File Info
| Exam | Computer Hacking Forensic Investigator |
| Number | 312-49 |
| File Name | ECCouncil.312-49.PracticeTest.2018-08-05.187q.tqb |
| Size | 2 MB |
| Posted | Aug 05, 2018 |
| Download | ECCouncil.312-49.PracticeTest.2018-08-05.187q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
E-mail logs contain which of the following information to help you in your investigation? (Choose four.)
- user account that was used to send the account
- attachments sent with the e-mail message
- unique message identifier
- contents of the e-mail message
- date and time the message was sent
Correct answer: ACDE
Question 2
In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?
- one who has NTFS 4 or 5 partitions
- one who uses dynamic swap file capability
- one who uses hard disk writes on IRQ 13 and 21
- one who has lots of allocation units per block or cluster
Correct answer: D
Question 3
In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?
- evidence must be handled in the same way regardless of the type of case
- evidence procedures are not important unless you work for a law enforcement agency
- evidence in a criminal case must be secured more tightly than in a civil case
- evidence in a civil case must be secured more tightly than in a criminal case
Correct answer: C
