Free EC-Council EC0-349 Exam Braindumps (page: 13)

When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?

  1. in the Web Server log files
  2. in the DHCP Server log files
  3. on the individual computer's ARP cache
  4. there is no way to determine the specific IP address

Answer(s): B



What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

  1. steganography
  2. rootkit
  3. key escrow
  4. offset

Answer(s): A



While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

  1. destroy the evidence
  2. bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge (court)
  3. present the evidence to the defense attorney
  4. keep the information on file for later review

Answer(s): B



What information do you need to recover when searching a victims computer for a crime committed with specific e-mail message?

  1. Firewall log
  2. Internet service provider information
  3. E-mail header
  4. Username and password

Answer(s): C






Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

EC0-349 Exam Discussions & Posts