Free EC-COUNCIL ECSS Exam Dumps Questions & Answers

Bob, a forensic investigator, is investigating a live Windows system found at a crime scene. In this process, Bob extracted subkeys containing information such as SAM. Security, and software using an automated tool called FTK Imager.
Which of the following Windows Registry hives' subkeys provide the above information to Bob?

• A.  HKEY LOCAL MACHINE
• B.  HKEY CURRENT USER
• C.  HKEY .CURRENT CONFIG
• D.  H KEY-CLASSES. ROOT

John, a forensic officer, was working on a criminal case. He employed imaging software to create a copy of data from the suspect device on a storage medium for further investigation. For developing an image of the original data, John used a software application that does not allow an unauthorized user to alter the image content on storage media, thereby retaining an unaltered image copy.
Identify the data acquisition step performed by John in the above scenario.

• A.  Planned for contingency
• B.  Sanitized the target media
• C.  Validated data acquisition
• D.  Enabled write protection on the evidence media

Johnson is a professional hacker who targeted an organization's customers and decided to crack their system passwords. In this process, he found a list of valid customers, created a list of possible passwords, ranked the passwords from high to low probability, and started keying in each password in the target system until the correct password is discovered.
Identify the type of attack performed by Johnson in the above scenario.

• A.  Password guessing
• B.  Brute force attack
• C.  Rainbow table attack
• D.  Dictionary attack

Clark, a digital forensic expert, was assigned to investigate a malicious activity performed on an organization's network. The organization provided Clark with all the information related to the incident. In this process, he assessed the impact of the incident on the organization, reasons for and source of the incident, steps required to tackle the incident, investigating team required to handle the case, investigative procedures, and possible outcome of the forensic process.
Identify the type of analysis performed by Clark in the above scenario.

• A.  Log analysis
• B.  Traffic analysis
• C.  Data analysis
• D.  Case analysis

Daniel, a networking specialist, identifies a glitch in a networking tool and fixes it on a priority using a system.
Daniel was authorized to make a copy of computers programs while maintaining or repairing the system.
Which of the following acts was demonstrated in the above scenario?

• A.  Data Protection Act 2018 (DPA)
• B.  Gramm Leach Bliley Act (GLBA)
• C.  Sarbanes Oxley Act (SOX)
• D.  The Digital Millennium Copyright Act (DMCA)