EC-COUNCIL 312-49V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V10 Online Questions & Answers

• Question 541:

  Which of the following is NOT a graphics file?

  A. Picture1.tga
  B. Picture2. bmp
  C. Picture3. nfo
  D. Picture4. psd
  C. Picture3. nfo

• Question 542:

  Which of the following technique creates a replica of an evidence media?

  A. Data Extraction
  B. Backup
  C. Bit Stream Imaging
  D. Data Deduplication
  C. Bit Stream Imaging

• Question 543:

  Quality of a raster Image is determined by the _________________and the amount of information in each pixel.

  A. Total number of pixels
  B. Image file format
  C. Compression method
  D. Image file size
  A. Total number of pixels

• Question 544:

  Which of the following methods of mobile device data acquisition captures all the data present on the device, as well as all deleted data and access to unallocated space?

  A. Direct acquisition
  B. Physical acquisition
  C. Logical acquisition
  D. Manual acquisition
  B. Physical acquisition

• Question 545:

  What is the CIDR from the following screenshot?

  

  A. /24A./24A./24
  B. /32 B./32 B./32
  C. /16 C./16 C./16
  D. /8D./8D./8
  D. /8D./8D./8

• Question 546:

  Physical security recommendations: There should be only one entrance to a forensics lab

  A. True
  B. False
  A. True

• Question 547:

  In a high-profile digital forensics investigation, a Computer Hacking Forensic Investigator (CHFI) has successfully secured digital evidence from the crime scene. The investigator must now preserve this evidence for further analysis. Which of the following actions should the investigator prioritize to ensure evidence integrity?

  A. Use a tag to uniquely identify the evidence and create a chain of custody record
  B. Brief the press about the types of evidence collected to maintain transparency
  C. Immediately send the evidence to the forensic laboratory for detailed analysis
  D. Print out a copy of all digital les to keep as a backup
  A. Use a tag to uniquely identify the evidence and create a chain of custody record

• Question 548:

  A large multinational corporation suspects an internal breach of its data center and hires a forensic investigator. The investigator is required toconduct a search on the emails of an employee who is a US citizen, believed to be communicating classified information with a foreign entity.

  The forensic investigator, while respecting international laws and US privacy laws, should:

  A. Utilize the Privacy Act of 1974 to access the individual's personal records without their written consent
  B. Use the Foreign Intelligence Surveillance Act of 1978 (FISA) to get judicial authorization for electronic surveillance
  C. Refer to the Protect America Act of 2007 to conduct surveillance without a speci c warrant on the employee's electronic communication
  D. Apply the provisions under the Cybercrime Act 2001 of Australia to initiate electronic surveillance
  B. Use the Foreign Intelligence Surveillance Act of 1978 (FISA) to get judicial authorization for electronic surveillance

• Question 549:

  Examination of a computer by a technically unauthorized person will almost always result in:

  A. Rendering any evidence found inadmissible in a court of law
  B. Completely accurate results of the examination
  C. The chain of custody being fully maintained
  D. Rendering any evidence found admissible in a court of law
  A. Rendering any evidence found inadmissible in a court of law

• Question 550:

  Which of the following should a computer forensics lab used for investigations have?

  A. isolation
  B. restricted access
  C. open access
  D. an entry log
  B. restricted access