[Free] 2018(Jan) EnsurePass Dumpsleader ECCouncil EC1-349 Dumps with VCE and PDF 61-70

Ensurepass.com : Ensure you pass the IT Exams
2018 Jan ECCouncil Official New Released EC1-349
100% Free Download! 100% Pass Guaranteed!

ECCouncil Computer Hacking Forensic Investigator

Question No: 61 – (Topic 1)

Preparing an image drive to copy files to is the first step in Linux forensics. For this purpose, what would the following command accomplish? dcfldd if=/dev/zero of=/dev/hda bs=4096 conv=noerror, sync

  1. Fill the disk with zeros

  2. Low-level format

  3. Fill the disk with 4096 zeros

  4. Copy files from the master disk to the slave disk on the secondary IDE controller

Answer: A

Question No: 62 – (Topic 1)

What technique is used by JPEGs for compression?

  1. ZIP

  2. TCD

  3. DCT

  4. TIFF-8

Answer: C

Question No: 63 – (Topic 1)

You have been asked to investigate the possibility of computer fraud in the finance department of a company. It is suspected that a staff member has been committing finance fraud by printing cheques that have not been authorized. You have exhaustively searched all data files on a bitmap image of the target computer, but have found no evidence. You suspect the files may not have been saved. What should you examine next in this case?

  1. The registry

  2. The swapfile

  3. The recycle bin

  4. The metadata

Answer: B

Question No: 64 – (Topic 1)

The following is a log file screenshot from a default installation of IIS 6.0.

Ensurepass 2018 PDF and VCE

What time standard is used by IIS as seen in the screenshot?

  1. UTC

  2. GMT

  3. TAI

  4. UT

Answer: A

Question No: 65 – (Topic 1)

An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are media used to store large amounts of data and are not affected by the magnet.

  1. Magnetic

  2. Optical

  3. Anti-Magnetic

  4. Logical

Answer: B

Question No: 66 – (Topic 1)

When needing to search for a website that is no longer present on the Internet today but was online few years back, what site can be used to view the website collection of pages?view the website? collection of pages?

  1. Proxify.net

  2. Dnsstuff.com

  3. Samspade.org

  4. Archive.org

Answer: D

Question No: 67 – (Topic 1)

What type of equipment would a forensics investigator store in a StrongHold bag?

  1. PDAPDA?

  2. Backup tapes

  3. Hard drives

  4. Wireless cards

Answer: D

Question No: 68 – (Topic 1)

What method of copying should always be performed first before carrying out an investigation?

  1. Parity-bit copy

  2. Bit-stream copy

  3. MS-DOS disc copy

  4. System level copy

Answer: B

Question No: 69 – (Topic 1)

With regard to using an antivirus scanner during a computer forensics investigation, you should:

  1. Scan the suspect hard drive before beginning an investigation

  2. Never run a scan on your forensics workstation because it could change your system configurationNever run a scan on your forensics workstation because it could change your system? configuration

  3. Scan your forensics workstation at intervals of no more than once every five minutes during an investigation

  4. Scan your forensics workstation before beginning an investigation

Answer: D

Question No: 70 – (Topic 1)

If a PDA is seized in an investigation while the device is turned on, what would be the proper procedure?

  1. Keep the device powered on

  2. Turn off the device immediately

  3. Remove the battery immediately

  4. Remove any memory cards immediately

Answer: A

100% Ensurepass Free Download!
Download Free Demo:EC1-349 Demo PDF
100% Ensurepass Free Guaranteed!
EC1-349 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.