Free EC-COUNCIL 312-49v10 Exam Dumps Questions & Answers

Which of the following is a responsibility of the first responder?

• A.  Collect as much information about the incident as possible
• B.  Share the collected information to determine the root cause
• C.  Document the findings
• D.  Determine the severity of the incident

A computer forensics Investigator or forensic analyst Is a specially trained professional who works with law enforcement as well as private businesses to retrieve Information from computers and other types of data storage devices. For this, the analyst should have an excellent working knowledge of all aspects of the computer. Which of the following is not a duty of the analyst during a criminal investigation?

• A.  To create an investigation report
• B.  To fill the chain of custody
• C.  To enforce the security of all devices and software in the scene
• D.  To recover data from suspect devices

Robert needs to copy an OS disk snapshot of a compromised VM to a storage account in different region for further investigation. Which of the following should he use in this scenario?

• A.  Azure CLI
• B.  Azure Portal
• C.  Azure Monitor
• D.  Azure Active Directory

In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?

• A.  Both pharming and phishing attacks are identical
• B.  Both pharming and phishing attacks are purely technical and are not considered forms of social engineering
• C.  In a pharming attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name
• D.  In a phishing attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

Which of the following tools will allow a forensic Investigator to acquire the memory dump of a suspect machine so that It may be Investigated on a forensic workstation to collect evidentiary data like processes and Tor browser artifacts?

• A.  Belkasoft Live RAM Capturer and AccessData FTK imager
• B.  Hex Editor
• C.  DB Browser SQLite
• D.  Bulk Extractor