Free EC-COUNCIL 312-49v8 Exam Dumps Questions & Answers

Which of the following approaches checks and compares all the fields systematically and intentionally for positive and negative correlation with each other to determine the correlation across one or multiple fields?

• A.  Rule-based approach
• B.  Graph-based approach
• C.  Automated field correlation approach
• D.  Neural network-based approach

Task list command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer.
Which of the following task list commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?

• A.  tasklist/u
• B.  tasklist/s
• C.  tasklist/v
• D.  tasklist/p

Attacker uses vulnerabilities in the authentication or session management functions such as exposed accounts, session IDs, logout, password management, timeouts, remember me. secret question, account update etc. to impersonate users, if a user simply closes the browser without logging out from sites accessed through a public computer, attacker can use the same browser later and exploit the user's privileges. Which of the following vulnerability/exploitation is referred above?

• A.  Session ID in URLs
• B.  Password Exploitation
• C.  Timeout Exploitation
• D.  I/O exploitation

Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?

• A.  In warning banners, organizations give clear and unequivocal notice to intruders that by signing onto the system they are expressly consenting to such monitoring
• B.  Sample banners are used to record the system activities when used by the unauthorized user
• C.  The equipment is seized which is connected to the case, knowing the role of the computer which will indicate what should be taken
• D.  At the time of seizing process, you need to shut down the computer immediately

Networks are vulnerable to an attack which occurs due to overextension of bandwidth, bottlenecks, network data interception, etc.
Which of the following network attacks refers to a process in which an attacker changes his or her IP address so that he or she appears to be someone else?

• A.  IP address spoofing
• B.  Session sniffing
• C.  Denial of Service attack
• D.  Man-in-the-middle attack