EC1-349 무료 덤프문제 온라인 액세스

When a file or folder is deleted, the complete path, including the original file name, is stored in a special hidden file called "INF02" in the Recycled folder. If the INF02 file is deleted, it is re-created when you___________.

• A.Restart Windows
• B.Run the anti-spyware tool on the system
• C.Run the antivirus tool on the system
• D.Kill the running processes in Windows task manager

Which of the following statements is incorrect when preserving digital evidence?

• A.Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals
• B.Remove the power cable depending on the power state of the computer i.e., in on. off, or in sleep mode
• C.Verily if the monitor is in on, off, or in sleep mode
• D.Turn on the computer and extract Windows event viewer log files

A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

• A.Harden organization network security
• B.Take permission from all employees of the organization for investigation
• C.Keep the evidence a highly confidential and hide the evidence from law enforcement agencies
• D.Create an image backup of the original evidence without tampering with potential evidence

Which of the following file in Novel GroupWise stores information about user accounts?

• A.ngwguard.db
• B.PRIV.EDB
• C.gwcheck.db
• D.PRIV.STM

What is static executable file analysis?

• A.It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances
• B.It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances
• C.It is a process that consists of collecting information about and from an executable file by launching an executable file in a controlled and monitored environment
• D.It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment