Online Access Free EC0-349 Exam Questions

When making the preliminary investigations in a sexual harassment case, how many investigators are you recommended having?

• A.Three
• B.One
• C.Two
• D.Four

Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks.
The source, nature, and time of the attack can be determined by _________of the compromised system.

• A.Analyzing SAM file
• B.Analyzing hard disk boot records
• C.Analyzing rainbow tables
• D.Analyzing log files

In what circumstances would you conduct searches without a warrant?

• A.When destruction of evidence is imminent, a warrantless seizure of that evidence is justified if there is probable cause to believe that the item seized constitutes evidence of criminal activity
• B.Law enforcement agencies located in California under section SB 567 are authorized to seize computers without warrant under all circumstances
• C.Agents may search a place or object without a warrant if he suspect the crime was committed
• D.A search warrant is not required if the crime involves Denial-Of-Service attack over the Internet

What is the CIDR from the following screenshot?

• A./16
• B./24
• C./32
• D./8

You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation.
Your job is to complete the required evidence custody forms to properly document each piece of evidence as other members of your team collect it. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?

• A.All forms should be placed in an approved secure container because they are now primary evidence in the case
• B.The multi-evidence form should be placed in an approved secure container with the hard drives and the single-evidence forms should be placed in the report file
• C.All forms should be placed in the report file because they are now primary evidence in the case
• D.The multi-evidence form should be placed in the report file and the single-evidence forms should be kept with each hard drive in an approved secure container