What malware analysis operation can the investigator perform using the jv16 tool?

Network Traffic Monitoring/Analysis

Which of the following email headers specifies an address for mailer-generated errors, like "no such user" bounce messages, to go to (instead of the sender's address)?

Content-Transfer-Encoding header

CAN-SPAM act requires that you:

Don't use deceptive subject lines

Don't tell the recipients where you are located

Don't identify the message as an ad

Don't use true header information

Which of the following application password cracking tool can discover all password-protected items on a computer and decrypts them?

Windows Password Recovery Bootdisk

An investigator has found certain details after analysis of a mobile device. What can reveal the manufacturer information?

Equipment Identity Register (EIR)

International mobile subscriber identity (IMSI)

Integrated circuit card identifier (ICCID)

Investigators can use the Type Allocation Code (TAC) to find the model and origin of a mobile device.Where is TAC located in mobile devices?

International Mobile Equipment Identifier (IMEI)

Integrated circuit card identifier (ICCID)

International mobile subscriber identity (IMSI)

Equipment Identity Register (EIR)

Which of the following file formats allows the user to compress the acquired data as well as keep it randomly accessible?

Advanced Forensics Format (AFF)

What is the investigator trying to view by issuing the command displayed in the following screenshot?

List of services closed recently

List of services recently started

In a Linux-based system, what does the command "Last -F" display?

Login and logout times and dates of the system

Pick the statement which does not belong to the Rule 804. Hearsay Exceptions; Declarant Unavailable.

Statement under belief of impending death

Statement of personal or family history

Statement under belief of impending death

Which of the following is a responsibility of the first responder?

Collect as much information about the incident as possible

Determine the severity of the incident

Collect as much information about the incident as possible

Share the collected information to determine the root cause

Which of the following is a tool to reset Windows admin password?

Windows Password Recovery Bootdisk

Select the data that a virtual memory would store in a Windows-based system.

Information or metadata of the files

Which principle states that "anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave"?

Enterprise Theory of Investigation

Evidence Theory of Investigation

During an investigation, Noel found the following SIM card from the suspect's mobile. What does the code 89 44 represent?

Industry Identifier and Country code

Issuer Identifier Number and TAC

Industry Identifier and Country code

Individual Account Identification Number and Country Code

What system details can an investigator obtain from the NetBIOS name table cache?

List of connections made to other systems

List of files opened on other systems

List of the system present on a router

List of connections made to other systems

List of files shared between the connected systems

ECCouncil 312-49v10 Practice Test 12 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

ECCouncil 312-49v10 Practice Test 12

Question

ECCouncil 312-49v10 Practice Tests

Practice Tests