Online Access Free EC1-349 Practice Test

Ever-changing advancement or mobile devices increases the complexity of mobile device examinations. Which or the following is an appropriate action for the mobile forensic investigation?

• A.If the phone is in a cradle or connected to a PC with a cable, then unplug the device from the computer
• B.If the device's display is ON. the screen's contents should be photographed and, if necessary, recorded manually, capturing the time, service status, battery level, and other displayed icons
• C.To avoid unwanted interaction with devices found on the scene, turn on any wireless interfaces such as Bluetooth and Wi-Fi radios
• D.Do not wear gloves while handling cell phone evidence to maintain integrity of physical evidence

Attacker uses vulnerabilities in the authentication or session management functions such as exposed accounts, session IDs, logout, password management, timeouts, remember me. secret question, account update etc. to impersonate users, if a user simply closes the browser without logging out from sites accessed through a public computer, attacker can use the same browser later and exploit the user's privileges. Which of the following vulnerability/exploitation is referred above?

• A.I/O exploitation
• B.Password Exploitation
• C.Session ID in URLs
• D.Timeout Exploitation

Which of the following statements is incorrect when preserving digital evidence?

• A.Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals
• B.Verily if the monitor is in on, off, or in sleep mode
• C.Remove the power cable depending on the power state of the computer i.e., in on. off, or in sleep mode
• D.Turn on the computer and extract Windows event viewer log files

What is the smallest allocation unit of a hard disk?

• A.Disk platters
• B.Spinning tracks
• C.Slack space
• D.Cluster

Deposition enables opposing counsel to preview an expert witness's testimony at trial. Which of the following deposition is not a standard practice?

• A.Only one attorneys is present
• B.Both attorneys are present
• C.Opposing counsel asks questions
• D.No jury or judge