EC0-349無料問題集「EC-COUNCIL Computer Hacking Forensic Investigator」

質問 1

When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?

（A）Microsoft Exchange server

（B）Blackberry Enterprise server

（C）Blackberry desktop redirector

（D）RIM Messaging center

正解：A 解答を投票する

質問 2

What is a SCSI (Small Computer System Interface)?

（A）A point-to-point serial bi-directional interface for transmitting data between computer devices at data rates of up to 4 Gbps

（B）A set of ANSI standard electronic interfaces that allow personal computers to communicate with peripheral hardware such as disk drives, tape drives. CD-ROM drives, printers, and scanners

（C）A "plug-and-play" interface, which allows a device to be added without an adapter card and without rebooting the computer

（D）A standard electronic interface used between a computer motherboard's data paths or bus and the computer's disk storage devices

正解：B 解答を投票する

質問 3

Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as
http://www.juggyDoy.corn/GET/process.php./././././././././etc/passwd.
Identify the attack referred.

（A）SQL Injection

（B）File injection

（C）XSS attack

（D）Directory traversal

正解：D 解答を投票する

質問 4

What is one method of bypassing a system BIOS password?

（A）Removing the processor

（B）Removing the CMOS battery

（C）Remove all the system memoryRemove all the system? memory

（D）Login to Windows and disable the BIOS password

正解：B 解答を投票する

質問 5

Chris has been called upon to investigate a hacking incident reported by one of his clients. The company suspects the involvement of an insider accomplice in the attack. Upon reaching the incident scene, Chris secures the physical area, records the scene using visual media. He shuts the system down by pulling the power plug so that he does not disturb the system in any way. He labels all cables and connectors prior to disconnecting any. What do you think would be the next sequence of events?

（A）Prepare the system for acquisition; Connect the target media; Copy the media; Secure the evidence

（B）Connect the target media; Delete the system for acquisition; Secure the evidence; Copy the media

（C）Connect the target media; Prepare the system for acquisition; Secure the evidence; Copy the media

（D）Secure the evidence; Prepare the system for acquisition; Connect the target media; Copy the media

正解：A 解答を投票する

質問 6

Raw data acquisition format creates ____________of a data set or suspect drive.

（A）Simple sequential flat files

（B）Segmented files

（C）Segmented image files

（D）Compressed image files

正解：A 解答を投票する

質問 7

Printing under a Windows Computer normally requires which one of the following files types to be created?

（A）EME

（B）EMF

（C）MEM

（D）CME

正解：B 解答を投票する

質問 8

Which of the following is not a part of the technical specification of the laboratory-based imaging system?

（A）Remote preview and imaging pod

（B）very low image capture rate

（C）High performance workstation PC

（D）Anti-repudiation techniques

正解：B 解答を投票する

質問 9

Why would you need to find out the gateway of a device when investigating a wireless attack?

（A）The gateway will be the IP of the attacker computerThe gateway will be the IP of the attacker?
computer

（B）The gateway will be the IP used to manage the RADIUS server

（C）The gateway will be the IP of the proxy server used by the attacker to launch the attack

（D）The gateway will be the IP used to manage the access point

正解：D 解答を投票する

質問 10

Network forensics allows Investigators to inspect network traffic and logs to identify and locate the attack system.
Network forensics can reveal: (Select three answers)

（A）Source of security incidents' and network attacks

（B）Path of the attack

（C）Intrusion techniques used by attackers

（D）Hardware configuration of the attacker's system

正解：A、B、C 解答を投票する

質問 11

You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for an open position: 7+ years experience in Windows Server environment 5+ years experience in Exchange 2000/2003 environment Experience with Cisco Pix Firewall, Linksys
1376 router, Oracle 11i and MYOB v3.4 Accounting software are reQuired MCSA desired, MCSE, CEH preferred No Unix/Linux Experience needed What is this information posted on the job website considered?

（A）Social engineering exploit

（B）Information vulnerability

（C）Competitive exploit

（D）Trade secret

正解：B 解答を投票する

質問 12

A computer forensics investigator is inspecting the firewall logs for a large financial institution that has employees working 24 hours a day, 7 days a week.

What can the investigator infer from the screenshot seen below?

（A）Buffer overflow attempt on the firewall.

（B）A denial of service has been attempted

（C）Network intrusion has occurred

（D）A smurf attack has been attempted

正解：C 解答を投票する

質問 13

Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where, "X" represents the _________.

（A）Original file name

（B）Original file name's extension

（C）Sequential number

（D）Drive name

正解：D 解答を投票する

質問 14

Which of the following file in Novel GroupWise stores information about user accounts?

（A）ngwguard.db

（B）PRIV.STM

（C）PRIV.EDB

（D）gwcheck.db

正解：A 解答を投票する

質問 15

When carrying out a forensics investigation, why should you never delete a partition on a dynamic disk?

（A）All virtual memory will be deleted

（B）This action can corrupt the disk

（C）The computer will be set in a constant reboot state

（D）The wrong partition may be set to active

正解：B 解答を投票する

質問 16

How often must a company keep log files for them to be admissible in a court of law?

（A）Continuously

（B）Monthly

（C）Weekly

（D）All log files are admissible in court no matter their frequency

正解：A 解答を投票する

質問 17

You should always work with original evidence

（A）False

（B）True

正解：A 解答を投票する

質問 18

In Microsoft file structures, sectors are grouped together to form:

（A）Clusters

（B）Partitions

（C）Drives

（D）Bitstreams

正解：A 解答を投票する

質問 19

Router log files provide detailed Information about the network traffic on the Internet. It gives information about the attacks to and from the networks. The router stores log files in the____________.

（A）Application logs

（B）IDS logs

（C）Audit logs

（D）Router cache

正解：D 解答を投票する

EC0-349 無料問題集「EC-COUNCIL Computer Hacking Forensic Investigator」

弊社を連絡する

関連リンク

トップ試験