312-49v10試験無料問題集（706題）「EC-COUNCIL Computer Hacking Forensic Investigator (CHFI-v10) 認定」

出題：1

Which network attack is described by the following statement?
"At least five Russian major banks came under a continuous hacker attack, although online client services were not disrupted. The attack came from a wide-scale botnet involving at least 24,000 computers, located in 30 countries."

A. Buffer Overflow

B. Man-in-the-Middle Attack

C. DDoS

D. Sniffer Attack

正解：C 解答を投票する

出題：2

Rule 1002 of Federal Rules of Evidence (US) talks about_____

A. Admissibility of other evidence of contents

B. Requirement of original

C. Admissibility of duplicates

D. Admissibility of original

正解：B 解答を投票する

出題：3

Your company uses Cisco routers exclusively throughout the network. After securing the routers to the best of your knowledge, an outside security firm is brought in to assess the network security.
Although they found very few issues, they were able to enumerate the model, OS version, and capabilities for all your Cisco routers with very little effort. Which feature will you disable to eliminate the ability to enumerate this information on your Cisco routers?

A. Broadcast System Protocol

B. Simple Network Management Protocol

C. Cisco Discovery Protocol

D. Border Gateway Protocol

正解：C 解答を投票する

出題：4

In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?

A. In a pharming attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

B. Both pharming and phishing attacks are identical

C. In a phishing attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

D. Both pharming and phishing attacks are purely technical and are not considered forms of social engineering

正解：A 解答を投票する

出題：5

At what layer does a cross site scripting attack occur on?

A. Session

B. Presentation

C. Data Link

D. Application

正解：D 解答を投票する

出題：6

Which of the following files store the MySQL database data permanently, including the data that had been deleted, helping the forensic investigator in examining the case and finding the culprit?

A. mysql-bin

B. mysql-log

C. iblog

D. ibdata1

正解：D 解答を投票する

出題：7

When Investigating a system, the forensics analyst discovers that malicious scripts were Injected Into benign and trusted websites. The attacker used a web application to send malicious code. In the form of a browser side script, to a different end-user. What attack was performed here?

A. SQL injection attack

B. Cookie poisoning attack

C. Cross-site scripting attack

D. Brute-force attack

正解：C 解答を投票する

出題：8

The police believe that Melvin Matthew has been obtaining unauthorized access to computers belonging to numerous computer software and computer operating systems manufacturers, cellular telephone manufacturers, Internet Service Providers and Educational Institutions. They also suspect that he has been stealing, copying and misappropriating proprietary computer software belonging to the several victim companies. What is preventing the police from breaking down the suspects door and searching his home and seizing all of his computer equipment if they have not yet obtained a warrant?

A. The Federal Rules of Evidence

B. The Fourth Amendment

C. The USA patriot Act

D. The Good Samaritan Laws

正解：B 解答を投票する

312-49v10試験無料問題集「EC-COUNCIL Computer Hacking Forensic Investigator (CHFI-v10) 認定」