312-49v9 EC-Council Exam Questions and Free Practice Test

Question 37

- (Topic 3)
You are assisting a Department of Defense contract company to become compliant with the stringent security policies set by the DoD. One such strict rule is that firewalls must only allow incoming connections that were first initiated by internal computers. What type of
firewall must you implement to abide by this policy?

A. Packet filtering firewall

B. Application-level proxy firewall

C. Statefull firewall

D. Circuit-level proxy firewall

Correct Answer:C

Question 38

- (Topic 3)
During the course of a corporate investigation, you find that an employee is committing a federal crime. Can the employer file a criminal complain with the police?

A. Yes, and all evidence can be turned over to the police

B. Yes, but only if you turn the evidence over to a district judge

C. No, because the investigation was conducted without following standard police procedures

D. No, because the investigation was conducted without a warrant

Correct Answer:A

Question 39

- (Topic 1)
If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire 32 K will be allocated, resulting In 22 K of ____.

A. Slack space

B. Deleted space

C. Cluster space

D. Sector space

Correct Answer:A

Question 40

- (Topic 3)
The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

A. Any data not yet flushed to the system will be lost

B. All running processes will be lost

C. The /tmp directory will be flushed

D. Power interruption will corrupt the pagefile

Correct Answer:AB
Volitile memory will be lost.
Data is not flushed to the system, it is flushed to the disk.

Question 41

- (Topic 3)
When is it appropriate to use computer forensics?

A. If copyright and intellectual property theft/misuse has occurred

B. If employees do not care for their boss?management techniques

C. If sales drop off for no apparent reason for an extended period of time

D. If a financial institution is burglarized by robbers

Correct Answer:A

Question 42

- (Topic 1)
Which of the following is not a part of data acquisition forensics Investigation?

A. Permit only authorized personnel to access

B. Protect the evidence from extremes in temperature

C. Work on the original storage medium not on the duplicated copy

D. Disable all remote access to the system

Correct Answer:C

START 312-49v9 EXAM