What does the command "C:\>wevtutil gl " display?

Configuration information of a specific Event Log

Event logs are saved in .xml format

An investigator is analyzing a checkpoint firewall log and comes across symbols. What type of log is he looking at?

An email marked as potential spam

Security event was monitored but not stopped

An email marked as potential spam

Which of the following does Microsoft Exchange E-mail Server use for collaboration of various e-mail applications?

Messaging Application Programming Interface (MAPI)

Simple Mail Transfer Protocol (SMTP)

Messaging Application Programming Interface (MAPI)

Internet Message Access Protocol (IMAP)

Post Office Protocol version 3 (POP3)

Brian needs to acquire data from RAID storage. Which of the following acquisition methods is recommended to retrieve only the data relevant to the investigation?

Bit-stream disk-to-disk Acquisition

Analyze the hex representation of mysql-bin.000013 file in the screenshot below. Which of the following will be an inference from this analysis?

A WordPress user has been created with the username bad_guy

A user with username bad_guy has logged into the WordPress web application

A WordPress user has been created with the username anonymous_hacker

An attacker with name anonymous_hacker has replaced a user bad_guy in the WordPress database

A WordPress user has been created with the username bad_guy

What is the investigator trying to analyze if the system gives the following image as output?

Currently active logon sessions

You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

All three servers need to face the Internet so that they can communicate between themselves

All three servers need to be placed internally

A web server and the database server facing the Internet, an application server on the internal network

A web server facing the Internet, an application server on the internal network, a database server on the internal network

All three servers need to face the Internet so that they can communicate between themselves

In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?

In a pharming attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

Both pharming and phishing attacks are purely technical and are not considered forms of social engineering

In a pharming attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

In a phishing attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

Both pharming and phishing attacks are identical

A company's policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees don't like changes.You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wireshark to examine the captured traffic, which command can be used as a display filter to find unencrypted file transfers?

tcp.port == 21 || tcp.port == 22

To reach a bank web site, the traffic from workstations must pass through a firewall. You have been asked to review the firewall configuration to ensure that workstations in network 10.10.10.0/24 can only reach the bank web site 10.20.20.1 using https. Which of the following firewall rules meets this requirement?

if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 443) then permit

if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 80 or 443) then permit

if (source matches 10.10.10.0 and destination matches 10.20.20.1 and port matches 443) then permit

CompanyXYZ has asked you to assess the security of their perimeter email gateway. From your office in New York you craft a specially formatted email message and send it across the Internet to an employee of CompanyXYZ. The employee of CompanyXYZ is aware.

Reviewing the firewalls configuration

Data items and vulnerability scanning

Interviewing employees and network engineers

Jim's company regularly performs backups of their critical servers. But the company can't afford to send backup tapes to an off-site vendor for long term storage and archiving. Instead Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes aren't stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?

Encrypt the backup tapes and transport them in a lock box

Encrypt the backup tapes and use a courier to transport them.

Encrypt the backup tapes and transport them in a lock box

Degauss the backup tapes and transport them in a lock box.

Hash the backup tapes and transport them in a lock box.

As part of extracting the system data, Jenifer has used the netstat command. What does this tool reveal?

Information about network connections

Status of users connected to the internet

Information about network connections

Self-Monitoring, Analysis, and Reporting Technology (SMART) is built into the hard drives to monitor and report system activity. Which of the following is included in the report generated by SMART?

Logs of high temperatures the drive has reached

All the states (running and discontinued) associated with the OS

Data Files contain Multiple Data Pages, which are further divided into Page Header, Data Rows, and Offset Table. Which of the following is true for Data Rows?

Data Rows present Page type. Page ID, and so on

Data Rows store the actual data

Data Rows present Page type. Page ID, and so on

Data Rows point to the location of actual data

Data Rows spreads data across multiple databases

In Windows, prefetching is done to improve system performance. There are two types of prefetching: boot prefetching and application prefetching. During boot prefetching, what does the Cache Manager do?

Checks whether the data is processed

Determines the data associated with value EnablePrefetcher

Monitors the first 10 seconds after the process is started

Checks whether the data is processed

Checks hard page faults and soft page faults

The MAC attributes are timestamps that refer to a time at which the file was last modified or last accessed or originally created. Which of the following file systems store MAC attributes in Coordinated Universal Time (UTC) format?

New Technology File System (NTFS)

Robert, a cloud architect, received a huge bill from the cloud service provider, which usually doesn't happen. After analyzing the bill, he found that the cloud resource consumption was very high. He then examined the cloud server and discovered that a malicious code was running on the server, which was generating huge but harmless traffic from the server. This means that the server has been compromised by an attacker with the sole intention to hurt the cloud customer financially. Which attack is described in the above scenario?

DDoS Attack (Distributed Denial of Service)

EDoS Attack (Economic Denial of Service)

What is the role of Alloc.c in Apache core?

It handles allocation of resource pools

It is useful for reading and handling of the configuration files

It takes care of all the data exchange and socket connections between the client and the server

It handles server start-ups and timeouts

Which of the following statements is true regarding SMTP Server?

SMTP Server breaks the recipient's address into Recipient's name and domain name before passing it to the DNS Server

SMTP Server breaks the recipient's address into Recipient's name and his/her designation before passing it to the DNS Server

SMTP Server breaks the recipient's address into Recipient's name and recipient's address before passing it to the DNS Server

SMTP Server breaks the recipient's address into Recipient's name and domain name before passing it to the DNS Server

SMTP Server breaks the recipient's address into Recipient's name and his/her initial before passing it to the DNS Server

Which type of attack is possible when attackers know some credible information about the victim's password, such as the password length, algorithms involved, or the strings and characters used in its creation?

Hybrid Password Guessing Attack

ECCouncil 312-49v10 Practice Test 14 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

ECCouncil 312-49v10 Practice Test 14

Question

ECCouncil 312-49v10 Practice Tests

Practice Tests