Computer Hacking Forensic Investigator Exam (312-49v8) Free Practice Test

Question 1

Email spoofing refers to:

A. The forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source

B. A sudden spike of "Reply All" messages on an email distribution list, caused by one misdirected message

C. The criminal act of sending an illegitimate email, falsely claiming to be from a legitimate site in an attempt to acquire the user's personal or account information

D. Sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address Is hosted to cause a denial-of-service attack

Correct Answer: A

Question 2

Which of the following is not correct when documenting an electronic crime scene?

A. Document the physical scene, such as the position of the mouse and the location of components near the system

B. Write down the color of shirt and pant the suspect was wearing

C. Record the condition of the computer system, storage media, electronic devices and conventional evidence, including power status of the computer

D. Document related electronic components that are difficult to find

Correct Answer: B

Question 3

What is the first step that needs to be carried out to investigate wireless attacks?

A. Obtain a search warrant

B. Detect the wireless connections

C. Document the scene and maintain a chain of custody

D. Identify wireless devices at crime scene

Correct Answer: A

Question 4

During the seizure of digital evidence, the suspect can be allowed touch the computer system.

A. False

B. True

Correct Answer: A

Question 5

At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

A. False

B. True

Correct Answer: B

Question 6

Network forensics allows Investigators 10 inspect network traffic and logs to identify and locate the attack system
Network forensics can reveal: (Select three answers)

A. Intrusion techniques used by attackers

B. Source of security incidents' and network attacks

C. Path of the attack

D. Hardware configuration of the attacker's system

Correct Answer: A,B,C

Question 7

Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

A. Application logs

B. Running application

C. System logs

D. Files or network shares

Correct Answer: D

Question 8

Syslog is a client/server protocol standard for forwarding log messages across an IP network. Syslog uses ___________to transfer log messages in a clear text format.

A. POP

B. FTP

C. SMTP

D. TCP

Correct Answer: D

Question 9

An Internet standard protocol (built on top of TCP/IP) that assures accurate synchronization to the millisecond of computer clock times in a network of computers. Which of the following statement is true for NTP Stratum Levels?

A. A stratum-3 server gets its time over a network link, via NTP, from a stratum-2 server, and so on

B. Stratum-1 time server is linked over a network path to a reliable source of UTC time such as GPS, WWV, or CDMA transmissions

C. Stratum-0 servers are used on the network; they are not directly connected to computers which then operate as stratum-1 servers

D. A stratum-2 server is directly linked (not over a network path) to a reliable source of UTC time such as GPS, WWV, or CDMA transmissions

Correct Answer: A

Question 10

Which wireless standard has bandwidth up to 54 Mbps and signals in a regulated frequency spectrum around 5 GHz?

A. 802.11g

B. 802.11b

C. 802.11a

D. 802.11i

Correct Answer: C

Question 11

What is a SCSI (Small Computer System Interface)?

A. A set of ANSI standard electronic interfaces that allow personal computers to communicate with peripheral hardware such as disk drives, tape drives. CD-ROM drives, printers, and scanners

B. A point-to-point serial bi-directional interface for transmitting data between computer devices at data rates of up to 4 Gbps

C. A "plug-and-play" interface, which allows a device to be added without an adapter card and without rebooting the computer

D. A standard electronic interface used between a computer motherboard's data paths or bus and the computer's disk storage devices

Correct Answer: A

Question 12

A steganographic file system is a method to store the files in a way that encrypts and hides the data without the knowledge of others

A. False

B. True

Correct Answer: B

Welcome to TestSimulate

EC-COUNCIL Computer Hacking Forensic Investigator (312-49v8) Free Practice Test