최신EC-COUNCIL Computer Hacking Forensic Investigator - 312-49무료샘플문제
문제1
You are a computer forensics investigator working with local police department and you are called to assist in an investigation of threatening emails. The complainant has printer out 27 email messages from the suspect and gives the printouts to you. You inform her that you will need to examine her computer because you need access to the _________________________ in order to track the emails back to the suspect.
You are a computer forensics investigator working with local police department and you are called to assist in an investigation of threatening emails. The complainant has printer out 27 email messages from the suspect and gives the printouts to you. You inform her that you will need to examine her computer because you need access to the _________________________ in order to track the emails back to the suspect.
정답: D
문제2
What stage of the incident handling process involves reporting events?
What stage of the incident handling process involves reporting events?
정답: A
문제3
Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy and integrity of the technical log files gathered in an investigation into computer fraud. What is the term used for Jacob's testimony in this case?
Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy and integrity of the technical log files gathered in an investigation into computer fraud. What is the term used for Jacob's testimony in this case?
정답: B
문제4
During an investigation of an XSS attack, the investigator comes across the term "[a-zA-Z0-9\%]+" in analyzed evidence details. What is the expression used for?
During an investigation of an XSS attack, the investigator comes across the term "[a-zA-Z0-9\%]+" in analyzed evidence details. What is the expression used for?
정답: B
문제5
You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data.
What method would be most efficient for you to acquire digital evidence from this network?
You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data.
What method would be most efficient for you to acquire digital evidence from this network?
정답: D
문제6
Which of the following files DOES NOT use Object Linking and Embedding (OLE) technology to embed and link to other objects?
Which of the following files DOES NOT use Object Linking and Embedding (OLE) technology to embed and link to other objects?
정답: D
문제7
You are working for a local police department that services a population of 1,000,000 people and you have been given the task of building a computer forensics lab. How many law-enforcement computer investigators should you request to staff the lab?
You are working for a local police department that services a population of 1,000,000 people and you have been given the task of building a computer forensics lab. How many law-enforcement computer investigators should you request to staff the lab?
정답: D
문제8
What type of flash memory card comes in either Type I or Type II and consumes only five percent of the power required by small hard drives?
What type of flash memory card comes in either Type I or Type II and consumes only five percent of the power required by small hard drives?
정답: C
문제9
If you plan to startup a suspect ' s computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect ' s hard drive by booting to the hard drive.
If you plan to startup a suspect ' s computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect ' s hard drive by booting to the hard drive.
정답: B