PrepAway - Latest Free Exam Questions & Answers

Category: ECSS

Exam ECSS: EC-Council Certified Security Specialist

Which of the following type of witnesses is a lay witness?

Peter works as a professional Computer Hacking Forensic Investigator for eLaw-Suit law firm. He
is working on a case of a cyber crime. Peter knows that the good investigative report should not
only communicate the relevant facts, but also present expert opinion. This report should not
include the cases in which the expert acted as a lay witness. Which of the following type of
witnesses is a lay witness?

Which of the following operating systems can be easily identified with the help of TCP FIN scanning?

TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to
the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the
attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be

ignored and the port will drop the packet. Which of the following operating systems can be easily
identified with the help of TCP FIN scanning?

Which of the following is the correct order for searching data on a Windows based system?

Peter works as a Technical Representative in a CSIRT for SecureEnet Inc. His team is called to
investigate the computer of an employee, who is suspected for classified data theft. Suspect’s
computer runs on Windows operating system. Peter wants to collect data and evidences for
further analysis. He knows that in Windows operating system, the data is searched in pre-defined
steps for proper and efficient analysis. Which of the following is the correct order for searching
data on a Windows based system?

which of the following laws can the employee be prosecuted?

Adam works as a Computer Hacking Forensic Investigator for a garment company in the United
States. A project has been assigned to him to investigate a case of a disloyal employee who is
suspected of stealing design of the garments, which belongs to the company and selling those
garments of the same design under different brand name. Adam investigated that the company
does not have any policy related to the copy of design of the garments. He also investigated that

the trademark under which the employee is selling the garments is almost identical to the original
trademark of the company. On the grounds of which of the following laws can the employee be
prosecuted?


Page 20 of 28« First...10...1819202122...Last »