112-57無料問題集「EC-COUNCIL EC-Council Digital Forensics Essentials (DFE)」

質問 1

Kane, an investigation specialist, was appointed to investigate an incident in an organization's network. In this process, Kane executed a command and identified that a network interface is running in the promiscuous mode and is allowing all incoming packets without any restriction.
In the above scenario, which of the following commands did Kane use to check whether the network interface is set to the promiscuous mode?

（A）netstat -i

（B）nmap -sT localhost

（C）ipconfig <interface name>

（D）ifconfig <interface name>

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Given below is a regex signature used by security professionals for detecting an XSS attack:
/((%3C)|<)[^\n]+((%3E)|>)/i
Which of the following types of XSS attack does the above regex expression detect?

（A）CSS attack

（B）HTML tags-based XSS attempt

（C）Simple XSS attack

（D）In-line comment XSS attack

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following files belonging to the Extensible Storage Engine (ESE) stores the mail data in Microsoft Exchange Server?

（A）Mail.MSMessageStore

（B）WLCalendarStore.edb

（C）DataStore.edb

（D）Database.edb

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Cooper, a forensic analyst, was examining a RAM dump extracted from a Linux system. In this process, he employed an automated tool, Volatility Framework, to identify any malicious code hidden inside the memory.
Which of the following plugins of the Volatility Framework helps Cooper detect hidden or injected files in the memory?

（A）linux_malfind

（B）ip addr show

（C）linux_netstat

（D）nmap -sU localhost

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Jack, a forensic investigator, was appointed by an organization to perform a security audit on a Linux system.
In this process, Jack collected information about the present status of the system and listed all the applications running on various ports to detect malicious programs.
Which of the following commands can help Jack determine any programs/processes associated with open ports?

（A）netstat -i

（B）ip r

（C）netstat -rn

（D）netstat -tulpn

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of the following file systems is developed by Apple to support Mac OS in its proprietary Macintosh system and replace the Macintosh File System (MFS)?

（A）Apple File System

（B）Filesystem Hierarchy Standard

（C）New Technology File System

（D）Hierarchical File System

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

In which of the following attacks does an attacker trick high-profile executives such as CEOs, CFOs, politicians, and celebrities to reveal critical corporate and personal information through email or website spoofing?

（A）Spimming

（B）Smishing

（C）Identity fraud

（D）Whaling

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Sam is working as a loan agent for a financial institution. He frequently receives a number of emails from clients providing their personal details for loan approval. As these emails contain sensitive data, Sam had set up a feature that directly downloads the emails on his device without storing a copy on the mail server. Which of the following protocols provides the above-discussed email features?

（A）ICMP

（B）SNMP

（C）POP3

（D）SHA-1

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

112-57 無料問題集「EC-COUNCIL EC-Council Digital Forensics Essentials (DFE)」

弊社を連絡する

関連リンク

トップ試験