Free EC-COUNCIL 312-49v10 Exam Dumps Questions & Answers

As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

• A.  DBCC LOG(Transfers, 0)
• B.  DBCC LOG(Transfers, 1)
• C.  DBCC LOG(Transfers, 3)
• D.  DBCC LOG(Transfers, 2)

You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data.
What method would be most efficient for you to acquire digital evidence from this network?

• A.  create a compressed copy of the file with DoubleSpace
• B.  create a sparse data copy of a folder or file
• C.  make a bit-stream disk-to-image file
• D.  make a bit-stream disk-to-disk file

You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?

• A.  Transmorphic
• B.  Polymorphic
• C.  Metamorphic
• D.  Oligomorhic

In handling computer-related incidents, which IT role should be responsible for recovery, containment, and prevention to constituents?

• A.  Security Administrator
• B.  Director of Administration
• C.  Network Administrator
• D.  Director of Information Technology

Which ISO Standard enables laboratories to demonstrate that they comply with quality assurance and provide valid results?

• A.  ISO/IEC 17025
• B.  ISO/IEC 16025
• C.  ISO/IEC 18025
• D.  ISO/IEC 19025