312-49 Exam Details

  • Exam Code
    :312-49
  • Exam Name
    :ECCouncil Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :531 Q&As
  • Last Updated
    :May 28, 2026

EC-COUNCIL 312-49 Online Questions & Answers

  • Question 371:

    Which of the following attack uses HTML tags like ?

    A. Phishing
    B. XSS attack
    C. SQL injection
    D. Spam

  • Question 372:

    Sectors in hard disks typically contain how many bytes?

    A. 256
    B. 512
    C. 1024
    D. 2048

  • Question 373:

    As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

    A. DBCC LOG(Transfers, 1)
    B. DBCC LOG(Transfers, 3)
    C. DBCC LOG(Transfers, 0)
    D. DBCC LOG(Transfers, 2)

  • Question 374:

    What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

    A. rootkit
    B. key escrow
    C. steganography
    D. Offset

  • Question 375:

    Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

    A. Linux/Unix computers are easier to compromise
    B. Linux/Unix computers are constantly talking
    C. Windows computers are constantly talking
    D. Windows computers will not respond to idle scans

  • Question 376:

    When obtaining a warrant, it is important to:

    A. particularlydescribe the place to be searched and particularly describe the items to be seized
    B. generallydescribe the place to be searched and particularly describe the items to be seized
    C. generallydescribe the place to be searched and generally describe the items to be seized
    D. particularlydescribe the place to be searched and generally describe the items to be seized

  • Question 377:

    The objective of this act was to protect consumers' personal financial information held by financial institutions and their service providers.

    A. Gramm-Leach-Bliley Act
    B. Sarbanes-Oxley 2002
    C. California SB 1386
    D. HIPAA

  • Question 378:

    Which of the following tool enables a user to reset his/her lost admin password in a Windows system?

    A. Advanced Office Password Recovery
    B. Active@ Password Changer
    C. Smartkey Password Recovery Bundle Standard
    D. Passware Kit Forensic

  • Question 379:

    An attacker has compromised a cloud environment of a company and used the employee information to perform an identity theft attack. Which type of attack is this?

    A. Cloud as a subject
    B. Cloud as a tool
    C. Cloud as an object
    D. Cloud as a service

  • Question 380:

    An investigator enters the command sqlcmd -S WIN-CQQMK62867E -e -s"," -E as part of collecting the primary data file and logs from a database. What does the "WIN-CQQMK62867E" represent?

    A. Name of the Database
    B. Name of SQL Server
    C. Operating system of the system
    D. Network credentials of the database

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.