Eccouncil 112 57.pdf
Q: 1
Alice and John are close college friends. Alice frequently sends emails to John attaching her pics with
friends. One day, Alice sent an email to John describing all the details related to the final year project
without specifying the actual purpose. John missed the message as he frequently receives emails
from her and did not arrive for a project seminar.
Which of the following email fields could Alice have used in the above scenario to highlight the
importance of the email?
Options
Q: 2
Which of the following layers of the TCP/IP model includes protocols such as Frame Relay, SMDS, Fast
Ethernet, SLIP, PPP, FDDI, ATM, Ethernet, and ARP to enable a machine to deliver the desired data to
other hosts in the same network?
Options
Q: 3
Which of the following techniques is defined as the art of hiding data “behind” other data without
the target’s knowledge, thereby hiding the existence of the message itself?
Options
Q: 4
Which of the following commands can an investigator use to parse GPTs of both types of hard disks,
including those formatted with either UEFI or MBR?
Options
Q: 5
Which of the following MAC forensic data components saves file information and related events
using a token with a binary structure?
Options
Q: 6
Which of the following Tor relay nodes in the Tor circuit is designed to transfer data in an encrypted
format?
Options
Q: 7
Which of the following network protocols creates secure tunneling through which content
obfuscation can be achieved?
Options
Q: 8
Which of the following tools helps forensic experts analyze user activity in the Microsoft Edge
browser?
Options
Q: 9
Which of the following measures is defined as the time to move read or write disc heads from one
point to another on the disk?
Options
Q: 10
A disk drive has 16,384 cylinders, 80 heads, and 63 sectors per track, and each sector can store 512
bytes of data.
What is the total size of the disk?
Options
Question 1 of 10
