Real 312-49v10 Dumps - EC-COUNCIL Correct Answers updated on 2022 [Q209-Q228]

4/5 - (3 votes)

Use Real 312-49v10 Dumps – EC-COUNCIL Correct Answers updated on 2022

CHFI v10 312-49v10 Exam Practice Dumps

EC-COUNCIL 312-49v10 Exam Syllabus Topics:

Topic	Details
Topic 1	Understanding Hard Disks and File Systems Investigating Email Crimes
Topic 2	Data Acquisition and Duplication Linux and Mac Forensics
Topic 3	Defeating Anti-Forensics Techniques Malware Forensics
Topic 4	Database Forensics Network Forensics Windows Forensics
Topic 5	Computer Forensics Investigation Process Dark Web Forensics Mobile Forensics

NEW QUESTION 209
Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

Linux/Unix computers are easier to compromise

Linux/Unix computers are constantly talking

Windows computers are constantly talking

Windows computers will not respond to idle scans

NEW QUESTION 210
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk?

A compressed file

A Data stream file

An encrypted file

A reserved file

NEW QUESTION 211
What is the role of Alloc.c in Apache core?

It handles allocation of resource pools

It is useful for reading and handling of the configuration files

It takes care of all the data exchange and socket connections between the client and the server

It handles server start-ups and timeouts

NEW QUESTION 212
You are assigned a task to examine the log files pertaining to MyISAM storage engine. While examining, you are asked to perform a recovery operation on a MyISAM log file. Which among the following MySQL Utilities allow you to do so?

mysqldump

myisamaccess

myisamlog

myisamchk

NEW QUESTION 213
The use of warning banners helps a company avoid litigation by overcoming an employee assumed __________________________. When connecting to the company’s intranet, network or Virtual Private Network(VPN) and will allow the company’s investigators to monitor, search and retrieve information stored within the network.

Right to work

Right of free speech

Right to Internet Access

Right of Privacy

NEW QUESTION 214
Which of the following is NOT an anti-forensics technique?

Data Deduplication

Steganography

Encryption

Password Protection

NEW QUESTION 215
You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?

Polymorphic

Metamorphic

Oligomorhic

Transmorphic

NEW QUESTION 216
If you are concerned about a high level of compression but not concerned about any possible data loss, what type of compression would you use?

Lossful compression

Lossy compression

Lossless compression

Time-loss compression

NEW QUESTION 217
When you carve an image, recovering the image depends on which of the following skills?

Recognizing the pattern of the header content

Recovering the image from a tape backup

Recognizing the pattern of a corrupt file

Recovering the image from the tape backup

NEW QUESTION 218
Investigators can use the Type Allocation Code (TAC) to find the model and origin of a mobile device. Where is TAC located in mobile devices?

International Mobile Equipment Identifier (IMEI)

Integrated circuit card identifier (ICCID)

International mobile subscriber identity (IMSI)

Equipment Identity Register (EIR)

NEW QUESTION 219
UEFI is a specification that defines a software interface between an OS and platform firmware. Where does this interface store information about files present on a disk?

BIOS-MBR

GUID Partition Table (GPT)

Master Boot Record (MBR)

BIOS Parameter Block

NEW QUESTION 220
What will the following command accomplish?

Test ability of a router to handle over-sized packets

Test the ability of a router to handle under-sized packets

Test the ability of a WLAN to handle fragmented packets

Test the ability of a router to handle fragmented packets

NEW QUESTION 221
You have used a newly released forensic investigation tool, which doesn’t meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?

The tool hasn’t been tested by the International Standards Organization (ISO)

Only the local law enforcement should use the tool

The total has not been reviewed and accepted by your peers

You are not certified for using the tool

NEW QUESTION 222
Sheila is a forensics trainee and is searching for hidden image files on a hard disk. She used a forensic investigation tool to view the media in hexadecimal code for simplifying the search process. Which of the following hex codes should she look for to identify image files?

ff d8 ff

25 50 44 46

d0 0f 11 e0

50 41 03 04

NEW QUESTION 223
During forensics investigations, investigators tend to collect the system time at first and compare it with UTC. What does the abbreviation UTC stand for?

Coordinated Universal Time

Universal Computer Time

Universal Time for Computers

Correlated Universal Time

NEW QUESTION 224
Paraben Lockdown device uses which operating system to write hard drive data?

Mac OS

Red Hat

Unix

Windows

NEW QUESTION 225
When conducting computer forensic analysis, you must guard against ______________ So that you remain focused on the primary job and insure that the level of work does not increase beyond what was originally expected.

Hard Drive Failure

Scope Creep

Unauthorized expenses

Overzealous marketing

NEW QUESTION 226
Data Files contain Multiple Data Pages, which are further divided into Page Header, Data Rows, and Offset Table. Which of the following is true for Data Rows?

Data Rows store the actual data

Data Rows present Page type. Page ID, and so on

Data Rows point to the location of actual data

Data Rows spreads data across multiple databases

NEW QUESTION 227
What operating system would respond to the following command?

Windows 95

FreeBSD

Windows XP

Mac OS X

NEW QUESTION 228
You are employed directly by an attorney to help investigate an alleged sexual harassment case at a large pharmaceutical manufacture. While at the corporate office of the company, the CEO demands to know the status of the investigation. What prevents you from discussing the case with the CEO?

the attorney-work-product rule

Good manners

Trade secrets

ISO 17799

Loading …