This page was exported from Easily Pass By Training Lead2pass Latest Dumps
[
https://www.freebraindump.com
]
Export date: Mon Mar 25 3:40:15 2024 / +0000 GMT
Vendor: EC-Council QUESTION 1 A. Review the case investigator's request for service Answer: C QUESTION 2 A. War driving Answer: D QUESTION 3 A. The last letter of a file name is replaced by a hex byte code E5h Answer: B QUESTION 4 A. It is the process of starting a computer from a powered-down or off state Answer: A QUESTION 5 A. Restart Windows Answer: A QUESTION 6 A. RC4-CCMP Answer: C QUESTION 7 A. True Answer: B QUESTION 8 A. Bit-Stream Copy is a bit-by-bit copy of the original storage medium and exact copy of the original disk Answer: A QUESTION 9 A. True Answer: A QUESTION 10 A. Substitution techniques Answer: C QUESTION 11 A. #*06*# Answer: B QUESTION 12 A. Non-Laboratory Staff Answer: A QUESTION 13 A. Plaintext Answer: A QUESTION 14 A. True Answer: B QUESTION 15 A. Brute forcing attack Answer: B QUESTION 16 A. True Answer: A QUESTION 17 A. True Answer: B If you want to pass EC-Council EC1-349 successfully, donot missing to read latest lead2pass EC-Council EC1-349 dumps.
Exam Code: EC1-349
Exam Name: Computer Hacking Forensic Investigator Exam
Which of the following statements does not support the case assessment?
B. Identify the legal authority for the forensic examination request
C. Do not document the chain of custody
D. Discuss whether other forensic processes need to be performed on the evidence
Wireless access control attacks aim to penetrate a network by evading WLAN access control measures, such as AP MAC filters and Wi-Fi port access controls. Which of the following wireless access control attacks allows the attacker to set up a rogue access point outside the corporate perimeter, and then lure the employees of the organization to connect to it?
B. Rogue access points
C. MAC spoofing
D. Client mis-association
File deletion is a way of removing a file from a computer's file system. What happens when a file is deleted in windows7?
B. The operating system marks the file's name in the MFT with a special character that indicates that the file has been deleted
C. Corresponding clusters in FAT are marked as used
D. The computer looks at the clusters occupied by that file and does not avails space to store a new file
What is cold boot (hard boot)?
B. It is the process of restarting a computer that is already turned on through the operating system
C. It is the process of shutting down a computer from a powered-on or on state
D. It is the process of restarting a computer that is already in sleep mode
When a file or folder is deleted, the complete path, including the original file name, is stored in a special hidden file called "INF02" in the Recycled folder. If the INF02 file is deleted, it is re-created when you___________.
B. Kill the running processes in Windows task manager
C. Run the antivirus tool on the system
D. Run the anti-spyware tool on the system
WPA2 provides enterprise and Wi-Fi users with stronger data protection and network access control which of the following encryption algorithm is used DVWPA2?
B. RC4-TKIP
C. AES-CCMP
D. AES-TKIP
The disk in the disk drive rotates at high speed, and heads in the disk drive are used only to read data.
B. False
What is a bit-stream copy?
B. A bit-stream image is the file that contains the NTFS files and folders of all the data on a disk or partition
C. A bit-stream image is the file that contains the FAT32 files and folders of all the data on a disk or partition
D. Creating a bit-stream image transfers only non-deleted files from the original disk to the image disk
System software password cracking is defined as cracking the operating system and all other utilities that enable a computer to function
B. False
Which of the following Steganography techniques allows you to encode information that ensures creation of cover for secret communication?
B. Transform domain techniques
C. Cover generation techniques
D. Spread spectrum techniques
Ron. a computer forensics expert, Is Investigating a case involving corporate espionage. He has recovered several mobile computing devices from the crime scene. One of the evidence that Ron possesses is a mobile phone from Nokia that was left in on condition. Ron needs to recover the IMEI number of the device to establish the identity of the device owner. Which of the following key combinations he can use to recover the IMEI number?
B. *#06#
C. #06r
D. *1MEI#
Who is responsible for the following tasks?
Secure the scene and ensure that it is maintained In a secure state until the Forensic Team advises Make notes about the scene that will eventually be handed over to the Forensic Team
B. System administrators
C. Local managers or other non-forensic staff
D. Lawyers
A system with a simple logging mechanism has not been given much attention during development, this system is now being targeted by attackers, if the attacker wants to perform a new line injection attack, what will he/she inject into the log file?
B. Single pipe character
C. Multiple pipe characters
D. HTML tags
During the seizure of digital evidence, the suspect can be allowed touch the computer system.
B. False
Which of the following password cracking techniques works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?
B. Hybrid attack
C. Syllable attack
D. Rule-based attack
Consistency in the investigative report is more important than the exact format in the report to eliminate uncertainty and confusion.
B. False
When dealing with the powered-off computers at the crime scene, if the computer is switched off, turn it on
B. False
If you can master all lead2pass questions you will able to pass 100% guaranteed.
Post date: 2014-07-25 07:43:52
Post date GMT: 2014-07-25 07:43:52
Post modified date: 2014-07-25 07:43:52
Post modified date GMT: 2014-07-25 07:43:52
Powered by [ Universal Post Manager ] plugin. MS Word saving format developed by gVectors Team www.gVectors.com