試験合格保証付きのCertified Ethical Hacker 312-49v11試験問題集 [Q79-Q98]

質問 79
Which forensic investigation methodology believes that criminals commit crimes solely to benefit their criminal enterprises?

質問 80
What does the Rule 101 of Federal Rules of Evidence states?

質問 81
Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

質問 82
When should an MD5 hash check be performed when processing evidence?

質問 83
A security analyst identifies an influx of network traffic from an IoT HVAC system in a multinational corporation. The corporation is concerned about a possible HVAC attack. What should the security analyst prioritize to mitigate this potential threat?

質問 84
Digital photography helps in correcting the perspective of the Image which Is used In taking the measurements of the evidence. Snapshots of the evidence and incident-prone areas need to be taken to help in the forensic process. Is digital photography accepted as evidence in the court of law?

質問 85
Which U.S. law sets the rules for sending emails for commercial purposes, establishes the minimum requirements for commercial messaging, gives the recipients of emails the right to ask the senders to stop emailing them, and spells out the penalties in case the above said rules are violated?

質問 86
When NTFS Is formatted, the format program assigns the __________ sectors to the boot sectors and to the bootstrap code

質問 87
John, a Forensic Lab Director, is planning to strengthen the security measures of his lab to maintain the trustworthiness and integrity of their investigations. He also wants to ensure that the forensics team members are assigned specific roles to streamline the investigation process.
Given the following list of security measures and team roles, which combination should he NOT consider?

質問 88
Which of the following files contains the traces of the applications installed, run, or uninstalled from a system?

質問 89
Chris has been called upon to investigate a hacking incident reported by one of his clients. The company suspects the involvement of an insider accomplice in the attack. Upon reaching the incident scene, Chris secures the physical area, records the scene using visual media. He shuts the system down by pulling the power plug so that he does not disturb the system in any way. He labels all cables and connectors prior to disconnecting any. What do you think would be the next sequence of events?

質問 90
In the context of file deletion process, which of the following statement holds true?

質問 91
When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

質問 92
What type of attack occurs when an attacker can force a router to stop forwarding packets by flooding the router with many open connections simultaneously so that all the hosts behind the router are effectively disabled?

質問 93
Chloe is a forensic examiner who is currently cracking hashed passwords for a crucial mission and hopefully solve the case. She is using a lookup table used for recovering a plain text password from cipher text; it contains word list and brute-force list along with their computed hash values. Chloe Is also using a graphical generator that supports SHA1.
a. What password technique is being used?
b. What tool is Chloe using?

質問 94
As a Computer Hacking Forensics Investigator, you are analyzing a TCP dump of network traffic during a suspected breach. During the investigation, you noticed that the packets dropped by kernel?count was unusually high.
Given that the network has a high load, what could be the most probable reason for this situation?

質問 95
After a major data breach in a financial institution, a forensic investigator is brought in to determine the source and the extent of the breach. The investigator needs to ensure compliance with the legal standards in their investigations. During the investigation, they stumble upon non- public personal information of consumers stored by the institution and suspect this information was illegally shared with non-affiliated third parties. Which law/regulation should be the investigator s primary concern in this scenario?

質問 96
To which phase of the computer forensics investigation process does “planning and budgeting of a forensics lab” belong?

質問 97
Which set of anti-forensic tools/techniques allows a program to compress and/or encrypt an executable file to hide attack tools from being detected by reverse-engineering or scanning?

質問 98
Which cloud model allows an investigator to acquire the instance of a virtual machine and initiate the forensics examination process?