Free EC-COUNCIL 312-49v9 Exam Dumps Questions & Answers

Windows identifies which application to open a file with by examining which of the following?

• A.  The file attributes
• B.  The file signature at the beginning of the file
• C.  The file Signature at the end of the file
• D.  The File extension

What will the following command accomplish?
dd if=/dev/xxx of=mbr.backup bs=512 count=1

• A.  Mount the master boot record on the first partition of the hard drive
• B.  Back up the master boot record
• C.  Restore the master boot record
• D.  Restore the first 512 bytes of the first partition of the hard drive

What type of analysis helps to identify the time and sequence of events in an investigation?

• A.  Temporal
• B.  Functional
• C.  Time-based
• D.  Relational

In conducting a computer abuse investigation you become aware that the suspect of the investigation is using ABC Company as his Internet Service Provider (ISP). You contact ISP and request that they provide you assistance with your investigation. What assistance can the ISP provide?

• A.  The ISP can investigate anyone using their service and can provide you with assistance
• B.  The ISP can't conduct any type of investigations on anyone and therefore can't assist you
• C.  ISP's never maintain log files so they would be of no use to your investigation
• D.  The ISP can investigate computer abuse committed by their employees, but must preserve the privacy of their customers and therefore cannot assist you without a warrant

While presenting his case to the court, Simon calls many witnesses to the stand to testify. Simon decides to call Hillary Taft, a lay witness, to the stand. Since Hillary is a lay witness, what field would she be considered an expert in?

• A.  Judging the character of defendants/victims
• B.  Legal issues
• C.  No particular field
• D.  Technical material related to forensics