Exam 312-49 topic 1 question 112 discussion

Actual exam question from ECCouncil's 312-49

Question #: 112
Topic #: 1

Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

A. The manufacturer of the system compromised
B. The logic, formatting and elegance of the code used in the attack
C. The nature of the attack
D. The vulnerability exploited in the incident

Show Suggested Answer

Suggested Answer: B 🗳️

by cnc at Oct. 2, 2020, 11:50 p.m.

Comments

Submit Cancel

Bennoli13

1 year, 1 month ago

B. The logic, formatting and elegance of the code used in the attack The code used by the attacker can provide significant insights into their skills, experience, and potentially their identity. Analyzing the logic, formatting, and elegance of the code can help investigators understand the attacker's level of sophistication, their typical coding practices, and potentially link the attack to other known incidents or individuals. While the nature of the attack and the vulnerability exploited are also important, they are more focused on the technical details of the attack rather than the profile of the attacker. The manufacturer's identity of the compromised system is the least relevant for profiling the attacker.

upvoted 1 times

...

larajorge

4 years, 3 months ago

B is correct

upvoted 2 times

...

cnc

4 years, 10 months ago

D is correct answer

upvoted 1 times

...