Free EC-COUNCIL 112-57 Exam Dumps Questions & Answers

Which of the following techniques is used to compute the hash value for a given binary code to uniquely identify malware or periodically verify changes made to the binary code during analysis?

• A.  Strings search
• B.  File fingerprinting
• C.  Malware disassembly
• D.  Local and online malware scanning

Wesley, a professional hacker, deleted a confidential file in a compromised system using the "/bin/rm/" command to deny access to forensic specialists.
Identify the operating system on which Don has performed the file carving act.

• A.  Windows
• B.  Mac OS
• C.  Android
• D.  Linux

Given below is a regex signature used by security professionals for detecting an XSS attack:
/((%3C)|<)[^\n]+((%3E)|>)/i
Which of the following types of XSS attack does the above regex expression detect?

• A.  HTML tags-based XSS attempt
• B.  Simple XSS attack
• C.  CSS attack
• D.  In-line comment XSS attack

Which of the following acts was passed by the U.S. Congress in 2002 to protect investors from the possibility of fraudulent accounting activities by corporations?

• A.  Sarbanes-Oxley Act (SOX)
• B.  Information Privacy Act 2014
• C.  General Data Protection Regulation (GDPR)
• D.  The Electronic Communications Privacy Act

Philip, a forensic officer, was tasked with investigating a crime scene. In this process, he created bit-by-bit copies of the suspect drive and retrieved all the disk images using the dd command.
Which of the following data acquisition image formats is extracted by Philip in the above scenario?

• A.  Proprietary Format
• B.  Raw Format
• C.  Advanced Forensics Format (AFF)
• D.  Advanced Forensic Framework 4 (AFF4)