2021 312-49 Premium Files Test pdf - Free Dumps Collection
Get ready to pass the 312-49 Exam right now using our Certified Ethical Hacker Exam Package
NEW QUESTION 89
You should make at least how many bit-stream copies of a suspect drive?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 90
While looking through the IIS log file of a web server, you find the following entries:
What is evident from this log file?
- A. SQL injection is possible
- B. Cross site scripting
- C. Hidden fields
- D. Web bugs
Answer: A
NEW QUESTION 91
What will the following command accomplish? dd if=/dev/xxx of=mbr.backup bs=512 count=1
- A. Mount the master boot record on the first partition of the hard drive
- B. Restore the master boot record
- C. Restore the first 512 bytes of the first partition of the hard drive
- D. Back up the master boot record
Answer: D
NEW QUESTION 92
The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.
- A. Locard Exchange Principle
- B. Kelly Policy
- C. Clark Standard
- D. Silver-Platter Doctrine
Answer: D
NEW QUESTION 93
Which of the following techniques delete the files permanently?
- A. Steganography
- B. Trail obfuscation
- C. Data Hiding
- D. Artifact Wiping
Answer: D
NEW QUESTION 94
Where is the startup configuration located on a router?
- A. Static RAM
- B. Dynamic RAM
- C. BootROM
- D. NVRAM
Answer: D
NEW QUESTION 95
Using Internet logging software to investigate a case of malicious use of computers, the investigator comes across some entries that appear odd.
From the log, the investigator can see where the person in question went on the Internet. From the log, it appears that the user was manually typing in different user ID numbers. What technique this user was trying?
- A. Cross site scripting
- B. Cookie Poisoning
- C. Parameter tampering
- D. SQL injection
Answer: C
NEW QUESTION 96
After attending a CEH security seminar, you make a list of changes you would like to perform on your network to increase its security. One of the first things you change is to switch the RestrictAnonymous setting from 0 to
1 on your servers. This, as you were told, would prevent anonymous users from establishing a null session on the server. Using Userinfo tool mentioned at the seminar, you succeed in establishing a null session with one of the servers. Why is that?
- A. RestrictAnonymous must be set to "3" for complete security
- B. RestrictAnonymous must be set to "2" for complete security
- C. RestrictAnonymous must be set to "10" for complete security
- D. There is no way to always prevent an anonymous null session from establishing
Answer: B
NEW QUESTION 97
Software firewalls work at which layer of the OSI model?
- A. Application
- B. Network
- C. Transport
- D. Data Link
Answer: D
NEW QUESTION 98
When operating systems mark a cluster as used but not allocated, the cluster is considered as _________
- A. Unallocated
- B. Lost
- C. Corrupt
- D. Bad
Answer: B
NEW QUESTION 99
Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM files on a computer. Where should Harold navigate on the computer to find the file?
- A. %systemroot%\repair
- B. %systemroot%\system32\drivers\etc
- C. %systemroot%\LSA
- D. %systemroot%\system32\LSA
Answer: A
NEW QUESTION 100
You have completed a forensic investigation case. You would like to destroy the data contained in various disks at the forensics lab due to sensitivity of the case. How would you permanently erase the data on the hard disk?
- A. Format the hard disk multiple times using a low level disk utility
- B. Throw the hard disk into the fire
- C. Run the powerful magnets over the hard disk
- D. Overwrite the contents of the hard disk with Junk data
Answer: B
NEW QUESTION 101
Which of the following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?
- A. Slack Space
- B. MFT
- C. Sector
- D. Metadata
Answer: A
NEW QUESTION 102
Paraben Lockdown device uses which operating system to write hard drive data?
- A. Mac OS
- B. Red Hat
- C. Unix
- D. Windows
Answer: D
NEW QUESTION 103
What method of copying should always be performed first before carrying out an investigation?
- A. Bit-stream copy
- B. Parity-bit copy
- C. MS-DOS disc copy
- D. System level copy
Answer: A
NEW QUESTION 104
......
Master 2021 Latest The Questions Certified Ethical Hacker and Pass 312-49 Real Exam!: https://www.real4dumps.com/312-49_examcollection.html
