EC-COUNCIL ECSS 問題集

質問 1：
Sarah, a forensic investigator, is working on a criminal case. She was provided with all the suspect devices.
Sarah employs an imaging software tool for duplicating the original data from the suspect devices. However, the tool she employed failed to image the data as the suspect version of the drive was very old and incompatible with imaging software. Hence, Sarah used an alternative data acquisition technique and succeeded in imaging the data.
Which of the following types of data acquisition techniques did Sarah employ in the above scenario?
A. Bit-stream disk-to-disk
B. Bit-stream disk-to-image file
C. Logical acquisition
D. Sparse acquisition
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
William is an attacker who is attempting to hack Bluetooth-enabled devices at public places. Within the target's range, he used special software to obtain the data stored in the victim's device. He used a technique that exploits the vulnerability in the OBject Exchange (OBEX) protocol that Bluetooth uses to exchange information.
Identify the attack performed by William in the above scenario.
A. Bluejacking
B. Bluesmacking
C. Bluesnarfing
D. Bluebugging
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An investigator wants to extract information about the status of the network interface cards (NICs) in an organization's Windows-based systems. Identify the command-line utility that can help the investigator detect the network status.
A. ifconfig
B. ipconfig
C. PsLoggedOn
D. PsList
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Bob, a forensic investigator, is investigating a live Windows system found at a crime scene. In this process, Bob extracted subkeys containing information such as SAM. Security, and software using an automated tool called FTK Imager.
Which of the following Windows Registry hives' subkeys provide the above information to Bob?
A. HKEY LOCAL MACHINE
B. HKEY .CURRENT CONFIG
C. HKEY CURRENT USER
D. H KEY-CLASSES. ROOT
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Robert, a security specialist, was appointed to strengthen the security of the organization's network. To prevent multiple login attempts from unknown sources, Robert implemented a security strategy of issuing alerts or warning messages when multiple failed login attempts are made.
Which of the following security risks is addressed by Robert to make attempted break-ins unsuccessful?
A. Small session-ID generation
B. Indefinite session timeout
C. Weak session-ID generation
D. Absence of account lockout for invalid session IDs
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A system that a cybercriminal was suspected to have used for performing an anti-social activity through the Tor browser. James reviewed the active network connections established using specific ports via Tor.
Which of the following port numbers does Tor use for establishing a connection via Tor nodes?
A. 1026/64666
B. 9150/9151
C. 31/456
D. 3024/4092
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Kalley, a shopping freak, often visits different e commerce websites from her office system. One day, she received a free software on her mail with the claim that it is loaded with new clothing offers. Tempted by this, Kalley downloaded the malicious software onto her system. The software infected Kalley's system and began spreading the infection to other systems connected to the network.
Identify the threat source through which Kalley unintentionally invited the malware into the network?
A. Portable hardware media
B. File sharing services
C. insecure patch management
D. Decoy application
正解：D
解説: (Topexam メンバーにのみ表示されます)