312-49V10 Exam Details

  • Exam Code
    :312-49V10
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V10)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :1028 Q&As
  • Last Updated
    :May 31, 2026

EC-COUNCIL 312-49V10 Online Questions & Answers

  • Question 691:

    What do you call the process in which an attacker uses magnetic field over the digital media device to delete any previously stored data?

    A. Disk deletion
    B. Disk cleaning
    C. Disk degaussing
    D. Disk magnetization

  • Question 692:

    John is working on his company policies and guidelines. The section he is currently working on covers company documents; how they should be handled, stored, and eventually destroyed. John is concerned about the process whereby outdated documents are destroyed.

    What type of shredder should John write in the guidelines to be used when destroying documents?

    A. Strip-cut shredder
    B. Cross-cut shredder
    C. Cross-hatch shredder
    D. Cris-cross shredder

  • Question 693:

    A forensic investigator is examining a potential intrusion involving an Amazon Echo. The investigator has acquired an affected Echo and the smartphone synced to it. For further data analysis, he needs to retrieve relevant database files from the smartphone.

    Which files will the investigator primarily focus on to retrieve essential information?

    A. /data/data/com.amazon.dee.app/databases/map_data_storage_v2. db and /data/data/com.amazon.dee.app/databases/DataStore.db
    B. /data/data/com.amazon.dee.app/databases/DataStore.db and /data/data/com.amazon.dee.app/databases/map_data_storage_v3. db
    C. /data/data/com.amazon.dee.app/databases/map_data_storage_v1.db and /data/data/com.amazon.dee.app/databases/DataStore.db
    D. /data/data/com.amazon.dee.app/databases/map_data_storage_v2. db and /data/data/com.amazon.dee.app/databases/DeviceInfo.db

  • Question 694:

    Jeff is a forensics investigator for a government agency's cyber security office. Jeff is tasked with acquiring a memory dump of a Windows 10 computer that was involved in a DDoS attack on the government agency's web application. Jeff is onsite to collect the memory.

    What tool could Jeff use?

    A. Memcheck
    B. RAMMapper
    C. Autopsy
    D. Volatility

  • Question 695:

    Who is responsible for the following tasks?

    Secure the scene and ensure that it is maintained In a secure state until the Forensic Team advises Make notes about the scene that will eventually be handed over to the Forensic Team

    A. Non-Laboratory Staff
    B. System administrators
    C. Local managers or other non-forensic staff
    D. Lawyers

  • Question 696:

    What type of equipment would a forensics investigator store in a StrongHold bag?

    A. PDAPDA?
    B. Backup tapes
    C. Hard drives
    D. Wireless cards

  • Question 697:

    When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

    A. Write-blocker
    B. Protocol analyzer
    C. Firewall
    D. Disk editor

  • Question 698:

    Select the tool appropriate for examining the dynamically linked libraries of an application or malware.

    A. DependencyWalker
    B. SysAnalyzer
    C. PEiD
    D. ResourcesExtract

  • Question 699:

    Cloud forensic investigations impose challenges related to multi-jurisdiction and multi-tenancy aspects. To have a better understanding of the roles and responsibilities between the cloud service provider (CSP) and the client, which document should the forensic investigator review?

    A. National and local regulation
    B. Service level agreement
    C. Key performance indicator
    D. Service level management

  • Question 700:

    What will the following command accomplish in Linux? fdisk /dev/hda

    A. Partition the hard drive
    B. Format the hard drive
    C. Delete all files under the /dev/hda folder
    D. Fill the disk with zeros

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V10 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.