EC1-349 Online Practice Questions and Answers

What technique used by Encase makes it virtually impossible to tamper with evidence once it has been acquired?

A. Every byte of the file(s) is given an MD5 hash to match against a master file

B. Every byte of the file(s) is verified using 32-bit CRC

C. Every byte of the file(s) is copied to three different hard drives

D. Every byte of the file(s) is encrypted using three different methods

You are called by an author who is writing a book and he wants to know how long the copyright for his book will last after he has the book published?

A. 70 years

B. The life of the author

C. The life of the author plus 70 years

D. Copyrights last forever

What type of attack occurs when an attacker can force a router to stop forwarding packets by flooding the router with many open connections simultaneously so that all the hosts behind the router are effectively disabled?

A. ARP redirect

B. Physical attack

C. Digital attack

D. Denial of service

____________________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

A. Network Forensics

B. Computer Forensics

C. Incident Response

D. Event Reaction

Where are files temporarily written in Unix when printing?

A. /usr/spool

B. /var/print

C. /spool

D. /var/spool

Click on the Exhibit Button To test your website for vulnerabilities, you type in a Quotation mark (? for the username field. After you click Ok, you receive the following error message window: What can you infer from this error window?

A. SQL injection is not possible

B. SQL injection is possible

C. The user for line 3306 in the SQL database has a weak password

D. The Quotation mark (? is a valid username

George is a senior security analyst working for a state agency in Florida. His state's congress just passed a bill mandating every state agency to undergo a security audit annually. After learning what will be required, George needs to implement an IDS as soon as possible before the first audit occurs. The state bill requires that an IDS with a "time- based induction machine" be used. What IDS feature must George implement to meet this requirement?

A. Pattern matching

B. Statistical-based anomaly detection

C. Real-time anomaly detection

D. Signature-based anomaly detection

Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

A. Files or network shares

B. Running application

C. Application logs

D. System logs

How do you define Technical Steganography?

A. Steganography that uses physical or chemical means to hide the existence of a message

B. Steganography that utilizes written natural language to hide the message in the carrier in some non-obvious ways

C. Steganography that utilizes written JAVA language to hide the message in the carrier in some non-obvious ways

D. Steganography that utilizes visual symbols or signs to hide secret messages

An intrusion detection system (IDS) gathers and analyzes information from within a computer or a network to identify any possible violations of security policy, including unauthorized access, as well as misuse.

Which of the following intrusion detection systems audit events that occur on a specific host?

A. Network-based intrusion detection

B. Host-based intrusion detection

C. Log file monitoring

D. File integrity checking