ECSA EC0-479 Release Date

EC-Council Certified Security Analyst (ECSA) Questions and Answers

Question 13

Office documents (Word, Excel, PowerPoint) contain a code that allows tracking the MAC, or unique identifier, of the machine that created the document. What is that code called?

Options:

the Microsoft Virtual Machine Identifier

the Personal Application Protocol

the Globally Unique ID

the Individual ASCII String

Question 14

With Regard to using an Antivirus scanner during a computer forensics investigation, You should:

Options:

Scan the suspect hard drive before beginning an investigation

Never run a scan on your forensics workstation because it could change your systems configuration

Scan your forensics workstation at intervals of no more than once every five minutes during an investigation

Scan your Forensics workstation before beginning an investigation

Question 15

The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.

Options:

Locard Exchange Principle

Clark Standard

Kelly Policy

Silver-Platter Doctrine

Question 16

You are employed directly by an attorney to help investigate an alleged sexual harassment case at a large pharmaceutical manufacture. While at the corporate office of the company, the CEO demands to know the status of the investigation. What prevents you from discussing the case with the CEO?

Options:

the attorney-work-product rule

Good manners

Trade secrets

ISO 17799

11.11 Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

EC-Council Certified Security Analyst (ECSA) Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce