EC-COUNCIL 312-49V10 dumps - 100% Pass Guarantee!

Which of the following is the certifying body of forensics labs that investigate criminal cases by analyzing evidence?

A. The American Society of Crime Laboratory Directors (ASCLD)

B. International Society of Forensics Laboratory (ISFL)

C. The American Forensics Laboratory Society (AFLS)

D. The American Forensics Laboratory for Computer Forensics (AFLCF)

Attacker uses vulnerabilities in the authentication or session management functions such as exposed accounts, session IDs, logout, password management, timeouts, remember me. secret question, account update etc. to impersonate users, if a user simply closes the browser without logging out from sites accessed through a public computer, attacker can use the same browser later and exploit the user's privileges. Which of the following vulnerability/exploitation is referred above?

A. Session ID in URLs

B. Timeout Exploitation

C. I/O exploitation

D. Password Exploitation

Which is a standard procedure to perform during all computer forensics investigations?

A. With the hard drive in the suspect PC, check the date and time in the system CMOSWith the hard drive in the suspect PC, check the date and time in the system? CMOS

B. With the hard drive removed from the suspect PC, check the date and time in the system CMOSWith the hard drive removed from the suspect PC, check the date and time in the system? CMOS

C. With the hard drive in the suspect PC, check the date and time in the File Allocation Table

D. With the hard drive removed from the suspect PC, check the date and time in the system RAMWith the hard drive removed from the suspect PC, check the date and time in the system? RAM

Under confession, an accused criminal admitted to encrypting child pornography pictures and then hiding them within other pictures. What technique did the accused criminal employ?

A. Typography

B. Steganalysis

C. Picture encoding

D. Steganography

A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloaded. What can the investigator do to prove the violation? Choose the most feasible option.

A. Image the disk and try to recover deleted files

B. Seek the help of co-workers who are eye-witnesses

C. Check the Windows registry for connection data (You may or may not recover)

D. Approach the websites for evidence