EC-COUNCIL ECCouncil Computer Hacking Forensic Investigator (V9) - 312-49v9 模擬練習
Richard is extracting volatile data from a system and uses the command doskey/history. What is he trying to extract?
正解: C
When a user deletes a file, the system creates a $I file to store its details. What detail does the $I file not contain?
正解: A
Paraben Lockdown device uses which operating system to write hard drive data?
正解: B
What system details can an investigator obtain from the NetBIOS name table cache?
正解: D
An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are ______________ media used to store large amounts of data and are not affected by the magnet.
正解: A
Why would you need to find out the gateway of a device when investigating a wireless attack?
正解: A
Steven has been given the task of designing a computer forensics lab for the company he works for. He has found documentation on all aspects of how to design a lab except the number of exits needed. How many exits should Steven include in his design for the computer forensics lab?
正解: A
When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the:
正解: B
Frank is working on a vulnerability assessment for a company on the West coast. The company hired Frank to assess its network security through scanning, pen tests, and vulnerability assessments. After discovering numerous known vulnerabilities detected by a temporary IDS he set up, he notices a number of items that show up as unknown but Questionable in the logs. He looks up the behavior on the Internet, but cannot find anything related. What organization should Frank submit the log to find out if it is a new vulnerability or not?
正解: D
%3cscript%3ealert("XXXXXXXX")%3c/script%3e is a script obtained from a Cross-Site Scripting attack. What type of encoding has the attacker employed?
正解: B
After undergoing an external IT audit, George realizes his network is vulnerable to DDoS attacks.
What countermeasures could he take to prevent DDoS attacks?
What countermeasures could he take to prevent DDoS attacks?
正解: B
Bob has encountered a system crash and has lost vital data stored on the hard drive of his Windows computer. He has no cloud storage or backup hard drives. he wants to recover all those data, which includes his personal photos, music, documents, videos, official email, etc. Which of the following tools shall resolve Bob's purpose?
正解: D