[Dec 26, 2021] 312-49v9 PDF Questions and Testing Engine With 586 Questions
Updated Exam Engine for 312-49v9 Exam Free Demo & 365 Day Updates
NEW QUESTION 312
What will the following command accomplish?
dd if=/dev/xxx of=mbr.backup bs=512 count=1
- A. Restore the first 512 bytes of the first partition of the hard drive
- B. Restore the master boot record
- C. Mount the master boot record on the first partition of the hard drive
- D. Back up the master boot record
Answer: D
NEW QUESTION 313
What is the slave device connected to the secondary IDE controller on a Linux OS referred to?
- A. hdc
- B. hdb
- C. hda
- D. hdd
Answer: D
NEW QUESTION 314
What will the following command accomplish?
- A. Test the ability of a router to handle under-sized packets
- B. Test the ability of a router to handle fragmented packets
- C. Test the ability of a WLAN to handle fragmented packets
- D. Test ability of a router to handle over-sized packets
Answer: D
NEW QUESTION 315
During the trial, an investigator observes that one of the principal witnesses is severely ill and cannot be present for the hearing. He decides to record the evidence and present it to the court. Under which rule should he present such evidence?
- A. Hearsay
- B. Locard's Principle
- C. Rule 1003: Admissibility of Duplicates
- D. Limited admissibility
Answer: D
NEW QUESTION 316
When is it appropriate to use computer forensics?
- A. If a financial institution is burglarized by robbers
- B. If employees do not care for their boss?management techniques
- C. If copyright and intellectual property theft/misuse has occurred
- D. If sales drop off for no apparent reason for an extended period of time
Answer: C
NEW QUESTION 317
Which of the following files store the MySQL database data permanently, including the data that had been deleted, helping the forensic investigator in examining the case and finding the culprit?
- A. mysql-bin
- B. iblog
- C. ibdata1
- D. mysql-log
Answer: C
NEW QUESTION 318
What type of attack occurs when an attacker can force a router to stop forwarding packets by flooding the router with many open connections simultaneously so that all the hosts behind the router are effectively disabled?
- A. ARP redirect
- B. Digital attack
- C. Physical attack
- D. Denial of service
Answer: D
NEW QUESTION 319
Which of the following reports are delivered under oath to a board of
directors/managers/panel of jury?
- A. Verbal Formal Report
- B. Written Formal Report
- C. Verbal Informal Report
- D. Written informal Report
Answer: A
NEW QUESTION 320
What hashing method is used to password protect Blackberry devices?
- A. AES
- B. SHA-1
- C. MD5
- D. RC5
Answer: B
NEW QUESTION 321
Which of the following commands shows you all of the network services running on
Windows-based servers?
- A. Net Session
- B. Net share
- C. Net start
- D. Net use
Answer: C
NEW QUESTION 322
Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and zombies? What type of Penetration Testing is Larry planning to carry out?
- A. Router Penetration Testing
- B. DoS Penetration Testing
- C. Firewall Penetration Testing
- D. Internal Penetration Testing
Answer: B
NEW QUESTION 323
What type of analysis helps to identify the time and sequence of events in an investigation?
- A. Relational
- B. Time-based
- C. Temporal
- D. Functional
Answer: C
NEW QUESTION 324
Tracks numbering on a hard disk begins at 0 from the outer edge and moves towards the center, typically reaching a value of ___________.
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 325
Lance wants to place a honeypot on his network. Which of the following would be your recommendations?
- A. Use a system that is not directly interacting with the router
- B. Use it on a system in an external DMZ in front of the firewall
- C. It doesn't matter as all replies are faked
- D. Use a system that has a dynamic addressing on the network
Answer: C
NEW QUESTION 326
You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm's employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will. What do you do?
- A. Inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned
- B. Inform the owner that conducting an investigation without a policy is a violation of the employees' expectation of privacy
- C. Inform the owner that conducting an investigation without a policy is a violation of the 4th amendment
- D. Inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies
Answer: B
NEW QUESTION 327
What value of the "Boot Record Signature" is used to indicate that the boot-loader exists?
- A. AA55
- B. A100
- C. A00
- D. 00AA
Answer: A
NEW QUESTION 328
When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?
- A. in the DHCP Server log files
- B. there is no way to determine the specific IP address
- C. in the Web Server log files
- D. on the individual computer's ARP cache
Answer: A
NEW QUESTION 329
John is working on his company policies and guidelines. The section he is currently working on covers company documents; how they should be handled, stored, and eventually destroyed. John is concerned about the process whereby outdated documents are destroyed. What type of shredder should John write in the guidelines to be used when destroying documents?
- A. Cris-cross shredder
- B. Cross-hatch shredder
- C. Strip-cut shredder
- D. Cross-cut shredder
Answer: D
NEW QUESTION 330
Bob works as an Information Security Analyst for a big finance company. One day, the anomaly-based intrusion detection system alerted that a volumetric DDOS targeting the main IP of the main web server was occurring. What kind of attack is it?
- A. Advanced Persistent Threat (APT)
- B. Web Application Attack
- C. Network Attack
- D. IDS Attack
Answer: C
NEW QUESTION 331
Which principle states that "anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave"?
- A. Locard's Evidence Principle
- B. Evidence Theory of Investigation
- C. Enterprise Theory of Investigation
- D. Locard's Exchange Principle
Answer: D
NEW QUESTION 332
......
Exam Passing Guarantee 312-49v9 Exam with Accurate Quastions: https://braindumps2go.dumpsmaterials.com/312-49v9-real-torrent.html
