EC1-349問題集、EC-COUNCIL実際の試験問題

質問 1

WPA2 provides enterprise and Wi-Fi users with stronger data protection and network access control which of the following encryption algorithm is used DVWPA2?

A. RC4-TKIP

B. AES-CCMP

C. AES-TKIP

D. RC4-CCMP

正解: B

質問 2

What is a SCSI (Small Computer System Interface)?

A. A "plug-and-play" interface, which allows a device to be added without an adapter card and without rebooting the computer

B. A standard electronic interface used between a computer motherboard's data paths or bus and the computer's disk storage devices

C. A point-to-point serial bi-directional interface for transmitting data between computer devices at data rates of up to 4 Gbps

D. A set of ANSI standard electronic interfaces that allow personal computers to communicate with peripheral hardware such as disk drives, tape drives. CD-ROM drives, printers, and scanners

正解: D

質問 3

Dumpster Diving refers to:

A. Searching for sensitive information in the user's trash bins and printer trash bins, and searching the user's desk for sticky notes

B. Creating a set of dictionary words and names, and trying all the possible combinations to crack the password

C. Looking at either the user's keyboard or screen while he/she is logging in

D. Convincing people to reveal the confidential information

正解: A

質問 4

Deposition enables opposing counsel to preview an expert witness's testimony at trial. Which of the following deposition is not a standard practice?

A. Opposing counsel asks questions

B. Only one attorneys is present

C. No jury or judge

D. Both attorneys are present

正解: B

質問 5

Which of the following statement is not correct when dealing with a powered-on computer at the crime scene?

A. If a computer is switched on and the screen is viewable, record the programs running on screen and photograph the screen

B. If a computer is on and the monitor shows some picture or screen saver, move the mouse slowly without depressing any mouse button and take a photograph of the screen and record the information displayed

C. If a monitor is powered on and the display is blank, move the mouse slowly without depressing any mouse button and take a photograph

D. If the computer is switched off. power on the computer to take screenshot of the desktop

正解: D

質問 6

During the seizure of digital evidence, the suspect can be allowed touch the computer system.

A. True

B. False

正解: B

質問 7

Recovery of the deleted partition is the process by which the investigator evaluates and extracts the deleted partitions.

A. True

B. False

正解: A

質問 8

Router log files provide detailed Information about the network traffic on the Internet. It gives information about the attacks to and from the networks. The router stores log files in the____________.

A. Audit logs

B. IDS logs

C. Application logs

D. Router cache

正解: D

質問 9

FAT32 is a 32-bit version of FAT file system using smaller clusters and results in efficient storage capacity. What is the maximum drive size supported?

A. 3 terabytes

B. 2 terabytes

C. 1 terabytes

D. 4 terabytes

正解: B

質問 10

Which of the following log injection attacks uses white space padding to create unusual log entries?

A. Word wrap abuse attack

B. HTML injection attack

C. Terminal injection attack

D. Timestamp injection attack

正解: A

質問 11

Wi-Fi Protected Access (WPA) is a data encryption method for WLANs based on 802.11 standards. Temporal Key Integrity Protocol (TKIP) enhances WEP by adding a rekeying mechanism to provide fresh encryption and integrity keys. Temporal keys are changed for every____________.

A. 20.000 packets

B. 15,000 packets

C. 5,000 packets

D. 10.000 packets

正解: D

EC-COUNCIL Computer Hacking Forensic Investigator - EC1-349 模擬練習