Free 312-49V8 Exam Dumps Preview

Log management includes all the processes and techniques used to collect, aggregate, and analyze computer-generated log messages. It consists of the hardware, software, network and media used to generate, transmit, store, analyze, and dispose of log data.

System software password cracking is defined as cracking the operating system and all other utilities that enable a computer to function

When the operating system marks cluster as used, but does not allocate them to any file, such clusters are known as ___________.

JPEG is a commonly used method of compressing photographic Images. It uses a compression algorithm to minimize the size of the natural image, without affecting the quality of the image. The JPEG lossy algorithm divides the image in separate blocks of____________.

At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

A swap file is a space on a hard disk used as the virtual memory extension of a computer's RAM.

Where is the hidden swap file in Windows located?

Which of the following steganography types hides the secret message in a specifically designed pattern on the document that is unclear to the average reader?

BMP (Bitmap) is a standard file format for computers running the Windows operating system. BMP images can range from black and white (1 bit per pixel) up to 24 bit color (16.7 million colors). Each bitmap file contains header, the RGBQUAD array, information header, and image data.

Which of the following element specifies the dimensions, compression type, and color format for the bitmap?

Which of the following is not correct when documenting an electronic crime scene?

A mobile operating system manages communication between the mobile device and other compatible devices like computers, televisions, or printers.

Which mobile operating system architecture is represented here?

When collecting electronic evidence at the crime scene, the collection should proceed from the most volatile to the least volatile

How do you define forensic computing?

A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

Which of the following approaches checks and compares all the fields systematically and intentionally for positive and negative correlation with each other to determine the correlation across one or multiple fields?

Wireless network discovery tools use two different methodologies to detect, monitor and log a WLAN device (i.e. active scanning and passive scanning). Active scanning methodology involves
____________and waiting for responses from available wireless networks.

Which of the following passwords are sent over the wire (and wireless) network, or stored on some media as it is typed without any alteration?

What is a bit-stream copy?

Which of the following Wi-Fi chalking methods refers to drawing symbols in public places to advertise open Wi-Fi networks?

Which of the following statements is incorrect when preserving digital evidence?

Task list command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer.

Which of the following task list commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?

The ARP table of a router comes in handy for Investigating network attacks, as the table contains IP addresses associated with the respective MAC addresses.

The ARP table can be accessed using the __________command in Windows 7.

You can interact with the Registry through intermediate programs. Graphical user interface (GUI) Registry editors such as Regedit.exe or Regedt32 exe are commonly used as intermediate programs in Windows 7.

Which of the following is a root folder of the registry editor?

An Internet standard protocol (built on top of TCP/IP) that assures accurate synchronization to the millisecond of computer clock times in a network of computers.

Which of the following statement is true for NTP Stratum Levels?

Damaged portions of a disk on which no read/Write operation can be performed is known as
______________.

Email archiving is a systematic approach to save and protect the data contained in emails so that it can tie easily accessed at a later date.

Which of the following commands shows you the names of all open shared files on a server and number of file locks on each file?

P0P3 (Post Office Protocol 3) is a standard protocol for receiving email that deletes mail on the server as soon as the user downloads it. When a message arrives, the POP3 server appends it to the bottom of the recipient's account file, which can be retrieved by the email client at any preferred time. Email client connects to the POP3 server at _______________by default to fetch emails.