Free EC-COUNCIL 312-49v10 Test Practice Test Questions Exam Dumps [Q238-Q257]

Q238. What feature of Windows is the following command trying to utilize?

Q239. Which of the following options will help users to enable or disable the last access time on a system running Windows 10 OS?

Q240. “No action taken by law enforcement agencies or their agents should change data held on a computer or storage media which may subsequently be relied upon in court” – this principle Is advocated by which of the following?

Q241. Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

Q242. Preparing an image drive to copy files to is the first step in Linux forensics. For this purpose, what would the following command accomplish?
dcfldd if=/dev/zero of=/dev/hda bs=4096 conv=noerror, sync

Q243. Depending upon the jurisdictional areas, different laws apply to different incidents. Which of the following law is related to fraud and related activity in connection with computers?

Q244. What is the default IIS log location?

Q245. Jacob, a cybercrime investigator, joined a forensics team to participate in a criminal case involving digital evidence. After the investigator collected all the evidence and presents it to the court, the judge dropped the case and the defense attorney pressed charges against Jacob and the rest of the forensics team for unlawful search and seizure. What forensics privacy issue was not addressed prior to collecting the evidence?

Q246. NTFS has reduced slack space than FAT, thus having lesser potential to hide data in the slack space. This is because:

Q247. Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposure the site has received so far. Harold navigates to google.com and types in the following search. link:www.ghttech.net What will this search produce?

Q248. Which of the following tool enables a user to reset his/her lost admin password in a Windows system?

Q249. Which Linux command when executed displays kernel ring buffers or information about device drivers loaded into the kernel?

Q250. An Employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the Employees Computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the Employee before he leaves the building and recover the floppy disks and secure his computer. Will you be able to break the encryption so that you can verify that that the employee was in possession of the proprietary information?

Q251. The given image displays information about date and time of installation of the OS along with service packs, patches, and sub-directories. What command or tool did the investigator use to view this output?

Q252. Which US law does the interstate or international transportation and receiving of child pornography fall under?

Q253. Microsoft Outlook maintains email messages in a proprietary format in what type of file?

Q254. What is the target host IP in the following command?

Q255. Meyer Electronics Systems just recently had a number of laptops stolen out of their office. On these laptops contained sensitive corporate information regarding patents and company strategies. A month after the laptops were stolen, a competing company was found to have just developed products that almost exactly duplicated products that Meyer produces. What could have prevented this information from being stolen from the laptops?

Q256. Which of the following is a list of recently used programs or opened files?

Q257. In which of these attacks will a steganalyst use a random message to generate a stego-object by using some steganography tool, to find the steganography algorithm used to hide the information?