最新的EC-COUNCIL Computer Hacking Forensic Investigator - EC0-349免費考試真題
Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test. The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?
正確答案: A
LBA (Logical Block Address) addresses data by allotting a ___________to each sector of the hard disk.
正確答案: A
Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?
正確答案: A
Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?
正確答案: A
A rogue/unauthorized access point is one that Is not authorized for operation by a particular firm or network
正確答案: B
What should you do when approached by a reporter about a case that you are working on or have worked on?
正確答案: A
You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitive information about the company clients. You have rummaged through their trash and found very little information. You do not want to set off any alarms on their network, so you plan on performing passive footprinting against their Web servers.
What tool should you use?
What tool should you use?
正確答案: B
An investigator is searching through the firewall logs of a company and notices ICMP packets that are larger than 65,536 bytes. What type of activity is the investigator seeing?
正確答案: B
To make sure the evidence you recover and analyze with computer forensics software can be admitted in court, you must test and validate the software. What group is actively providing tools and creating procedures for testing and validating computer forensics software ?
正確答案: D
What advantage does the tool Evidor have over the built-in Windows search?
正確答案: C