312-49v10 EC-Council Exam Questions and Free Practice Test

Question 31

- (Exam Topic 2)
Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where “x” represents the ________.

A. Drive name

B. Original file name’s extension

C. Sequential number

D. Original file name

Correct Answer:A

Question 32

- (Exam Topic 3)
Which program uses different techniques to conceal a malware's code, thereby making it difficult for security mechanisms to detect or remove it?

A. Dropper

B. Packer

C. Injector

D. Obfuscator

Correct Answer:D

Question 33

- (Exam Topic 1)
Which of the following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?

A. Sector

B. Metadata

C. MFT

D. Slack Space

Correct Answer:D

Question 34

- (Exam Topic 3)
Gary is checking for the devices connected to USB ports of a suspect system during an investigation. Select the appropriate tool that will help him document all the connected devices.

A. DevScan

B. Devcon

C. fsutil

D. Reg.exe

Correct Answer:B

Question 35

- (Exam Topic 1)
Bill is the accounting manager for Grummon and Sons LLC in Chicago. On a regular basis, he needs to send PDF documents containing sensitive information through E-mail to his customers.
Bill protects the PDF documents with a password and sends them to their intended recipients. Why PDF passwords do not offer maximum protection?

A. PDF passwords can easily be cracked by software brute force tools

B. PDF passwords are converted to clear text when sent through E-mail

C. PDF passwords are not considered safe by Sarbanes-Oxley

D. When sent through E-mail, PDF passwords are stripped from the document completely

Correct Answer:A

Question 36

- (Exam Topic 2)
Stephen is checking an image using Compare Files by The Wizard, and he sees the file signature is shown as FF D8 FF E1. What is the file type of the image?

A. gif

B. bmp

C. jpeg

D. png

Correct Answer:C

START 312-49v10 EXAM