312-49 Exam Details

  • Exam Code
    :312-49
  • Exam Name
    :ECCouncil Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :531 Q&As
  • Last Updated
    :Jul 09, 2026

EC-COUNCIL 312-49 Online Questions & Answers

  • Question 41:

    An International Mobile Equipment Identifier (IMEI) is a 15-digit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:

    A. Type Allocation Code (TAC)
    B. Integrated Circuit Code (ICC)
    C. Manufacturer Identification Code (MIC)
    D. Device Origin Code (DOC)

  • Question 42:

    When examining the log files from a Windows IIS Web Server, how often is a new log file created?

    A. the same log is used at all times
    B. a new log file is created everyday
    C. a new log file is created each week
    D. a new log is created each time the Web Server is started

  • Question 43:

    Which among the following U.S. laws requires financial institutions--companies that offer consumers financial products or services such as loans, financial or investment advice, or insurance--to protect their customers' information against security threats?

    A. SOX
    B. HIPAA
    C. GLBA
    D. FISMA

  • Question 44:

    The efforts to obtain information before a trail by demanding documents, depositions, questioned and answers written under oath, written requests for admissions of fact and examination of the scene is a description of what legal term?

    A. Detection
    B. Hearsay
    C. Spoliation
    D. Discovery

  • Question 45:

    Which of the following acts as a network intrusion detection system as well as network intrusion prevention system?

    A. Accunetix
    B. Nikto
    C. Snort
    D. Kismet

  • Question 46:

    Bob has encountered a system crash and has lost vital data stored on the hard drive of his Windows computer. He has no cloud storage or backup hard drives. he wants to recover all those data, which includes his personal photos, music, documents, videos, official email, etc. Which of the following tools shall resolve Bob's purpose?

    A. Colasoft's Capsa
    B. Recuva
    C. Cain and Abel
    D. Xplico

  • Question 47:

    Select the tool appropriate for examining the dynamically linked libraries of an application or malware.

    A. DependencyWalker
    B. SysAnalyzer
    C. PEiD
    D. ResourcesExtract

  • Question 48:

    While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

    A. Keep the information of file for later review
    B. Destroy the evidence
    C. Bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge
    D. Present the evidence to the defense attorney

  • Question 49:

    Which of the following files stores information about a local Google Drive installation such as User email ID, Local Sync Root Path, and Client version installed?

    A. filecache.db
    B. config.db
    C. sigstore.db
    D. Sync_config.db

  • Question 50:

    Which of the following network attacks refers to sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address is hosted so as to cause a denial-of-service attack?

    A. Email spamming
    B. Phishing
    C. Email spoofing
    D. Mail bombing

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.