312-49v9 EC-Council Exam Questions and Free Practice Test

Question 67

- (Topic 1)
Recovery of the deleted partition is the process by which the investigator evaluates and extracts the deleted partitions.

A. True

B. False

Correct Answer:A

Question 68

- (Topic 3)
What will the following URL produce in an unpatched IIS Web Server? http://www.thetargetsite.com/scripts/..% co

A. Directory listing of C: drive on the web server

B. Execute a buffer flow in the C: drive of the web server

C. Directory listing of the C:\windows\system32 folder on the web server

D. Insert a Trojan horse into the C: drive of the web server

Correct Answer:A

Question 69

- (Topic 1)
The status of the network interface cards (NICs) connected to a system gives information about whether the system is connected to a wireless access point and what IP address is being used.
Which command displays the network configuration of the NICs on the system?

A. ipconfig /all

B. netstat

C. net session

D. tasklist

Correct Answer:A

Question 70

- (Topic 1)
Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks. The source, nature, and time of the attack can be determined by ____ of the compromised system.

A. Analyzing log files

B. Analyzing SAM file

C. Analyzing rainbow tables

D. Analyzing hard disk boot records

Correct Answer:A

Question 71

- (Topic 2)
How many times can data be written to a DVD+R disk?

A. Twice

B. Once

C. Zero

D. Infinite

Correct Answer:B

Question 72

- (Topic 2)
The offset in a hexadecimal code is:

A. The 0x at the beginning of the code

B. The 0x at the end of the code

C. The first byte after the colon

D. The last byte after the colon

Correct Answer:A

START 312-49v9 EXAM