is the first step in Linux forensics. For this purpose, what would the following command accomplish?
dcfldd if=/dev/zero of=/dev/hda bs=4096 conv=noerror, sync
- A. Fill the disk with 4096 zeros
- B. Low-level format
- C. Copy files from the master disk to the slave disk on the secondary IDE controller
- D. Fill the disk with zeros
正解：D
質問 # 135
......
厳密検証されたEC0-349試験問題集と解答で無料提供のEC0-349問題と正解付き：https://www.jpntest.com/shiken/EC0-349-mondaishu
EC0-349試験問題 リアルEC0-349練習問題集：https://drive.google.com/open?id=1tJn5qUyrckzLXypNWRlh3uZRmoQBD_5q