Free EC-COUNCIL EC0-349 Exam Dumps Questions & Answers

Which of the following Wi-Fi chalking methods refers to drawing symbols in public places to advertise open Wi-Fi networks?

• A.  WarChalking
• B.  WarWalking
• C.  WarDhving
• D.  WarFlying

Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

• A.  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentsVersion \setup
• B.  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion \ProfileList
• C.  HKEY_LOCAL_MACHlNE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \NetworkList
• D.  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule

Which of the following is not a part of the technical specification of the laboratory-based imaging system?

• A.  High performance workstation PC
• B.  very low image capture rate
• C.  Anti-repudiation techniques
• D.  Remote preview and imaging pod

First responder is a person who arrives first at the crime scene and accesses the victim's computer system after the incident. He or She is responsible for protecting, integrating, and preserving the evidence obtained from the crime scene. Which of the following is not a role of first responder?

• A.  Prosecute the suspect in court of law
• B.  Package and transport the electronic evidence to forensics lab
• C.  Identify and analyze the crime scene
• D.  Protect and secure the crime scene

What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 server the course of its lifetime?

• A.  comparison of MD5 checksums
• B.  review of SIDs in the Registry
• C.  forensic duplication of hard drive
• D.  analysis of volatile data