EC-COUNCIL 312-49v10問題集で100%カバー率リアル試験問題（更新された705問あります)
リアル312-49v10問題集でリアルEC-COUNCIL問題集PDF
EC-COUNCIL 312-49v10 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
質問 124
Ronald, a forensic investigator, has been hired by a financial services organization to Investigate an attack on their MySQL database server, which Is hosted on a Windows machine named WIN-DTRAI83202X. Ronald wants to retrieve information on the changes that have been made to the database. Which of the following files should Ronald examine for this task?
- A. WIN-DTRAI83202Xslow.log
- B. WIN-DTRAl83202Xrelay-bin.index
- C. WIN-DTRAI83202X-bin.nnnnnn
- D. relay-log.info
正解: A
質問 125
Jason is the security administrator of ACMA metal Corporation. One day he notices the company's Oracle database server has been compromised and the customer information along with financial data has been stolen. The financial loss will be in millions of dollars if the database gets into the hands of the competitors. Jason wants to report this crime to the law enforcement agencies immediately.
Which organization coordinates computer crimes investigations throughout the United States?
- A. Internet Fraud Complaint Center
- B. CERT Coordination Center
- C. Local or national office of the U.S. Secret Service
- D. National Infrastructure Protection Center
正解: C
質問 126
Why would a company issue a dongle with the software they sell?
- A. To provide wireless functionality with the software
- B. To provide source code protection
- C. To provide copyright protection
- D. To ensure that keyloggers cannot be used
正解: C
質問 127
Buffer overflow vulnerabilities, of web applications, occurs when the application fails to guard its buffer properly and allows writing beyond its maximum size. Thus, it overwrites the _________. There are multiple forms of buffer overflow, including a Heap Buffer Overflow and a Format String Attack.
- A. Adjacent bit blocks
- B. Adjacent buffer locations
- C. Adjacent string locations
- D. Adjacent memory locations
正解: D
質問 128
What is one method of bypassing a system BIOS password?
- A. Login to Windows and disable the BIOS password
- B. Remove all the system memory
- C. Removing the processor
- D. Removing the CMOS battery
正解: D
質問 129
Office Documents (Word, Excel and PowerPoint) contain a code that allows tracking the MAC or unique identifier of the machine that created the document. What is that code called?
- A. Personal Application Protocol
- B. Microsoft Virtual Machine Identifier
- C. Individual ASCII string
- D. Globally unique ID
正解: D
質問 130
Which of the following Windows event logs record events related to device drives and hardware changes?
- A. Application log
- B. Security log
- C. Forwarded events log
- D. System log
正解: D
質問 131
Which of the following file system is used by Mac OS X?
- A. HFS+
- B. EFS
- C. EXT2
- D. NFS
正解: A
質問 132
Recently, an Internal web app that a government agency utilizes has become unresponsive, Betty, a network engineer for the government agency, has been tasked to determine the cause of the web application's unresponsiveness. Betty launches Wlreshark and begins capturing the traffic on the local network. While analyzing the results, Betty noticed that a syn flood attack was underway. How did Betty know a syn flood attack was occurring?
- A. Wireshark capture shows multiple ACK requests and SYN responses from single/multiple IP address(es)
- B. Wireshark capture shows multiple SYN requests and RST responses from single/multiple IP address(es)
- C. Wireshark capture shows multiple SYN requests and ACK responses from single/multiple IP address(es)
- D. Wireshark capture does not show anything unusual and the issue is related to the web application
正解: B
質問 133
In a Linux-based system, what does the command "Last -F" display?
- A. Login and logout times and dates of the system
- B. Last functions performed
- C. Recently opened files
- D. Last run processes
正解: A
質問 134
An investigator has extracted the device descriptor for a 1GB thumb drive that looks like: Disk&Ven_Best_Buy&Prod_Geek_Squad_U3&Rev_6.15. What does the "Geek_Squad" part represent?
- A. Manufacturer Details
- B. Software or OS used
- C. Developer description
- D. Product description
正解: D
質問 135
An "idle" system is also referred to as what?
- A. PC not being used
- B. Zombie
- C. PC not connected to the Internet
- D. Bot
正解: B
質問 136
Which of the following is a precomputed table containing word lists like dictionary files and brute force lists and their hash values?
- A. Rainbow Table
- B. Partition Table
- C. Directory Table
- D. Master file Table (MFT)
正解: A
質問 137
Randy has extracted data from an old version of a Windows-based system and discovered info file Dc5.txt in the system recycle bin. What does the file name denote?
- A. A text file copied from D drive to C drive in fifth sequential order
- B. A text file deleted from C drive in fifth sequential order
- C. A text file copied from C drive to D drive in fifth sequential order
- D. A text file deleted from C drive in sixth sequential order
正解: B
質問 138
Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:
- A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Regedit
- B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
- C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegList
- D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProfileList
正解: B
質問 139
If a suspect computer is located in an area that may have toxic chemicals, you must:
- A. determine a way to obtain the suspect computer
- B. do not enter alone
- C. assume the suspect machine is contaminated
- D. coordinate with the HAZMAT team
正解: D
質問 140
When operating systems mark a cluster as used but not allocated, the cluster is considered as _________
- A. Bad
- B. Corrupt
- C. Lost
- D. Unallocated
正解: C
質問 141
Printing under a Windows Computer normally requires which one of the following files types to be created?
- A. EME
- B. EMF
- C. CME
- D. MEM
正解: B
質問 142
Which of the following tools is not a data acquisition hardware tool?
- A. Atola Insight Forensic
- B. Triage-Responder
- C. UltraKit
- D. F-Response Imager
正解: D
質問 143
Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?
- A. C: \$Recycle.Bin
- B. C: $Recycled.Bin
- C. C:\RECYCLER
- D. C:\$RECYCLER
正解: A
質問 144
......
実際にあるFast2test 312-49v10問題集PDFで100%合格率 保証付き：https://jp.fast2test.com/312-49v10-premium-file.html
無料EC-COUNCIL 312-49v10試験問題と解答：https://drive.google.com/open?id=1j2qaPmgGLcMlRjq624i787ug5cBOtXQj