312-49 Exam Details

  • Exam Code
    :312-49
  • Exam Name
    :ECCouncil Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :531 Q&As
  • Last Updated
    :May 28, 2026

EC-COUNCIL 312-49 Online Questions & Answers

  • Question 271:

    Chong-lee, a forensics executive, suspects that a malware is continuously making copies of files and folders on a victim system to consume the available disk space. What type of test would confirm his claim?

    A. File fingerprinting
    B. Identifying file obfuscation
    C. Static analysis
    D. Dynamic analysis

  • Question 272:

    George is performing security analysis for Hammond and Sons LLC. He is testing security vulnerabilities of their wireless network. He plans on remaining as "stealthy" as possible during the scan. Why would a scanner like Nessus is not recommended in this situation?

    A. Nessus is too loud
    B. Nessus cannot perform wireless testing
    C. Nessus is not a network scanner
    D. There are no ways of performing a "stealthy" wireless scan

  • Question 273:

    Which of the following are small pieces of data sent from a website and stored on the user's computer by the user's web browser to track, validate, and maintain specific user information?

    A. Temporary Files
    B. Open files
    C. Cookies
    D. Web Browser Cache

  • Question 274:

    Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

    A. Xplico
    B. Colasoft's Capsa
    C. FileSalvage
    D. DriveSpy

  • Question 275:

    What does ICMP Type 3/Code 13 mean?

    A. Host Unreachable
    B. Administratively Blocked
    C. Port Unreachable
    D. Protocol Unreachable

  • Question 276:

    Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city's network using BGP devices and zombies? What type of Penetration Testing is Larry planning to carry out?

    A. Router Penetration Testing
    B. DoS Penetration Testing
    C. Firewall Penetration Testing
    D. Internal Penetration Testing

  • Question 277:

    It takes _____________ mismanaged case/s to ruin your professional reputation as a computer forensics examiner?

    A. by law, three
    B. quite a few
    C. only one
    D. at least two

  • Question 278:

    Watson, a forensic investigator, is examining a copy of an ISO file stored in CDFS format. What type of evidence is this?

    A. Data from a CD copied using Windows
    B. Data from a CD copied using Mac-based system
    C. Data from a DVD copied using Windows system
    D. Data from a CD copied using Linux system

  • Question 279:

    Heather, a computer forensics investigator, is assisting a group of investigators working on a large computer fraud case involving over 20 people. These 20 people, working in different offices, allegedly siphoned off money from many different client accounts. Heather responsibility is to find out how the accused people communicated between each other. She has searched their email and their computers and has not found any useful evidence. Heather then finds some possibly useful evidence under the desk of one of the accused. In an envelope she finds a piece of plastic with numerous holes cut out of it. Heather then finds the same exact piece of plastic with holes at many of the other accused peoples desks. Heather believes that the 20 people involved in the case were using a cipher to send secret messages in between each other. What type of cipher was used by the accused in this case?

    A. Grill cipher
    B. Null cipher
    C. Text semagram
    D. Visual semagram

  • Question 280:

    The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.

    A. Locard Exchange Principle
    B. Clark Standard
    C. Kelly Policy
    D. Silver-Platter Doctrine

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.