Free EC-COUNCIL EC0-479 Exam Dumps Questions & Answers

You are working for a local police department that services a population of 1,000,000 people and you have been given the task of building a computer forensics laB. How many law-enforcement computer investigators should you request to staff the lab?

• A.  8
• B.  2
• C.  1
• D.  4

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found.
What information will he be able to gather from this?

• A.  The SID of Hillary network account
• B.  The network shares that Hillary has permissions
• C.  The SAM file from Hillary computer
• D.  Hillary network username and password hash

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found. What information will he be able to gather from this?

• A.  Hillary's network username and password hash
• B.  The SAM file from Hillary's computer
• C.  The network shares that Hillary has permissions
• D.  The SID of Hillary's network account

When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

• A.  a disk editor
• B.  a firewall
• C.  a write-blocker
• D.  a protocol analyzer

What header field in the TCP/IP protocol stack involves the hacker exploit known as the Ping of Death?

• A.  ICMP header field
• B.  TCP header field
• C.  UDP header field
• D.  IP header field