QUESTION: 11

An expert witness is a __________________ who is normally appointed by a party to assist the formulation and preparation of a party's claim or defense.

Expert in criminal investigation
Subject matter specialist
Witness present at the crime scene
Expert law graduate appointed by attorney

Answer(s): B

Show Answer Next Question

Smith, a network administrator with a large MNC, was the first to arrive at a suspected crime scene involving criminal use of compromised computers.
What should be his first response while maintaining the integrity of evidence?

Record the system state by taking photographs of physical system and the display
Perform data acquisition without disturbing the state of the systems
Open the systems, remove the hard disk and secure it
Switch off the systems and carry them to the laboratory

Answer(s): A

Show Answer Next Question

QUESTION: 13

Which among the following is an act passed by the U.S. Congress in 2002 to protect investors from the possibility of fraudulent accounting activities by corporations?

HIPAA
GLBA
SOX
FISMA

Answer(s): C

Show Answer Next Question

QUESTION: 14

Jacky encrypts her documents using a password. It is known that she uses her daughter's year of birth as part of the password.
Which password cracking technique would be optimal to crack her password?

Rule-based attack
Brute force attack
Syllable attack
Hybrid attack

Answer(s): A

Show Answer Next Question

QUESTION: 15

Which of the following Event Correlation Approach is an advanced correlation method that assumes and predicts what an attacker can do next after the attack by studying the statistics and probability and uses only two variables?

Bayesian Correlation
Vulnerability-Based Approach
Rule-Based Approach
Route Correlation

Answer(s): A

Show Answer Next Question

Free EC-Council 312-49v11 Exam Questions (page: 4)

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

312-49v11 Exam Discussions & Posts