Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 181–185 (page: 38)

Updated On: 10-Feb-2026

Which Intrusion Detection System (IDS) usually produces the most false alarms due to the unpredictable behaviors of users and networks?

  1. Host-based IDS systems (HIDS)
  2. Anomaly detection
  3. Network-based IDS systems (NIDS)
  4. Signature recognition

Answer(s): B



Chris has been called upon to investigate a hacking incident reported by one of his clients. The company suspects the involvement of an insider accomplice in the attack. Upon reaching the incident scene, Chris secures the physical area, records the scene using visual media. He shuts the system down by pulling the power plug so that he does not disturb the system in any way. He labels all cables and connectors prior to disconnecting any. What do you think would be the next sequence of events?

  1. Prepare the system for acquisition; Connect the target media; Copy the media; Secure the evidence
  2. Secure the evidence; Prepare the system for acquisition; Connect the target media; Copy the media
  3. Connect the target media; Prepare the system for acquisition; Secure the evidence; Copy the media
  4. Connect the target media; Prepare the system for acquisition; Secure the evidence; Copy the media

Answer(s): A



Corporate investigations are typically easier than public investigations because

  1. the investigator has to get a warrant
  2. the users have standard corporate equipment and software
  3. the users can load whatever they want on their machines
  4. the investigator does not have to get a warrant

Answer(s): D



What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

  1. offset
  2. rootkit
  3. steganography
  4. key escrow

Answer(s): C



A(n) _____________is one that performed by a computer program rather than the attacker manually performing the steps in the attack sequence.

  1. blackout attack
  2. central processing attack
  3. automated attack
  4. distributed attack

Answer(s): C



Viewing page 38 of 76
Viewing questions 186 - 190 out of 374 questions


Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!