Exam Details

  • Exam Code
    :312-49V10
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V10)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :1006 Q&As
  • Last Updated
    :May 06, 2025

EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

  • Question 681:

    BMP (Bitmap) is a standard file format for computers running the Windows operating system. BMP images can range from black and white (1 bit per pixel) up to 24 bit color (16.7 million colors). Each bitmap file contains header, the RGBQUAD array, information header, and image data. Which of the following element specifies the dimensions, compression type, and color format for the bitmap?

    A. Header

    B. The RGBQUAD array

    C. Information header

    D. Image data

  • Question 682:

    Windows Security Accounts Manager (SAM) is a registry file which stores passwords in a hashed format. SAM file in Windows is located at:

    A. C:\windows\system32\config\SAM

    B. C:\windows\system32\con\SAM

    C. C:\windows\system32\Boot\SAM

    D. C:\windows\system32\drivers\SAM

  • Question 683:

    If a file (readme.txt) on a hard disk has a size of 2600 bytes, how many sectors are normally allocated to this file?

    A. 4 Sectors

    B. 5 Sectors

    C. 6 Sectors

    D. 7 Sectors

  • Question 684:

    Data is striped at a byte level across multiple drives and parity information is distributed among all member drives.

    What RAID level is represented here?

    A. RAID Level0

    B. RAID Level 1

    C. RAID Level 3

    D. RAID Level 5

  • Question 685:

    Which of the following statements is not a part of securing and evaluating electronic crime scene checklist?

    A. Locate and help the victim

    B. Transmit additional flash messages to other responding units

    C. Request additional help at the scene if needed

    D. Blog about the incident on the internet

  • Question 686:

    Which of the following Steganography techniques allows you to encode information that ensures creation of cover for secret communication?

    A. Substitution techniques

    B. Transform domain techniques

    C. Cover generation techniques

    D. Spread spectrum techniques

  • Question 687:

    Which of the following file in Novel GroupWise stores information about user accounts?

    A. ngwguard.db

    B. gwcheck.db

    C. PRIV.EDB

    D. PRIV.STM

  • Question 688:

    What is the first step that needs to be carried out to crack the password?

    A. A word list is created using a dictionary generator program or dictionaries

    B. The list of dictionary words is hashed or encrypted

    C. The hashed wordlist is compared against the target hashed password, generally one word at a time

    D. If it matches, that password has been cracked and the password cracker displays the unencrypted version of the password

  • Question 689:

    Depending upon the Jurisdictional areas, different laws apply to different incidents. Which of the following law is related to fraud and related activity in connection with computers?

    A. 18 USC 7029

    B. 18 USC 7030

    C. 18 USC 7361

    D. 18 USC 7371

  • Question 690:

    Smith, an employee of a reputed forensic Investigation firm, has been hired by a private organization to investigate a laptop that is suspected to be involved in hacking of organization DC server. Smith wants to find all the values typed into the Run box in the Start menu. Which of the following registry key Smith will check to find the above information?

    A. UserAssist Key

    B. MountedDevices key

    C. RunMRU key

    D. TypedURLs key

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V10 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.