312-49v10 EC-Council Exam Questions and Free Practice Test

Question 73

- (Exam Topic 2)
After attending a CEH security seminar, you make a list of changes you would like to perform on your network to increase its security. One of the first things you change is to switch the RestrictAnonymous setting from 0 to 1 on your servers. This, as you were told, would prevent anonymous users from establishing a null session on the server. Using Userinfo tool mentioned at the seminar, you succeed in establishing a null session with one of the servers. Why is that?

A. RestrictAnonymous must be set to "10" for complete security

B. RestrictAnonymous must be set to "3" for complete security

C. RestrictAnonymous must be set to "2" for complete security

D. There is no way to always prevent an anonymous null session from establishing

Correct Answer:C

Question 74

- (Exam Topic 1)
In Microsoft file structures, sectors are grouped together to form:

A. Clusters

B. Drives

C. Bitstreams

D. Partitions

Correct Answer:A

Question 75

- (Exam Topic 3)
Which of the following statements is TRUE about SQL Server error logs?

A. SQL Server error logs record all the events occurred on the SQL Server and its databases

B. Forensic investigator uses SQL Server Profiler to view error log files

C. Error logs contain IP address of SQL Server client connections

D. Trace files record, user-defined events, and specific system events

Correct Answer:B

Question 76

- (Exam Topic 3)
Which of the following is a responsibility of the first responder?

A. Determine the severity of the incident

B. Collect as much information about the incident as possible

C. Share the collected information to determine the root cause

D. Document the findings

Correct Answer:B

Question 77

- (Exam Topic 3)
Which command can provide the investigators with details of all the loaded modules on a Linux-based system?

A. list modules -a

B. lsmod

C. plist mod -a

D. lsof -m

Correct Answer:B

Question 78

- (Exam Topic 3)
What is the location of a Protective MBR in a GPT disk layout?

A. Logical Block Address (LBA) 2

B. Logical Block Address (LBA) 0

C. Logical Block Address (LBA) 1

D. Logical Block Address (LBA) 3

Correct Answer:C

START 312-49v10 EXAM