EC-COUNCIL 312-49V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49V8 Online Questions & Answers

• Question 91:

  According to US federal rules, to present a testimony in a court of law, an expert witness needs to furnish certain information to prove his eligibility. Jason, a qualified computer forensic expert who has started practicing two years back, was denied an expert testimony in a computer crime case by the US Court of Appeals for the Fourth Circuit in Richmond, Virginia. Considering the US federal rules, what could be the most appropriate reason for the court to reject Jason's eligibility as an expert witness?

  A. Jason was unable to furnish documents showing four years of previous experience in the field
  B. Being a computer forensic expert, Jason is not eligible to present testimony in a computer crime case
  C. Jason was unable to furnish documents to prove that he is a computer forensic expert
  D. Jason was not aware of legal issues involved with computer crimes
  A. Jason was unable to furnish documents showing four years of previous experience in the field

• Question 92:

  At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

  A. True
  B. False
  A. True

• Question 93:

  What is a first sector ("sector zero") of a hard disk?

  A. Master boot record
  B. System boot record
  C. Secondary boot record
  D. Hard disk boot record
  A. Master boot record

• Question 94:

  FAT32 is a 32-bit version of FAT file system using smaller clusters and results in efficient storage capacity. What is the maximum drive size supported?

  A. 1 terabytes
  B. 2 terabytes
  C. 3 terabytes
  D. 4 terabytes
  B. 2 terabytes

• Question 95:

  Deposition enables opposing counsel to preview an expert witness's testimony at trial. Which of the following deposition is not a standard practice?

  A. Both attorneys are present
  B. Only one attorneys is present
  C. No jury or judge
  D. Opposing counsel asks questions
  B. Only one attorneys is present

• Question 96:

  Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where, "X" represents the _________.

  A. Drive name
  B. Sequential number
  C. Original file name's extension
  D. Original file name
  A. Drive name

• Question 97:

  Which root folder (hive) of registry editor contains a vast array of configuration information for the system, including hardware settings and software settings?

  A. HKEY_USERS
  B. HKEY_CURRENT_USER
  C. HKEY_LOCAL_MACHINE
  D. HKEY-CURRENT_CONFIG
  C. HKEY_LOCAL_MACHINE

• Question 98:

  Which is not a part of environmental conditions of a forensics lab?

  A. Large dimensions of the room
  B. Good cooling system to overcome excess heat generated by the work station
  C. Allocation of workstations as per the room dimensions
  D. Open windows facing the public road
  D. Open windows facing the public road

• Question 99:

  Raw data acquisition format creates ____________of a data set or suspect drive.

  A. Simple sequential flat files
  B. Segmented files
  C. Compressed image files
  D. Segmented image files
  A. Simple sequential flat files

• Question 100:

  How do you define Technical Steganography?

  A. Steganography that uses physical or chemical means to hide the existence of a message
  B. Steganography that utilizes written natural language to hide the message in the carrier in some non- obvious ways
  C. Steganography that utilizes written JAVA language to hide the message in the carrier in some non- obvious ways
  D. Steganography that utilizes visual symbols or signs to hide secret messages
  A. Steganography that uses physical or chemical means to hide the existence of a message