312-49 Exam Details

  • Exam Code
    :312-49
  • Exam Name
    :ECCouncil Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :531 Q&As
  • Last Updated
    :May 28, 2026

EC-COUNCIL 312-49 Online Questions & Answers

  • Question 461:

    What is considered a grant of a property right given to an individual who discovers or invents a new machine, process, useful composition of matter or manufacture?

    A. Copyright
    B. Design patent
    C. Trademark
    D. Utility patent

  • Question 462:

    You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities: When you type this and click on search, you receive a pop-up window that says: "This is a test."

    What is the result of this test?

    A. Your website is vulnerable to CSS
    B. Your website is not vulnerable
    C. Your website is vulnerable to SQL injection
    D. Your website is vulnerable to web bugs

  • Question 463:

    Where is the startup configuration located on a router?

    A. Static RAM
    B. BootROM
    C. NVRAM
    D. Dynamic RAM

  • Question 464:

    To check for POP3 traffic using Ethereal, what port should an investigator search by?

    A. 143
    B. 25
    C. 110
    D. 125

  • Question 465:

    You are working as a Computer forensics investigator for a corporation on a computer abuse case. You discover evidence that shows the subject of your investigation is also embezzling money from the company. The company CEO and the corporate legal counsel advise you to contact law enforcement and provide them with the evidence that you have found. The law enforcement officer that responds requests that you put a network sniffer on your network and monitor all traffic to the subject's computer. You inform the officer that you will not be able to comply with that request because doing so would:

    A. Violate your contract
    B. Cause network congestion
    C. Make you an agent of law enforcement
    D. Write information to the subject's hard drive

  • Question 466:

    Where are files temporarily written in Unix when printing?

    A. /usr/spool
    B. /var/print
    C. /spool
    D. /var/spool

  • Question 467:

    When making the preliminary investigations in a sexual harassment case, how many investigators are you recommended having?

    A. One
    B. Two
    C. Three
    D. Four

  • Question 468:

    You have been asked to investigate after a user has reported a threatening e-mail they have received from an external source. Which of the following are you most interested in when trying to trace the source of the message?

    A. The X509 Address
    B. The SMTP reply Address
    C. The E-mail Header
    D. The Host Domain Name

  • Question 469:

    An investigator is analyzing a checkpoint firewall log and comes across symbols. What type of log is he looking at?

    A. Security event was monitored but not stopped
    B. Malicious URL detected
    C. An email marked as potential spam
    D. Connection rejected

  • Question 470:

    Which of the following is a device monitoring tool?

    A. Capsa
    B. Driver Detective
    C. Regshot
    D. RAM Capturer

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.