312-49v10 EC-Council Exam Questions and Free Practice Test

Question 115

- (Exam Topic 2)
In a virtual test environment, Michael is testing the strength and security of BGP using multiple routers to mimic the backbone of the Internet. This project will help him write his doctoral thesis on "bringing down the Internet". Without sniffing the traffic between the routers, Michael sends millions of RESET packets to the routers in an attempt to shut one or all of them down. After a few hours, one of the routers finally shuts itself down. What will the other routers communicate between themselves?

A. The change in the routing fabric to bypass the affected router

B. More RESET packets to the affected router to get it to power back up

C. RESTART packets to the affected router to get it to power back up

D. STOP packets to all other routers warning of where the attack originated

Correct Answer:A

Question 116

- (Exam Topic 3)
What does the bytes 0x0B-0x53 represent in the boot sector of NTFS volume on Windows 2000?

A. Jump instruction and the OEM ID

B. BIOS Parameter Block (BPB) and the OEM ID

C. BIOS Parameter Block (BPB) and the extended BPB

D. Bootstrap code and the end of the sector marker

Correct Answer:C

Question 117

- (Exam Topic 1)
You are working in the security Department of law firm. One of the attorneys asks you about the topic of sending fake email because he has a client who has been charged with doing just that. His client alleges that he is innocent and that there is no way for a fake email to actually be sent. You inform the attorney that his client is mistaken and that fake email is possibility and that you can prove it. You return to your desk and craft a fake email to the attorney that appears to come from his boss. What port do you send the email to on the company SMTP server?

A. 10

B. 25

C. 110

D. 135

Correct Answer:B

Question 118

- (Exam Topic 3)
Identify the file system that uses $BitMap file to keep track of all used and unused clusters on a volume.

A. NTFS

B. FAT

C. EXT

D. FAT32

Correct Answer:A

Question 119

- (Exam Topic 1)
To preserve digital evidence, an investigator should _______.

A. Make two copies of each evidence item using a single imaging tool

B. Make a single copy of each evidence item using an approved imaging tool

C. Make two copies of each evidence item using different imaging tools

D. Only store the original evidence item

Correct Answer:C

Question 120

- (Exam Topic 1)
George is performing security analysis for Hammond and Sons LLC. He is testing security vulnerabilities of their wireless network. He plans on remaining as "stealthy" as possible during the scan. Why would a scanner like Nessus is not recommended in this situation?

A. Nessus is too loud

B. Nessus cannot perform wireless testing

C. Nessus is not a network scanner

D. There are no ways of performing a "stealthy" wireless scan

Correct Answer:A

START 312-49v10 EXAM