[2024] 312-49v10 All-in-One Exam Guide Practice To your 312-49v10 Exam! [Q12-Q34]

NO.12 Which of the following is a tool to reset Windows admin password?

NO.13 The newer Macintosh Operating System is based on:

NO.14 While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

NO.15 An investigator Is examining a file to identify any potentially malicious content. To avoid code execution and still be able to uncover hidden indicators of compromise (IOC), which type of examination should the investigator perform:

NO.16 Which of the following is a device monitoring tool?

NO.17 A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file. What kind of picture is this file?

NO.18 POP3 is an Internet protocol, which is used to retrieve emails from a mail server. Through which port does an email client connect with a POP3 server?

NO.19 A packet is sent to a router that does not have the packet destination address in its route table.
How will the packet get to its proper destination?

NO.20 It takes _____________ mismanaged case/s to ruin your professional reputation as a computer forensics examiner?

NO.21 If you plan to startup a suspect’s computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect’s hard drive by booting to the hard drive.

NO.22 The offset in a hexadecimal code is:

NO.23 Which federal computer crime law specifically refers to fraud and related activity in connection with access devices like routers?

NO.24 After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a DMZ, stateful firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken, none of the hosts on her network can reach the Internet. Why is that?

NO.25 What hashing method is used to password protect Blackberry devices?

NO.26 When examining a file with a Hex Editor, what space does the file header occupy?

NO.27 Rusty, a computer forensics apprentice, uses the command nbtstat -c while analyzing the network information in a suspect system. What information is he looking for?

NO.28 Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

NO.29 This law sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have you stop emailing them, and spells out tough penalties for violations.

NO.30 Which Linux command when executed displays kernel ring buffers or information about device drivers loaded into the kernel?

NO.31 When a user deletes a file or folder, the system stores complete path including the original filename is a special hidden file called “INFO2” in the Recycled folder. If the INFO2 file is deleted, it is recovered when you ______________________.

NO.32 Which of the following network attacks refers to sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address is hosted so as to cause a denial-of-service attack?

NO.33 A file requires 10 KB space to be saved on a hard disk partition. An entire cluster of 32 KB has been allocated for this file. The remaining, unused space of 22 KB on this cluster will be Identified as______.

NO.34 Where is the default location for Apache access logs on a Linux computer?