eccouncil-312-49v10

eccouncil-312-49v10 practice questions, page 12 of 34, with answer review and explanations.

Question 56

Jason is the security administrator of ACMA metal Corporation. One day he notices the company's Oracle database server has been compromised and the customer information along with financial data has been stolen. The financial loss will be in millions of dollars if the database gets into the hands of the competitors. Jason wants to report this crime to the law enforcement agencies immediately. Which organization coordinates computer crimes investigations throughout the United States?

  1. Internet Fraud Complaint Center
  2. Local or national office of the U.S. Secret Service
  3. National Infrastructure Protection Center
  4. CERT Coordination Center

Question 57

Which Intrusion Detection System (IDS) usually produces the most false alarms due to the unpredictable behaviors of users and networks?

  1. network-based IDS systems (NIDS)
  2. host-based IDS systems (HIDS)
  3. anomaly detection
  4. signature recognition

Question 58

You should make at least how many bit-stream copies of a suspect drive?

  1. 1
  2. 2
  3. 3
  4. 4

Question 59

Why should you note all cable connections for a computer you want to seize as evidence?

  1. to know what outside connections existed
  2. in case other devices were connected
  3. to know what peripheral devices exist
  4. to know what hardware existed

Question 60

What header field in the TCP/IP protocol stack involves the hacker exploit known as the Ping of Death?

  1. ICMP header field
  2. TCP header field
  3. IP header field
  4. UDP header field