QUESTION: 109

____________________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

Network Forensics
Computer Forensics
Incident Response
Event Reaction

Answer(s): B

Show Answer Next Question

QUESTION: 110

What is the name of the Standard Linux Command that is also available as windows application that can be used to create bit-stream images?

mcopy
image
MD5
dd

Answer(s): D

Show Answer Next Question

QUESTION: 111

To preserve digital evidence, an investigator should ____________________.

Make two copies of each evidence item using a single imaging tool
Make a single copy of each evidence item using an approved imaging tool
Make two copies of each evidence item using different imaging tools
Only store the original evidence item

Answer(s): C

Show Answer Next Question

Pro ling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a pro le of the incident?

The manufacturer of the system compromised
The logic, formatting and elegance of the code used in the attack
The nature of the attack
The vulnerability exploited in the incident

Answer(s): B

Show Answer Next Question

Free EC-Council 312-49v10 Exam Questions (page: 29)

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112

312-49v10 Exam Discussions & Posts