Exam Details

  • Exam Code
    :312-49V10
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V10)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :1006 Q&As
  • Last Updated
    :May 06, 2025

EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

  • Question 491:

    Which of the following should a computer forensics lab used for investigations have?

    A. isolation

    B. restricted access

    C. open access

    D. an entry log

  • Question 492:

    This is the original file structure database that Microsoft originally designed for floppy disks. It is written to the outermost track of a disk and contains information about each file stored on the drive.

    A. Master Boot Record (MBR)

    B. Master File Table (MFT)

    C. File Allocation Table (FAT)

    D. Disk Operating System (DOS)

  • Question 493:

    On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

    A. SAM

    B. AMS

    C. Shadow file

    D. Password.conf

  • Question 494:

    ____________________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

    A. Network Forensics

    B. Computer Forensics

    C. Incident Response

    D. Event Reaction

  • Question 495:

    What type of flash memory card comes in either Type I or Type II and consumes only five percent of the power required by small hard drives?

    A. SD memory

    B. CF memory

    C. MMC memory

    D. SM memory

  • Question 496:

    Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive? 22,164 cylinders/disk 80 heads/cylinder 63 sectors/track

    A. 53.26 GB

    B. 57.19 GB

    C. 11.17 GB

    D. 10 GB

  • Question 497:

    The objective of this act was to protect consumers personal financial information held by financial institutions and their service providers.

    A. HIPAA

    B. Sarbanes-Oxley 2002

    C. California SB 1386

    D. Gramm-Leach-Bliley Act

  • Question 498:

    You are using DriveSpy, a forensic tool and want to copy 150 sectors where the starting sector is 1709 on the primary hard drive. Which of the following formats correctly specifies these sectors?

    A. 0:1000, 150

    B. 0:1709, 150

    C. 1:1709, 150

    D. 0:1709-1858

  • Question 499:

    You have used a newly released forensic investigation tool, which doesn't meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?

    A. The tool hasn't been tested by the International Standards Organization (ISO)

    B. Only the local law enforcement should use the tool

    C. The total has not been reviewed and accepted by your peers

    D. You are not certified for using the tool

  • Question 500:

    What type of equipment would a forensics investigator store in a StrongHold bag?

    A. PDAPDA?

    B. Backup tapes

    C. Hard drives

    D. Wireless cards

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V10 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.