최신EC-COUNCIL EC-Council Certified Security Analyst(ECSA) - EC0-479무료샘플문제
문제1
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk?
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk?
정답: D
문제2
You have used a newly released forensic investigation tool, which doesnt meet the Daubert T
est, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?
You have used a newly released forensic investigation tool, which doesnt meet the Daubert T
est, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?
정답: B
문제3
What information do you need to recover when searching a victims computer for a crime committed with specific e-mail message?
What information do you need to recover when searching a victims computer for a crime committed with specific e-mail message?
정답: D
문제4
In a FAT32 system, a 123 KB file will use how many sectors?
In a FAT32 system, a 123 KB file will use how many sectors?
정답: C
문제5
Which of the following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?
Which of the following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?
정답: B
문제6
The use of warning banners helps a company avoid litigation by overcoming an employees assumed
____________ When connecting to the companys intranet, network or Virtual Private Network(VPN) and will allow the companys investigators to monitor, search and retrieve information stored within the network.
The use of warning banners helps a company avoid litigation by overcoming an employees assumed
____________ When connecting to the companys intranet, network or Virtual Private Network(VPN) and will allow the companys investigators to monitor, search and retrieve information stored within the network.
정답: C
문제7
You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?
You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?
정답: C
문제8
E-mail logs contain which of the following information to help you in your investigation? (Select up to 4)
E-mail logs contain which of the following information to help you in your investigation? (Select up to 4)
정답: B,C,D,E
문제9
If you discover a criminal act while investigating a corporate policy abuse, it becomes a public- sector investigation and should be referred to law enforcement?
If you discover a criminal act while investigating a corporate policy abuse, it becomes a public- sector investigation and should be referred to law enforcement?
정답: A
문제10
Lance wants to place a honeypot on his network. Which of the following would be your recommendations?
Lance wants to place a honeypot on his network. Which of the following would be your recommendations?
정답: C
문제11
When investigating a Windows System, it is important to view the contents of the page or swap file because:
When investigating a Windows System, it is important to view the contents of the page or swap file because:
정답: A
문제12
What does the superblock in Linux define?
What does the superblock in Linux define?
정답: B
문제13
Which part of the Windows Registry contains the users password file?
Which part of the Windows Registry contains the users password file?
정답: A