EC-COUNCIL EC0-349 問題集

質問 1：
Which device in a wireless local area network (WLAN) determines the next network point to which a packet should be forwarded toward its destination?
A. Antenna
B. Wireless modem
C. Mobile station
D. Wireless router
正解：D

質問 2：
Why are Linux/Unix based computers better to use than Windows computers for idle scanning?
A. Windows computers are constantly talking
B. Linux/Unix computers are constantly talking
C. Windows computers will not respond to idle scans
D. Linux/Unix computers are easier to compromise
正解：A

質問 3：
What happens when a file is deleted by a Microsoft operating system using the FAT file system?
A. The file is erased and cannot be recovered
B. The file is erased but can be recovered partially
C. A copy of the file is stored and the original file is erased
D. Only the reference to the file is removed from the FAT and can be recovered
正解：D

質問 4：
Jacob is a computer forensics investigator with over 10 years experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy and integrity of the technical log files gathered in an investigation into computer fraud. What is the term used for Jacob testimony in this case?computer fraud.
What is the term used for Jacob? testimony in this case?
A. Justification
B. Authentication
C. Certification
D. Reiteration
正解：B

質問 5：
What must be obtained before an investigation is carried out at a location?
A. Search warrant
B. Subpoena
C. Habeas corpus
D. Modus operandi
正解：A

質問 6：
Why should you note all cable connections for a computer you want to seize as evidence?
A. to know what hardware existed
B. to know what peripheral devices exist
C. to know what outside connections existed
D. in case other devices were connected
正解：C

質問 7：
The evolution of web services and their increasing use in business offers new attack vectors in an application framework. Web services are based on XML protocols such as web Services Definition Language (WSDL) for describing the connection points, Universal Description, Discovery, and Integration (UDDI) for the description and discovery of Web services and Simple Object Access Protocol (SOAP) for communication between Web services that are vulnerable to various web application threats. Which of the following layer in web services stack is vulnerable to fault code leaks?
A. Access Layer
B. Presentation Layer
C. Security Layer
D. Discovery Layer
正解：D

質問 8：
Windows Security Event Log contains records of login/logout activity or other security- related events specified by the system's audit policy. What does event ID 531 in Windows Security Event Log indicates?
A. An attempt was made to log on with the user account outside of the allowed time
B. The logon attempt was made with an unknown user name or a known user name with a bad password
C. A logon attempt was made using a disabled account
D. A user successfully logged on to a computer
正解：C