312-49 Exam Details

  • Exam Code
    :312-49
  • Exam Name
    :ECCouncil Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :531 Q&As
  • Last Updated
    :May 28, 2026

EC-COUNCIL 312-49 Online Questions & Answers

  • Question 141:

    When operating systems mark a cluster as used but not allocated, the cluster is considered as _________

    A. Corrupt
    B. Bad
    C. Lost
    D. Unallocated

  • Question 142:

    A master boot record (MBR) is the first sector ("sector zero") of a data storage device. What is the size of MBR?

    A. Depends on the capacity of the storage device
    B. 1048 Bytes
    C. 4092 Bytes
    D. 512 Bytes

  • Question 143:

    Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to only allow FTP-PUT. Which firewall would be most appropriate for Harold? needs?

    A. Circuit-level proxy firewall
    B. Packet filtering firewall
    C. Application-level proxy firewall
    D. Data link layer firewall

  • Question 144:

    Steven has been given the task of designing a computer forensics lab for the company he works for. He has found documentation on all aspects of how to design a lab except the number of exits needed. How many exits should Steven include in his design for the computer forensics lab?

    A. Three
    B. One
    C. Two
    D. Four

  • Question 145:

    Which of the following should a computer forensics lab used for investigations have?

    A. isolation
    B. restricted access
    C. open access
    D. an entry log

  • Question 146:

    This type of testimony is presented by someone who does the actual fieldwork and does not offer a view in court.

    A. Civil litigation testimony
    B. Expert testimony
    C. Victim advocate testimony
    D. Technical testimony

  • Question 147:

    Jessica works as systems administrator for a large electronics firm. She wants to scan her network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

    A. Tracert
    B. Smurf scan
    C. Ping trace
    D. ICMP ping sweep

  • Question 148:

    Printing under a Windows Computer normally requires which one of the following files types to be created?

    A. EME
    B. MEM
    C. EMF
    D. CME

  • Question 149:

    Madison is on trial for allegedly breaking into her university's internal network. The police raided her dorm room and seized all of her computer equipment. Madison's lawyer is trying to convince the judge that the seizure was unfounded and baseless. Under which US Amendment is Madison's lawyer trying to prove the police violated?

    A. The 4th Amendment
    B. The 1st Amendment
    C. The 10th Amendment
    D. The 5th Amendment

  • Question 150:

    As a security analyst, you setup a false survey website that will require users to create a username and a strong password. You send the link to all the employees of the company. What information will you be able to gather?

    A. The IP address of the employees' computers
    B. Bank account numbers and the corresponding routing numbers
    C. The employees network usernames and passwords
    D. The MAC address of the employees' computers

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.